Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: 8awOSGWWGZJgtk9rZW2+Yp5RuMjZjKgWiGusm6+fuvM=
Subject key identifier: 30:47:C1:16:2A:D6:D8:F5:FB:2F:5D:AF:3C:33:A5:59:40:86:45:75
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019A24E67CBBE39973FA6615A4B0B8B9FBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0906
Signing time: Mon 27 Oct 2025 09:01:16 +0000
Manifest this update: Mon 27 Oct 2025 09:01:16 +0000
Manifest next update: Tue 28 Oct 2025 09:01:16 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: bTwVGk3y9ur0dkZfKNQN7nD3YqzbC1fEJS4emqqQoGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:7c:bb:e3:99:73:fa:66:15:a4:b0:b8:b9:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Oct 27 09:01:16 2025 GMT
Not After : Oct 28 09:01:16 2025 GMT
Subject: CN=3047c1162ad6d8f5fb2f5daf3c33a55940864575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:e5:b9:e0:26:1e:35:85:88:af:73:10:a7:
a3:02:e7:48:83:68:e5:67:f9:52:e8:5c:a7:0e:b8:
09:29:bd:ac:7f:35:74:61:65:bd:fc:14:c7:ab:59:
3f:c0:e3:99:f7:98:ae:31:b1:1a:e4:03:9d:38:82:
9a:64:d7:b9:82:2c:11:48:d3:d0:bd:3b:8a:ed:dd:
be:da:6c:2e:c6:87:3a:79:2d:c1:cd:83:67:01:53:
48:03:db:4f:45:eb:7a:02:7a:9b:55:63:7c:da:9e:
d2:4d:da:34:c4:78:fb:9a:0d:b8:8b:68:9f:29:57:
67:f7:f2:f4:1e:77:1e:d2:2a:2a:cc:fb:df:68:f5:
d5:47:5a:64:9d:8c:d0:22:25:62:a9:92:b4:3a:38:
8e:d4:bd:40:81:34:de:64:9e:94:27:f1:d9:25:d9:
83:30:48:b8:05:81:0d:c9:91:ce:8e:eb:d5:54:ee:
d1:d3:4a:ec:24:b9:a1:5b:a8:b8:be:d3:f8:83:a2:
4a:f3:7e:b3:ed:68:28:39:a4:88:fe:09:40:1f:7c:
36:83:c8:1e:5c:bb:17:76:34:d1:02:86:82:03:93:
be:5a:12:fd:f5:0a:15:80:1e:f8:4d:81:af:bc:a4:
1d:3e:2c:fe:9b:fa:86:20:a1:c9:51:a7:ac:66:3d:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:C1:16:2A:D6:D8:F5:FB:2F:5D:AF:3C:33:A5:59:40:86:45:75
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d1:87:1d:76:92:f2:3a:a5:29:ed:c3:24:cc:01:42:3c:8d:
9d:35:61:26:b1:73:54:fb:1a:b6:d8:81:61:15:e8:51:98:8a:
6f:6b:38:71:8f:62:0b:5b:b7:83:42:70:4b:0f:0d:bd:2d:d7:
71:e8:04:f6:70:52:78:ce:89:82:28:27:52:de:2c:c5:a4:0b:
09:bb:a1:42:10:56:6b:9c:0c:7c:3e:39:1b:22:00:31:0b:1e:
be:50:26:20:47:40:2c:1b:bf:6f:c7:83:c6:1d:d8:a0:a8:f9:
aa:9c:16:9f:ba:05:2b:10:4f:dd:cc:92:cb:7e:07:be:4d:b7:
35:8a:4d:0c:cc:cb:bc:11:d5:3e:77:ff:98:a9:0c:f4:52:13:
a8:2e:d9:0b:16:c8:95:b3:67:cc:23:2e:4d:fa:5d:7c:b8:d5:
55:66:60:64:d0:3f:98:c4:94:f4:97:6f:c4:fd:3a:da:ca:fe:
41:87:63:44:67:47:1e:8e:4f:02:92:e4:9a:14:30:41:b1:41:
f3:9c:80:fc:36:80:0c:f9:5f:62:8b:50:5f:3e:10:82:93:c9:
ad:95:15:24:23:88:99:9e:83:94:30:5d:40:d0:28:db:a3:ca:
ef:b5:0d:06:94:4c:2f:a4:74:bc:c0:ae:2d:81:ec:e1:1e:c1:
6b:b5:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:27:52 2025 by rpki-client