Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File: Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier: uKRcZZ8Zu+pwIB2DPCtWmgQuwEYH978wqQDOL/3LxC0=
Subject key identifier: CB:9D:2F:0D:48:AF:5C:18:BC:B8:9A:00:2F:2A:BD:F1:B7:2E:44:D7
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial: 0198D73B7158E229413F5C3EFE4CD423DE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number: 0BE0
Signing time: Sat 23 Aug 2025 14:00:53 +0000
Manifest this update: Sat 23 Aug 2025 14:00:53 +0000
Manifest next update: Sun 24 Aug 2025 14:00:53 +0000
Files and hashes: 1: KqFYxEWrdBP5_WdyXRa-ITRyV24.roa (hash: vqxQtdasBJcl6VgvYzPzoC8JKGZWIRjtdhf0lDZH8tE=)
2: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: Ijd+PmFKZBzPDtUlobhuWYvDb4UfPXiD3fXgiAFr+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:71:58:e2:29:41:3f:5c:3e:fe:4c:d4:23:de:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Validity
Not Before: Aug 23 14:00:53 2025 GMT
Not After : Aug 24 14:00:53 2025 GMT
Subject: CN=cb9d2f0d48af5c18bcb89a002f2abdf1b72e44d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:7b:6f:30:4c:e5:34:c0:52:c0:9a:b4:e0:
63:e6:17:da:71:64:f1:cb:88:e2:a6:5d:79:bb:34:
45:04:65:e2:ba:23:5d:dc:a9:aa:98:21:bd:02:56:
ee:7c:5e:79:fe:58:da:7d:fe:96:ac:b0:81:6d:35:
74:23:88:6d:d2:0f:b0:9f:01:a5:82:54:d6:6d:e8:
15:d1:68:55:8d:25:7c:f2:83:09:c2:2e:88:11:c2:
a1:5a:ff:a4:85:24:ee:1c:0e:74:f6:a0:7e:d1:b1:
bb:f1:a9:5e:95:9a:0a:a1:83:51:12:34:1c:93:3e:
9b:2b:03:48:50:c8:86:09:ae:ef:5d:e3:b4:a5:ba:
c6:5a:86:2a:9a:69:75:cb:69:7d:4e:32:c2:42:65:
64:26:50:ab:4b:c7:66:36:b3:7a:e0:3c:25:62:88:
d5:52:1d:a2:7a:ec:7a:f7:c2:ff:df:2a:4a:3e:ae:
f4:1b:f4:4a:27:55:fb:26:7f:53:ed:68:36:48:c7:
10:4e:a4:70:51:aa:cb:1c:79:60:ab:e0:3f:00:fd:
f0:20:09:31:99:67:e4:16:97:79:58:51:4c:fe:00:
42:df:ec:96:8e:a0:54:27:b4:a2:f6:db:6b:f8:49:
f6:67:38:f4:2a:a1:8b:a6:c1:d7:10:de:27:8b:61:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:2F:0D:48:AF:5C:18:BC:B8:9A:00:2F:2A:BD:F1:B7:2E:44:D7
X509v3 Authority Key Identifier:
keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:a1:ae:b3:3b:27:a0:0d:e4:c2:af:d6:88:d0:3c:e8:5e:
a4:48:2f:07:54:4d:06:e3:dd:87:66:09:33:ca:ca:e1:67:1a:
da:13:fc:29:8d:af:17:d4:05:45:69:cc:2f:e8:24:91:e2:ee:
00:7a:2d:5e:0b:27:4a:8a:d0:0b:33:70:b6:db:a7:23:94:e6:
b4:61:fd:b4:cb:23:91:b3:de:95:85:e0:69:9f:8f:14:25:3e:
5b:71:10:f6:10:38:a5:06:da:4a:1f:a1:ad:5c:3e:81:bd:5f:
b6:dc:16:57:29:a4:46:43:5b:fa:2b:8d:a9:24:e3:bb:7c:20:
15:ff:9e:c9:a7:87:ff:d1:43:41:e4:3f:33:91:9b:4b:f0:72:
eb:7c:df:1a:d6:e7:0a:f3:68:d2:9f:43:70:a2:0d:28:aa:d6:
80:b5:72:bc:ff:1e:ed:82:fe:17:0c:86:63:8c:29:13:a3:49:
71:23:d1:b5:db:6a:79:98:b8:05:c2:a4:47:af:49:27:95:a2:
56:4f:81:e6:33:e4:0d:be:83:da:91:6d:29:64:db:ff:9a:6e:
49:23:d6:06:a8:41:98:a4:27:4f:ff:0c:3f:01:e2:a5:92:6c:
fb:17:22:68:be:9d:93:8f:2e:48:9c:1c:f1:cc:a2:f6:bc:64:
be:43:15:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO3FY4ilBP1w+/kzUI94NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzY1NzE5MGZlZDczZjZiYmU3NjVmNGI2ODIwMWZkNTU1
NWUzYzgwHhcNMjUwODIzMTQwMDUzWhcNMjUwODI0MTQwMDUzWjAzMTEwLwYDVQQD
EyhjYjlkMmYwZDQ4YWY1YzE4YmNiODlhMDAyZjJhYmRmMWI3MmU0NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDN7bzBM5TTAUsCatOBj5hfacWTx
y4jipl15uzRFBGXiuiNd3KmqmCG9AlbufF55/ljaff6WrLCBbTV0I4ht0g+wnwGl
glTWbegV0WhVjSV88oMJwi6IEcKhWv+khSTuHA509qB+0bG78alelZoKoYNREjQc
kz6bKwNIUMiGCa7vXeO0pbrGWoYqmml1y2l9TjLCQmVkJlCrS8dmNrN64DwlYojV
Uh2ieux698L/3ypKPq70G/RKJ1X7Jn9T7Wg2SMcQTqRwUarLHHlgq+A/AP3wIAkx
mWfkFpd5WFFM/gBC3+yWjqBUJ7Si9ttr+En2Zzj0KqGLpsHXEN4ni2GEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMudLw1Ir1wYvLiaAC8qvfG3LkTXMB8GA1UdIwQY
MBaAFGPGVxkP7XP2u+dl9LaCAf1VVePIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgt
YWE3NzMwYjJiNGYzLzEvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgtYWE3NzMwYjJiNGYz
LzEvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVmhrrM7
J6AN5MKv1ojQPOhepEgvB1RNBuPdh2YJM8rK4Wca2hP8KY2vF9QFRWnML+gkkeLu
AHotXgsnSorQCzNwttunI5TmtGH9tMsjkbPelYXgaZ+PFCU+W3EQ9hA4pQbaSh+h
rVw+gb1fttwWVymkRkNb+iuNqSTju3wgFf+eyaeH/9FDQeQ/M5GbS/By63zfGtbn
CvNo0p9DcKINKKrWgLVyvP8e7YL+FwyGY4wpE6NJcSPRtdtqeZi4BcKkR69JJ5Wi
Vk+B5jPkDb6D2pFtKWTb/5puSSPWBqhBmKQnT/8MPwHipZJs+xciaL6dk48uSJwc
8cyi9rxkvkMV4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:26:09 2025 by rpki-client