Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: R6mkHMBqXPeiHnbbuEtGXuAoxuU+Hm1WskDbKmEiIbY=
Subject key identifier: 45:B7:A6:3F:5C:7A:C4:3B:0B:ED:29:6A:4C:8F:43:67:24:57:F2:68
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019A006C7937F1F26E30FF20F2A037C06510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0CF8
Signing time: Mon 20 Oct 2025 07:01:40 +0000
Manifest this update: Mon 20 Oct 2025 07:01:40 +0000
Manifest next update: Tue 21 Oct 2025 07:01:40 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: Y/z1beYu8ik1KNclrXCfy9umbTuWfTjC9hJm2jBwbNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:79:37:f1:f2:6e:30:ff:20:f2:a0:37:c0:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Oct 20 07:01:40 2025 GMT
Not After : Oct 21 07:01:40 2025 GMT
Subject: CN=45b7a63f5c7ac43b0bed296a4c8f43672457f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:57:e7:d5:bb:f8:77:ed:19:d7:2e:16:f8:
7e:4b:83:df:b9:39:70:90:44:21:b6:ac:ce:20:61:
ac:73:f4:d5:c1:d4:d5:9c:e6:cf:a2:6b:32:c3:04:
7d:b1:f0:bc:2c:3a:86:56:b1:5c:bd:c7:3f:72:51:
96:7d:6f:d4:95:7b:85:d1:70:c0:b6:ca:ee:03:f9:
38:1d:a2:d4:50:2a:2c:80:c8:33:37:7c:a1:1b:1a:
fe:44:1c:f6:c0:5d:cd:47:b6:c7:ec:c1:89:f3:35:
96:d6:c6:a8:9e:6b:0c:0e:19:5e:d7:76:f8:16:4a:
71:4e:b1:bc:1f:0b:aa:53:d4:db:b1:da:93:f8:28:
90:91:0e:3b:39:fa:db:89:9f:28:8b:08:29:53:9c:
f4:6d:b8:e5:d9:4d:ab:77:7f:93:a6:8c:40:90:1a:
99:ca:47:e1:2a:9f:9a:8e:89:9f:af:04:72:64:16:
1b:a4:54:a8:bd:2a:69:f1:08:ac:63:24:55:76:f9:
40:53:53:65:54:8e:ed:ba:dd:c5:35:52:ae:33:61:
dc:48:47:b6:87:9c:11:67:d3:02:02:bf:e4:63:2d:
3d:5d:7c:4b:f8:8e:78:7d:d3:15:88:ec:22:78:98:
7a:1b:c5:e6:e3:4e:bc:8c:06:6d:cc:b5:47:17:fc:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:A6:3F:5C:7A:C4:3B:0B:ED:29:6A:4C:8F:43:67:24:57:F2:68
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c4:4b:e2:49:f0:3c:f5:76:07:f1:da:96:99:54:8d:59:9f:
78:71:ae:04:c2:20:0e:63:28:37:97:03:37:a0:6a:75:fd:62:
d6:4c:ad:ce:84:d4:01:d9:8d:a2:13:1a:3a:96:36:10:f8:91:
be:cf:6a:cd:91:c5:d8:0c:2d:4e:f0:c6:b2:ef:07:50:c7:af:
4b:c2:44:c3:7d:5a:d1:7d:70:40:bb:9f:b4:7c:35:d1:a4:6d:
9e:d0:1f:4f:73:c6:e1:45:d6:b2:d1:d9:2d:66:05:56:d1:49:
2f:1a:4a:0d:85:99:13:0e:67:55:d9:df:c5:bd:c8:74:91:dd:
ca:88:23:00:c9:6a:62:e1:d3:40:59:40:9c:4a:3d:82:de:82:
75:15:42:19:2a:1a:eb:03:5c:07:32:2b:8c:be:23:30:53:33:
55:ad:c9:3d:53:ca:e3:d0:99:69:63:13:94:22:33:3c:16:fe:
1f:41:fd:80:e9:dd:a1:90:18:fa:86:a8:15:17:74:73:8e:92:
33:33:08:78:38:f7:38:40:8f:3b:d3:18:98:8c:7a:60:fd:ce:
47:8b:4f:76:44:43:45:ef:3a:11:e2:c3:10:dd:94:2c:fd:03:
f4:bd:07:71:03:8a:c7:64:d6:4d:70:11:67:37:6e:b8:6e:9e:
0d:ec:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:31 2025 by rpki-client