Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File: Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier: RRxXyEWNicuDX6BeYtGGORbSbXyn0NJHUUVTPvBJ09M=
Subject key identifier: 96:9A:4B:23:9B:DE:68:60:B4:3F:7B:4A:A2:13:9B:54:53:4E:92:78
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial: 019918E47518DE6D6FAA86F9B0A6C0B9A436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number: 0C02
Signing time: Fri 05 Sep 2025 08:00:49 +0000
Manifest this update: Fri 05 Sep 2025 08:00:49 +0000
Manifest next update: Sat 06 Sep 2025 08:00:49 +0000
Files and hashes: 1: KqFYxEWrdBP5_WdyXRa-ITRyV24.roa (hash: vqxQtdasBJcl6VgvYzPzoC8JKGZWIRjtdhf0lDZH8tE=)
2: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: 88UQUpw5mc3n4vailUQCoVqJWT24xYXALthfshDnwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e4:75:18:de:6d:6f:aa:86:f9:b0:a6:c0:b9:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Validity
Not Before: Sep 5 08:00:49 2025 GMT
Not After : Sep 6 08:00:49 2025 GMT
Subject: CN=969a4b239bde6860b43f7b4aa2139b54534e9278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:94:f5:e4:ad:7b:9e:52:f4:6c:cf:0e:7f:
ab:16:de:e9:a8:e0:b8:93:a0:e2:d4:f8:a4:b3:c9:
43:af:e3:42:64:89:ee:a4:e2:f1:64:ec:fc:28:7c:
71:96:9f:ce:24:81:1f:70:ec:7b:71:13:ac:b7:8a:
3b:5f:a0:34:a2:7d:68:78:5d:23:3a:70:3b:ca:1b:
24:94:21:64:79:ab:f8:6f:24:ac:df:d4:05:04:6c:
f5:ef:1d:67:50:e8:cd:b4:61:4a:0a:7a:63:be:95:
ab:22:82:c1:fe:33:b9:f8:89:ef:e5:0d:51:e5:45:
bd:bd:ff:9b:97:bd:d2:89:ed:db:a9:0c:95:6c:1b:
29:ef:a8:f4:2f:4f:7a:de:f1:a5:fc:24:29:de:d6:
1e:ed:b4:06:30:a6:59:73:e6:78:39:a1:73:10:1e:
02:04:6c:2a:9f:17:34:48:a1:1f:4d:a0:44:fe:01:
83:fd:c5:12:30:d0:2f:1b:31:32:14:f9:3c:ef:f6:
cc:ef:ff:64:94:6e:fe:f0:48:13:cf:6f:1f:19:8a:
4e:8b:e3:01:07:58:43:bd:38:4b:64:8a:ee:4f:18:
0b:cd:32:bd:8b:59:b5:4a:80:3d:2a:73:fb:97:36:
be:b9:10:75:2c:eb:71:40:cc:9e:db:fe:08:19:55:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:4B:23:9B:DE:68:60:B4:3F:7B:4A:A2:13:9B:54:53:4E:92:78
X509v3 Authority Key Identifier:
keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:7e:af:ae:0e:7d:1d:aa:fa:25:4d:cb:4c:9e:68:5c:86:
37:53:81:6a:7f:36:d8:20:23:7d:2b:26:9c:36:97:5e:96:ce:
c5:08:73:eb:a1:de:84:23:06:02:57:4c:47:8d:d8:eb:b2:5f:
9e:21:82:b7:72:26:ac:14:80:06:67:4f:87:5a:9b:1a:dc:c2:
69:90:2b:05:fb:22:0d:f1:68:32:f8:3e:78:3e:11:0c:94:05:
53:8a:57:fe:9d:c9:75:3d:03:ad:35:9c:db:f7:b1:0e:07:ab:
64:ee:68:dc:00:46:43:4f:d6:34:38:c3:5d:10:bf:e2:5c:19:
ce:c0:cf:7f:65:97:c9:ba:b2:4b:6f:2c:54:5d:32:16:05:67:
a2:d9:92:df:c1:55:df:83:52:2f:74:d1:cc:68:f3:71:08:d3:
96:5d:c7:64:55:6d:b6:8f:2c:43:d8:1f:70:58:13:57:0a:27:
44:55:6a:1f:9e:f7:30:0b:35:ee:a5:19:4a:90:be:f0:c1:a6:
b3:33:d2:8d:72:dc:a2:82:d2:8a:7e:11:7a:ff:dd:84:1f:ee:
06:c0:cd:25:ec:88:29:f7:bf:e0:50:87:2e:13:53:7e:fd:59:
87:a0:53:e7:c7:20:07:ac:d8:9a:be:5c:e8:81:ed:4f:39:6b:
37:3d:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:54 2025 by rpki-client