Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: zVtru0clMj4ZC7rjGfRuYj/AHvvZggL/eQ4DSc6lyW4=
Subject key identifier: 18:4D:09:69:8F:65:31:E6:22:56:0C:C5:41:B5:B3:3E:F8:75:62:CB
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 01976A05B52846B78A550994A1302447C6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0BA1
Signing time: Fri 13 Jun 2025 16:00:48 +0000
Manifest this update: Fri 13 Jun 2025 16:00:48 +0000
Manifest next update: Sat 14 Jun 2025 16:00:48 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: 8A3FYOmk3wUb4hLcDxE3i/mXf58Qg/8Ykcz10IRviuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b5:28:46:b7:8a:55:09:94:a1:30:24:47:c6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jun 13 16:00:48 2025 GMT
Not After : Jun 14 16:00:48 2025 GMT
Subject: CN=184d09698f6531e622560cc541b5b33ef87562cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:57:ef:1c:c3:9d:8d:12:db:14:de:e1:f9:
3f:6c:42:cc:3f:63:cc:29:56:cf:e6:42:df:ed:2e:
f6:7a:5c:72:08:42:31:12:c7:4a:c5:c5:32:01:f4:
4a:a9:c0:2d:bb:b3:c9:b6:ef:07:65:80:35:bb:86:
3d:ab:46:43:1d:90:9f:96:bf:88:bf:84:00:d2:6d:
f5:5a:2c:d5:b0:db:55:be:8d:37:9f:af:c3:b8:9d:
d1:dc:1e:b7:82:a9:05:51:46:7f:47:16:1e:7e:a4:
bb:7e:af:1e:40:97:9b:87:08:85:34:6f:69:f0:88:
17:5f:8f:25:99:27:d4:3e:5f:50:89:e4:60:7b:33:
88:d9:4b:2a:b8:c5:c0:d8:42:8d:75:fa:29:51:fc:
25:46:ff:3d:fe:15:0a:d3:88:e0:a8:05:e3:7b:c3:
85:41:5c:5b:e1:95:90:00:63:4a:6b:09:89:44:84:
d3:1e:3c:42:42:af:45:26:46:e7:90:d1:40:cb:66:
74:c8:d2:16:c2:9d:15:d9:68:28:a0:96:e8:9e:af:
ec:b4:ea:ce:2c:79:85:cc:82:fc:52:12:85:4c:8a:
b6:10:f3:c6:4c:99:21:02:d8:03:cb:db:93:46:61:
08:90:5b:42:34:c3:f9:a3:e0:cf:5e:6f:78:c1:0f:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:09:69:8F:65:31:E6:22:56:0C:C5:41:B5:B3:3E:F8:75:62:CB
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:33:89:7b:1d:65:8f:97:04:b5:e9:3f:52:23:eb:f5:e2:
f8:70:5a:95:a5:1a:78:e8:43:be:3a:b5:d9:d3:f6:9c:d1:9d:
c0:f3:ad:33:7d:da:aa:bb:e4:07:69:82:e8:c8:eb:bb:7d:a6:
b8:25:7b:df:d3:03:e9:cd:9d:69:df:76:2b:03:92:32:98:18:
ff:3e:5b:05:04:5b:d1:e3:c6:13:e4:bb:f0:44:16:68:d0:4a:
ab:54:9f:52:cf:34:76:37:6a:b7:19:c7:d9:7c:33:4f:b6:2d:
6d:fa:b4:7c:b5:34:0a:7c:ab:f6:4c:37:36:b9:55:f0:73:92:
90:f3:2f:4f:37:a0:20:a3:51:55:48:03:5e:c8:12:46:9c:18:
0a:ba:0f:e5:0d:b2:b2:b9:fc:37:f0:6c:a0:5c:b9:6c:92:54:
cf:21:b7:51:42:36:32:a6:bb:25:29:16:99:67:de:22:82:bd:
72:3d:db:f5:a4:d5:8f:13:ad:4a:9a:17:fb:5a:a0:a6:8f:8f:
ef:28:eb:c2:f3:3c:84:94:cd:a8:3b:e8:f5:13:fe:ad:a9:16:
46:97:5f:6b:33:0f:ac:bd:62:1e:21:85:b4:2b:be:46:e5:fd:
ce:2c:12:d5:16:82:51:c9:41:70:06:12:e9:f3:dc:4b:c7:6c:
96:74:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:08 2025 by rpki-client