Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: bF3B5ch5/bB+14NZSWLBFE1ByP6HZ3Lt3PcWOb1BO6o=
Subject key identifier: BC:C7:69:63:C9:5C:81:0F:D3:8F:06:79:F3:B8:5F:83:01:56:27:15
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 01992443AE9E10642BD78C9A1D7A95FE0AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0C86
Signing time: Sun 07 Sep 2025 13:00:39 +0000
Manifest this update: Sun 07 Sep 2025 13:00:39 +0000
Manifest next update: Mon 08 Sep 2025 13:00:39 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: 4I6yAVLj9kIX28dQYq/8NUPTDqhxvBdf8KbVZ9vx2PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:ae:9e:10:64:2b:d7:8c:9a:1d:7a:95:fe:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Sep 7 13:00:39 2025 GMT
Not After : Sep 8 13:00:39 2025 GMT
Subject: CN=bcc76963c95c810fd38f0679f3b85f8301562715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:5e:a3:a5:2a:16:f4:08:e8:b5:24:69:21:
6e:c7:36:b7:ea:88:9b:69:10:88:86:21:e4:9e:a0:
87:a5:be:f4:7b:da:44:b2:19:ed:c7:6f:91:82:10:
c5:fb:75:10:53:72:ce:f3:f4:c8:be:17:8e:55:d6:
de:1e:77:81:82:fc:8c:a8:5d:42:eb:c4:f3:03:05:
7f:6a:e8:51:8c:41:55:e0:ad:12:6b:dd:ad:7e:43:
da:f2:f1:48:02:32:55:e7:3a:bd:bb:11:d4:72:7d:
6a:65:e6:41:bc:74:85:f0:88:c2:db:90:64:9b:42:
93:bc:3b:72:32:8b:25:51:9b:e2:1a:94:cb:ce:1b:
e5:42:0a:83:87:c6:23:0a:7d:2f:3e:b3:be:3b:4c:
21:33:c2:f3:dc:4d:84:8e:a1:ea:05:86:5c:91:24:
03:17:21:b6:cf:6c:52:66:a2:0d:8f:d7:da:3f:b2:
7a:ae:40:4e:72:f5:90:af:3b:94:a2:cb:6b:b5:84:
2e:64:ce:7a:cb:e1:7e:53:87:ea:fc:e8:82:39:4d:
96:7c:7e:6f:6a:54:7f:49:0e:36:2c:e9:62:65:b2:
0f:f0:57:b4:2c:3c:0c:03:95:da:11:78:a5:49:21:
34:db:82:57:68:41:f2:e9:62:08:24:4f:60:0b:1e:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:69:63:C9:5C:81:0F:D3:8F:06:79:F3:B8:5F:83:01:56:27:15
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f3:0a:60:48:5a:fe:ae:4f:7b:ba:b7:cb:8e:b1:ec:39:16:
bd:93:c8:1f:0b:40:5b:97:1b:2f:81:a0:88:f3:69:26:2a:91:
0b:67:39:78:b9:ea:b3:5c:e6:14:00:16:2a:40:e5:ec:e7:f8:
13:bd:c9:72:a7:3a:7a:91:0e:e2:49:c6:4a:f0:98:15:fd:81:
08:8d:57:b4:24:f2:ac:df:f9:d7:f8:ba:a4:c5:15:ce:a0:79:
59:85:31:38:6f:ba:45:63:eb:89:2e:88:76:9c:f4:3d:65:0a:
7f:02:d1:b2:d8:58:52:61:8b:64:17:01:9d:eb:cd:6a:d9:2d:
1c:5d:c4:70:85:3e:f6:4e:04:46:f1:bf:0b:da:74:3d:3d:fc:
9e:d0:56:13:b5:ff:4a:3b:e6:a8:44:f7:7f:d3:b4:c9:f8:ed:
33:ec:c2:29:d4:f3:19:92:a1:62:ff:69:13:5d:dd:11:b0:8e:
83:22:0d:3f:5f:ab:47:69:89:c8:b7:21:32:b2:47:d8:45:a9:
c6:35:bc:d1:03:a8:c9:4a:6a:6e:ce:49:7b:4f:68:54:48:1c:
5d:7c:94:f6:4b:53:f4:3b:cf:61:6a:03:d1:17:86:f2:5e:6c:
4b:47:dd:3b:d2:2d:3f:23:73:02:92:1b:2c:50:cb:cd:ec:b3:
f2:f2:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:37 2025 by rpki-client