Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: rmTygPucbiLbKpeERYmk4m7MZNju48ZtF0rAKHOqpVA=
Subject key identifier: 31:16:79:6A:B8:F4:ED:91:C7:40:DE:99:C1:06:FC:39:94:8D:BD:27
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 01974B1FA6660BF2A137EE03D379F604ED80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0588
Signing time: Sat 07 Jun 2025 16:00:54 +0000
Manifest this update: Sat 07 Jun 2025 16:00:54 +0000
Manifest next update: Sun 08 Jun 2025 16:00:54 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: TTnj8C2aGsVZ2amPylcFXqWYsNdZfcYtWt6go13OyY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:a6:66:0b:f2:a1:37:ee:03:d3:79:f6:04:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Jun 7 16:00:54 2025 GMT
Not After : Jun 8 16:00:54 2025 GMT
Subject: CN=3116796ab8f4ed91c740de99c106fc39948dbd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:77:28:28:b3:71:7a:0a:ee:27:77:58:e6:
8d:15:df:2c:68:81:65:a3:e0:07:89:b2:5e:78:52:
dc:01:58:3e:50:f9:8e:a3:28:01:8c:dc:e6:04:6f:
ea:9d:09:94:77:40:22:c4:15:62:91:ff:f7:a5:ed:
0b:d9:36:d9:9e:31:be:74:d3:13:0b:91:00:72:9c:
73:ab:52:01:db:a8:ed:0f:d4:b3:32:fe:51:af:92:
db:47:49:18:9d:29:61:cf:70:f3:c6:0b:94:de:fb:
70:e2:67:1f:30:a1:54:2f:27:1c:f3:84:3a:3d:e0:
f9:90:fc:19:13:3b:49:2c:bb:ed:ae:bf:2d:4b:8f:
21:42:0a:39:4b:2f:0e:02:a2:b3:e0:8c:1d:fa:d0:
17:cb:e9:0c:d2:22:f4:66:5b:2e:5d:14:39:e7:99:
21:64:f4:f5:e7:d2:8b:89:26:b6:4b:7d:8e:ca:ce:
3f:48:f9:b2:78:74:c1:79:ce:e6:3a:42:6f:a4:4d:
14:ae:c1:cf:4f:96:54:23:17:d3:76:6d:cb:31:a8:
c0:85:43:cf:dc:6b:44:6f:d1:8b:1c:4e:09:5b:73:
57:5f:57:e7:b1:0f:21:e9:d3:2f:ef:3a:88:f1:c0:
fc:d7:87:a8:f7:5c:dc:26:8a:ab:3d:fc:61:f0:3f:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:79:6A:B8:F4:ED:91:C7:40:DE:99:C1:06:FC:39:94:8D:BD:27
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:34:56:9e:2a:e0:0d:9c:86:3d:a6:01:3f:f1:a5:ab:e4:
b2:00:12:d4:31:77:c0:f0:43:82:50:dc:30:08:57:e2:42:ae:
46:06:ce:a4:56:50:0b:13:ec:7a:37:a5:a3:bd:49:c7:11:64:
b4:17:ff:d1:1b:b2:e8:37:1f:ef:7d:56:50:d4:ae:22:6d:6b:
61:91:2b:55:bc:bf:39:48:6b:23:0f:40:6b:17:b7:db:17:36:
d4:2b:27:32:69:30:86:7b:35:29:60:ba:23:00:92:38:15:54:
71:09:b2:e6:ac:4b:2a:d7:f4:26:c6:48:10:14:66:0b:63:9f:
f0:53:95:5e:38:d1:2c:5a:81:7a:31:4d:14:be:00:17:bb:36:
ff:d6:3e:f6:2a:22:1a:46:2f:c3:28:3b:8d:c9:12:2a:ff:f7:
c0:4b:14:e1:26:b5:5e:dc:7f:3e:0b:b7:fd:98:05:12:b8:b6:
d7:ca:52:bb:c7:5c:49:2b:97:56:42:99:ed:62:91:3d:db:46:
82:c9:f0:ef:8b:de:3c:4a:e0:b6:51:a7:e8:99:d5:8e:65:92:
32:5f:27:80:b5:85:7d:a4:12:89:2f:7f:5c:19:d4:a5:0b:6e:
b0:df:31:ab:8d:c3:bd:c8:1a:f0:08:b1:b0:d0:48:10:42:0f:
d0:d0:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:27 2025 by rpki-client