Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: gxLTNHLOUUPK0ojz/F+wV5JmalJuHk2qTygtynK87Ks=
Subject key identifier: 4C:FC:9D:CB:19:FC:1E:C5:62:BA:7B:02:3A:78:D8:33:9B:3E:BB:F9
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 01987298686F5DFAE08CB2468B7114E74873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0C2A
Signing time: Mon 04 Aug 2025 01:00:47 +0000
Manifest this update: Mon 04 Aug 2025 01:00:47 +0000
Manifest next update: Tue 05 Aug 2025 01:00:47 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: kfv5Y4ulnH1zoi+ALe67/9qHblWGoaD1qNDAe9o/OAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:68:6f:5d:fa:e0:8c:b2:46:8b:71:14:e7:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Aug 4 01:00:47 2025 GMT
Not After : Aug 5 01:00:47 2025 GMT
Subject: CN=4cfc9dcb19fc1ec562ba7b023a78d8339b3ebbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:02:be:64:64:58:73:f1:b5:5f:bd:a4:3b:
0c:0f:77:ec:55:36:87:9e:ff:e8:5d:0e:66:07:36:
64:27:b7:be:cf:02:5e:2b:90:83:2e:55:29:cc:0a:
bc:9c:55:84:c6:29:5b:ce:5f:9c:33:b2:1b:9a:73:
75:7e:0e:23:5b:23:7d:15:a4:0b:81:13:af:b5:97:
23:ae:98:52:2a:ea:80:a7:d0:32:e8:cb:d6:81:2c:
cd:9a:b8:60:3a:b5:2a:57:71:8b:17:ba:0a:bb:15:
8d:81:3c:47:8a:1b:17:18:50:3a:6f:1b:99:5c:b3:
df:09:88:11:62:f1:83:ef:74:e9:5d:f1:5b:b6:79:
63:2e:8d:cf:49:b2:ef:7d:96:e4:2d:43:fd:6f:61:
80:9b:a5:7c:b2:b0:8b:ef:3a:32:bb:66:1e:79:cc:
8a:7d:e4:79:35:4b:9f:cd:fa:7a:e4:0c:4b:72:a3:
1d:68:d2:e8:d9:56:8f:57:09:bf:ca:78:0d:bf:37:
66:aa:17:f0:00:6b:d1:b2:d2:20:ca:25:d0:9e:09:
fd:51:83:42:da:0e:77:ea:df:99:bb:0b:54:73:60:
1a:b2:23:1f:3a:41:72:89:97:b3:30:9e:88:90:bc:
02:17:bb:6e:4c:9b:2e:b9:f4:49:7a:2a:c0:3d:c0:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:9D:CB:19:FC:1E:C5:62:BA:7B:02:3A:78:D8:33:9B:3E:BB:F9
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ee:90:b5:5e:0e:4d:d1:fd:f7:63:b7:ad:3d:86:fc:c7:6d:
35:9f:44:89:24:9f:27:81:cc:51:dd:90:46:c4:ec:5c:ec:63:
3e:20:c4:40:e4:63:b2:de:ce:01:19:7e:88:5b:aa:58:0d:33:
54:d4:44:93:a7:4e:0a:13:ff:cb:77:cf:57:a3:5a:4a:f3:60:
a6:a6:11:33:76:32:8c:6a:9e:72:a0:97:62:99:8b:f3:3f:e5:
98:99:20:d1:f0:8c:58:c8:cf:78:8f:bb:81:33:ee:08:92:ac:
3d:e4:30:fa:c8:a1:fa:8d:25:29:04:41:44:36:0b:f5:09:21:
db:c8:27:80:2d:12:95:2d:fd:fb:1c:26:16:dc:4e:9c:8e:a2:
81:13:ef:02:2f:92:df:cf:7c:a4:db:20:88:55:36:85:e1:3c:
3a:a5:cf:ed:29:0d:d0:a2:4b:34:fc:bf:9e:fb:ca:ac:95:60:
f0:ca:d1:43:6f:ad:7b:16:b2:be:5b:bf:89:ad:b4:13:3d:49:
7f:4f:5a:21:59:1e:af:b0:e8:b8:d8:62:9c:e5:9c:5c:01:42:
ca:af:07:72:e9:e9:ab:13:4b:a6:7e:21:54:29:22:f1:53:77:
a1:c9:29:e7:c6:5c:07:db:81:18:c9:32:0f:e2:e2:af:29:87:
fe:19:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:48 2025 by rpki-client