Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: mCeA4rDMDa3ffsjzaCUFHHyiZZKZZli7guHVzNlNwx0=
Subject key identifier: D4:9A:55:18:20:D5:41:1B:F6:EA:A4:CC:B8:1D:CB:3A:A6:B1:EB:24
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 0197493126A52B2650F80D71A48305676695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0B90
Signing time: Sat 07 Jun 2025 07:00:47 +0000
Manifest this update: Sat 07 Jun 2025 07:00:47 +0000
Manifest next update: Sun 08 Jun 2025 07:00:47 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: TavE0EtcxxQ70eXb2EvrHsjw82JfxTd2N6UbDdaFVAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:26:a5:2b:26:50:f8:0d:71:a4:83:05:67:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jun 7 07:00:47 2025 GMT
Not After : Jun 8 07:00:47 2025 GMT
Subject: CN=d49a551820d5411bf6eaa4ccb81dcb3aa6b1eb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:16:a3:cb:bc:6c:01:a2:5d:41:7f:75:4b:
a6:8c:97:98:c6:77:17:62:ee:f8:8e:77:ae:9c:a7:
12:3c:89:ce:f0:e7:d1:87:b7:41:37:c9:b3:b9:fd:
b0:f4:7c:bd:94:99:e6:89:23:04:8f:73:33:7c:e7:
17:9f:d8:25:42:b8:c5:89:4f:7b:7d:b1:36:e1:c0:
5d:3d:0a:99:03:26:57:4b:bc:ab:f0:6f:d7:d4:71:
7f:66:03:2e:24:11:4d:13:fa:12:8d:b8:e8:eb:7c:
dd:a1:f5:e4:1b:2d:12:31:5b:9e:03:67:a2:04:2d:
d1:08:af:8b:0a:68:89:b1:b0:b0:fa:61:ac:20:26:
68:e3:32:58:ad:12:0e:2c:75:ca:6a:01:03:c9:d0:
e5:ed:3c:0c:e1:69:80:d6:07:31:d2:06:e0:89:d1:
88:6f:0d:22:c0:0a:81:78:28:66:d2:99:5b:9e:b0:
0f:0c:52:66:63:e4:e5:97:e5:b9:3b:67:86:d3:96:
2a:7d:72:6b:98:84:da:0b:1f:7a:bd:24:4a:2f:c9:
38:09:9f:cd:a1:3f:c2:e8:59:65:9a:d8:14:b2:e9:
6f:ba:aa:0f:26:85:51:98:81:f1:93:c5:f4:85:8f:
7c:68:4a:3d:56:07:e7:37:35:e4:bb:64:32:f7:f2:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:55:18:20:D5:41:1B:F6:EA:A4:CC:B8:1D:CB:3A:A6:B1:EB:24
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c1:91:a9:a9:84:3c:b4:ed:5f:89:d6:9c:c9:b0:6c:4e:71:
d3:51:e2:79:20:c5:87:ff:11:53:0d:17:eb:a8:71:31:33:4a:
c8:e7:ba:e9:15:29:af:bc:57:73:c7:c2:75:51:14:9d:2a:8a:
59:5a:cf:96:1d:61:e3:0a:1d:af:9a:ab:00:c4:a5:ee:2e:4b:
0e:02:24:a9:c9:a7:23:02:50:a1:e3:79:c1:e4:64:64:3c:d2:
82:dd:4e:43:8f:74:6b:3a:9f:8d:e7:86:69:4f:48:88:f1:a6:
bc:fd:31:55:2d:38:2d:0d:16:93:f2:d6:6e:6c:70:96:57:6a:
52:4c:bb:f0:a2:39:cd:39:66:8d:0a:45:87:f7:48:7b:72:59:
45:88:c9:d3:0e:2e:58:91:bc:3d:17:67:6e:63:4b:5d:e2:49:
9d:e2:c4:c7:12:ea:b8:66:21:a9:86:f7:18:dc:06:87:be:4b:
69:e3:8a:82:e1:21:a5:97:3a:2e:79:c6:ae:f1:a1:44:d7:77:
2d:b3:a8:61:52:91:08:0c:54:e5:8f:62:ee:9d:71:c3:09:37:
7e:4b:93:20:7d:76:00:de:42:17:72:6e:d0:da:d2:82:6f:c9:
93:f6:ce:8f:7f:d0:19:66:99:b0:58:b3:56:78:1e:8c:a1:d0:
36:33:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:59 2025 by rpki-client