Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: 4PUJ0KO1nLURyAgPGtQ7nVEivEd0yu/wI01wzh88lqo=
Subject key identifier: 60:C6:88:7A:A8:B8:55:0E:AB:CE:68:B9:48:D0:87:55:B7:8C:7B:85
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 0198D5159A6E4463AF07931D1FF68C8E04E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0C5D
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: pXNRZmV4zt1fNdQJZ3V6RLUHYKTvixYAy4G8XMQlSas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9a:6e:44:63:af:07:93:1d:1f:f6:8c:8e:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=60c6887aa8b8550eabce68b948d08755b78c7b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:16:15:54:88:a1:56:69:92:37:ed:88:d0:
f9:64:e7:f1:ee:ae:99:9b:0b:6b:71:f3:a8:8c:a2:
1b:aa:99:50:2c:8f:6a:2f:ad:4f:4f:76:74:ab:eb:
6e:d4:5c:50:a1:e5:a2:79:7f:a8:73:5f:ef:a8:1e:
82:ce:a0:eb:80:26:b2:c1:ca:b2:a3:4b:4a:6d:38:
6e:99:e6:db:63:5c:66:07:11:78:5e:fa:71:b5:b4:
8f:74:3b:37:7c:a5:86:82:42:c7:52:96:07:9d:cf:
5b:6a:be:1d:ae:7b:4e:7f:3a:5f:c9:91:c3:9b:c5:
81:84:1d:3b:d3:0d:66:20:be:44:fb:a0:58:0b:37:
2a:40:f2:47:4d:f7:1f:29:0b:16:b1:34:c5:ad:98:
99:f5:1c:24:0e:75:52:d5:3c:16:20:c3:01:60:d6:
cc:a1:32:c9:f9:c4:af:c2:8a:75:ef:8a:5a:39:39:
67:f4:b9:54:ff:bc:d9:83:38:a0:41:d4:a8:e3:dc:
22:b5:18:c2:ef:e8:ee:e1:a3:33:5b:01:7e:51:86:
63:3f:73:d4:7b:77:9c:06:52:ee:3f:a8:41:f4:89:
59:be:02:08:35:e7:e8:46:cb:e3:32:d6:b0:28:d4:
7b:0a:d8:00:c0:ee:18:06:61:2b:9e:f1:58:3a:6c:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:88:7A:A8:B8:55:0E:AB:CE:68:B9:48:D0:87:55:B7:8C:7B:85
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:83:21:e5:32:6d:17:df:e9:77:c7:bc:a2:13:cc:99:33:
18:df:04:2a:d0:83:6d:ab:f1:5c:79:24:a5:95:74:1f:f6:f2:
3d:6d:81:70:22:bd:14:7e:48:48:a8:b0:34:86:5c:85:d5:14:
47:66:46:36:77:a8:ba:61:e2:ed:30:ec:ce:99:fd:01:eb:e0:
a7:81:fa:f5:a4:12:10:58:ad:63:94:39:1b:48:25:48:2e:5a:
33:a1:c3:83:04:2e:2f:95:45:f5:cf:07:23:bd:6d:d1:b3:bb:
e5:a5:1e:96:b1:c8:e0:c8:70:72:05:66:b6:de:52:7e:5f:36:
d6:c9:d7:4f:7f:56:da:57:b9:19:c1:68:64:f2:c3:e8:d7:73:
b4:88:c3:c9:20:69:d4:6e:86:5f:31:3a:35:66:72:58:c9:2a:
00:08:5c:7d:f1:d3:3a:58:0c:89:2d:cc:a7:46:74:7e:ea:ca:
63:61:a1:f0:60:7b:24:43:0d:88:0a:ee:35:13:85:82:2d:d3:
73:d4:1c:c0:e7:49:d2:a5:01:4e:b6:37:56:c0:66:27:13:4d:
a1:9f:20:bd:84:bc:cf:b8:8e:8c:bf:bc:2d:ad:2a:ca:13:f8:
9f:53:52:2a:ce:fe:6a:2d:28:cf:69:69:d9:7f:9b:a3:84:49:
c1:a4:06:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZpuRGOvB5MdH/aMjgTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzA1YWZhMGRjOWE1ZjhmNjE4YzNlZDJlZWM2NzJlYzM4
ZjZmZWYwHhcNMjUwODIzMDQwMDE5WhcNMjUwODI0MDQwMDE5WjAzMTEwLwYDVQQD
Eyg2MGM2ODg3YWE4Yjg1NTBlYWJjZTY4Yjk0OGQwODc1NWI3OGM3Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuywWFVSIoVZpkjftiND5ZOfx7q6Z
mwtrcfOojKIbqplQLI9qL61PT3Z0q+tu1FxQoeWieX+oc1/vqB6CzqDrgCaywcqy
o0tKbThumebbY1xmBxF4XvpxtbSPdDs3fKWGgkLHUpYHnc9bar4drntOfzpfyZHD
m8WBhB070w1mIL5E+6BYCzcqQPJHTfcfKQsWsTTFrZiZ9RwkDnVS1TwWIMMBYNbM
oTLJ+cSvwop174paOTln9LlU/7zZgzigQdSo49witRjC7+ju4aMzWwF+UYZjP3PU
e3ecBlLuP6hB9IlZvgIINefoRsvjMtawKNR7CtgAwO4YBmErnvFYOmxjnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDGiHqouFUOq85ouUjQh1W3jHuFMB8GA1UdIwQY
MBaAFGPAWvoNyaX49hjD7S7sZy7Dj2/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYt
MjNlMDk2NTJiM2Q4LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYtMjNlMDk2NTJiM2Q4
LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkGDIeUy
bRff6XfHvKITzJkzGN8EKtCDbavxXHkkpZV0H/byPW2BcCK9FH5ISKiwNIZchdUU
R2ZGNneoumHi7TDszpn9Aevgp4H69aQSEFitY5Q5G0glSC5aM6HDgwQuL5VF9c8H
I71t0bO75aUelrHI4MhwcgVmtt5Sfl821snXT39W2le5GcFoZPLD6NdztIjDySBp
1G6GXzE6NWZyWMkqAAhcffHTOlgMiS3Mp0Z0furKY2Gh8GB7JEMNiAruNROFgi3T
c9QcwOdJ0qUBTrY3VsBmJxNNoZ8gvYS8z7iOjL+8La0qyhP4n1NSKs7+ai0oz2lp
2X+bo4RJwaQG7w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:15 2025 by rpki-client