Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File: Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier: HJdzexxneEHa+nPDFXn62PYjqGMHKThbBmKj68k+AiA=
Subject key identifier: 23:12:16:97:08:93:2E:D1:CE:A1:CC:CE:66:96:0E:72:5C:61:D5:32
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial: 019A72934D81854BAEBB91EF2708EA6061FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number: 0CB5
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: KqFYxEWrdBP5_WdyXRa-ITRyV24.roa (hash: vqxQtdasBJcl6VgvYzPzoC8JKGZWIRjtdhf0lDZH8tE=)
2: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: xrsjSyO9d7idSIc3LNqgFix0UBjiz074tbWmqiRm6mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4d:81:85:4b:ae:bb:91:ef:27:08:ea:60:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=2312169708932ed1cea1ccce66960e725c61d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:e0:ee:fc:c0:7f:89:51:25:28:9a:2b:fe:
b7:76:13:74:39:de:41:df:e0:73:77:1b:bc:66:9e:
ec:fe:a1:00:f6:13:7c:f3:2f:1f:fb:fc:4c:43:a7:
c6:03:51:dd:02:9b:ed:d9:c6:60:c9:e9:12:71:58:
d3:23:71:41:6f:32:10:d9:f9:3f:3b:7b:e0:25:46:
84:48:99:5d:f7:72:7b:60:c4:b6:4d:ca:ba:f3:5c:
f0:d2:8f:d2:60:93:d0:96:f0:d9:41:c5:71:b7:5b:
8c:12:45:ef:d6:93:38:87:58:ab:5c:8a:fc:be:e3:
fb:4e:c3:04:a6:07:4f:f7:14:aa:35:a8:e5:50:3d:
ba:a2:40:91:11:9b:30:6d:a2:b5:bd:76:0f:09:a6:
2b:70:ec:6d:34:76:73:da:e7:43:b8:81:86:71:1f:
3e:6b:e8:56:1a:42:3b:0a:26:98:3d:df:31:84:09:
29:da:d7:12:3c:c4:fb:30:1f:c3:11:c2:15:6f:c9:
d1:8b:2d:de:ae:5e:ec:7a:fc:b0:da:fe:e6:4b:3a:
15:ae:a9:a1:65:9d:17:0d:13:64:90:56:55:b5:98:
82:b1:6c:95:b9:d7:93:d1:6d:ab:c2:6d:43:bd:4b:
f8:b0:41:08:f5:91:9f:ad:1f:88:46:2e:4b:58:41:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:16:97:08:93:2E:D1:CE:A1:CC:CE:66:96:0E:72:5C:61:D5:32
X509v3 Authority Key Identifier:
keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:42:18:3d:93:26:53:bf:c5:d0:96:a7:f0:e8:05:67:fc:
17:a0:50:fe:af:ac:89:4c:d4:e0:ee:7c:b3:4e:3d:85:9d:85:
0b:f3:98:7b:41:88:fe:07:a4:fd:34:19:34:8f:f3:f4:52:83:
3c:99:1b:c6:97:f4:4f:90:ee:91:7c:6c:55:10:5c:a8:d0:29:
fa:4e:be:75:26:92:05:e8:53:0b:2c:77:30:ea:6c:0c:e7:e0:
0c:94:f8:63:1b:b4:fe:f5:fe:cd:d7:fe:6f:22:bf:f2:a8:70:
71:e3:58:d2:f2:2c:19:e0:48:53:ce:fe:9c:ce:af:3c:a7:a4:
08:d4:e6:75:1c:4c:7e:75:26:4c:73:11:09:43:2b:30:bc:fe:
21:39:91:22:22:e3:32:36:6b:92:5e:f4:7d:25:6f:53:f0:1d:
6b:da:c3:5a:15:5c:9d:64:ca:be:5c:bf:02:67:d1:ec:4f:eb:
7d:17:9a:6b:c9:36:29:34:46:6b:4a:c9:d2:92:84:c9:ee:ba:
85:c9:3f:eb:b6:78:c6:ed:b5:b8:41:83:a4:2a:28:bd:dd:58:
3b:e2:80:6f:47:12:71:10:7f:aa:ad:3e:32:99:f8:0e:a3:64:
df:86:c9:bf:e8:d2:6d:ee:60:7b:f0:60:f3:29:ba:96:3c:ae:
dc:03:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client