Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: I9inL37C8lYgNH+EMjXzVFZDM3IQ7bsFHjr1j6z+2z8=
Subject key identifier: EE:3E:ED:8E:BD:58:4D:CA:BD:D9:A4:44:11:FD:14:33:E5:77:3D:2C
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 0197B74539970BD25AEC80E8F3DEA572E93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0BC9
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: Bgeptysopy2pMRr0Mbq+V4i3B+8IBoGa/RuQOxFRYdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:39:97:0b:d2:5a:ec:80:e8:f3:de:a5:72:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=ee3eed8ebd584dcabdd9a44411fd1433e5773d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:4a:5f:dd:d1:92:c3:6f:60:f7:23:7c:89:
a1:48:1c:c5:59:9e:7f:4b:16:79:a1:7d:cb:67:b6:
35:77:eb:76:df:36:e4:0d:24:14:7e:65:e5:34:bb:
70:84:84:c7:de:28:62:53:2d:1d:2f:38:cc:7a:ab:
72:4e:95:5f:f4:06:50:72:75:19:ec:db:d7:0a:92:
8e:7f:a4:72:dc:b9:cc:3b:ea:2d:6c:f2:6a:f1:06:
f8:83:2b:7c:2d:7d:94:19:a0:b0:85:01:c1:fc:3b:
3d:94:bf:7e:d0:5d:2f:5a:13:06:cc:48:e9:71:7a:
04:1e:fc:3a:15:d2:a8:e8:2c:23:72:dd:a2:69:43:
d9:8b:b5:0b:a5:7a:26:a5:1f:c0:53:59:ea:83:84:
a5:ce:5c:53:a1:86:8e:7c:26:7e:b7:22:5f:a1:89:
ce:3b:94:8e:13:17:23:63:69:ae:a4:a5:ea:32:2f:
fa:0f:98:c1:90:19:45:7e:11:18:c0:23:7c:5a:f6:
2c:fe:ac:df:56:5b:74:72:e4:2d:4f:db:29:d0:ea:
cc:1f:d1:75:0b:2a:6d:b3:b7:11:49:33:22:ad:de:
6a:8a:f2:8a:4e:41:31:fd:c4:94:d5:36:c7:93:8b:
a8:c9:bf:e5:d0:b4:69:8e:30:82:09:d8:e1:1d:7e:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:ED:8E:BD:58:4D:CA:BD:D9:A4:44:11:FD:14:33:E5:77:3D:2C
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:92:93:30:0e:eb:1e:92:75:87:2f:f8:86:5c:30:da:6d:f0:
88:7c:ba:91:ad:06:df:cd:bf:5e:f7:77:60:82:8c:eb:ec:e3:
ff:1a:7e:c8:35:8a:08:5a:07:54:bc:90:cb:88:2f:1d:a5:95:
77:43:30:49:18:f2:37:44:68:01:79:a4:98:0a:41:09:43:5a:
2a:82:88:dc:19:70:d1:db:c3:5a:73:46:2f:f6:a1:d6:24:14:
b1:08:5c:01:eb:cc:d3:b8:0c:f8:b7:8b:62:03:ff:19:66:0d:
7d:31:23:f7:93:19:4f:66:20:ad:d5:85:4d:7a:c8:cc:29:58:
3f:27:e2:b5:41:e6:84:6f:53:b7:a7:48:22:a0:94:f8:cf:4d:
1e:c0:54:02:4c:32:df:24:c5:d3:52:f6:53:64:26:01:c0:6b:
fe:7c:57:f2:31:45:e6:ef:2c:d4:9d:df:c8:0d:2e:40:d1:e2:
c2:65:95:ae:a2:69:91:9a:57:cf:45:9a:34:be:b8:42:0e:9c:
6f:43:75:a2:72:43:10:90:b0:b0:7d:37:ff:93:d6:62:7b:12:
8f:bc:3b:3d:83:65:c2:9f:7c:8e:12:0e:fd:8c:4f:d3:58:3d:
1f:54:4f:9a:fd:99:b1:ed:48:47:ce:67:f9:96:bf:d9:87:18:
a5:1f:91:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTmXC9Ja7IDo896lcuk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzA1YWZhMGRjOWE1ZjhmNjE4YzNlZDJlZWM2NzJlYzM4
ZjZmZWYwHhcNMjUwNjI4MTYwMDU2WhcNMjUwNjI5MTYwMDU2WjAzMTEwLwYDVQQD
EyhlZTNlZWQ4ZWJkNTg0ZGNhYmRkOWE0NDQxMWZkMTQzM2U1NzczZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRlKX93RksNvYPcjfImhSBzFWZ5/
SxZ5oX3LZ7Y1d+t23zbkDSQUfmXlNLtwhITH3ihiUy0dLzjMeqtyTpVf9AZQcnUZ
7NvXCpKOf6Ry3LnMO+otbPJq8Qb4gyt8LX2UGaCwhQHB/Ds9lL9+0F0vWhMGzEjp
cXoEHvw6FdKo6Cwjct2iaUPZi7ULpXompR/AU1nqg4SlzlxToYaOfCZ+tyJfoYnO
O5SOExcjY2mupKXqMi/6D5jBkBlFfhEYwCN8WvYs/qzfVlt0cuQtT9sp0OrMH9F1
Cypts7cRSTMird5qivKKTkEx/cSU1TbHk4uoyb/l0LRpjjCCCdjhHX74gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4+7Y69WE3KvdmkRBH9FDPldz0sMB8GA1UdIwQY
MBaAFGPAWvoNyaX49hjD7S7sZy7Dj2/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYt
MjNlMDk2NTJiM2Q4LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYtMjNlMDk2NTJiM2Q4
LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpKTMA7r
HpJ1hy/4hlww2m3wiHy6ka0G382/Xvd3YIKM6+zj/xp+yDWKCFoHVLyQy4gvHaWV
d0MwSRjyN0RoAXmkmApBCUNaKoKI3Blw0dvDWnNGL/ah1iQUsQhcAevM07gM+LeL
YgP/GWYNfTEj95MZT2YgrdWFTXrIzClYPyfitUHmhG9Tt6dIIqCU+M9NHsBUAkwy
3yTF01L2U2QmAcBr/nxX8jFF5u8s1J3fyA0uQNHiwmWVrqJpkZpXz0WaNL64Qg6c
b0N1onJDEJCwsH03/5PWYnsSj7w7PYNlwp98jhIO/YxP01g9H1RPmv2Zse1IR85n
+Za/2YcYpR+Rwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:27 2025 by rpki-client