Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: vP6nWSJUPdeoLe8yLKYrDAkteC3xcthdBpqYfPrVZDM=
Subject key identifier: C7:89:C8:A7:1B:45:D0:41:60:F1:1B:C4:B6:19:FF:94:57:5B:04:63
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019845888233D52AEFF6AF66F8CE44DAE436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 12ED
Signing time: Sat 26 Jul 2025 07:00:30 +0000
Manifest this update: Sat 26 Jul 2025 07:00:30 +0000
Manifest next update: Sun 27 Jul 2025 07:00:30 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: NLJ0iUTXI64hqijzvu0ZLr3vpwlHDJpEDLUb5D7i6kI=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:82:33:d5:2a:ef:f6:af:66:f8:ce:44:da:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jul 26 07:00:30 2025 GMT
Not After : Jul 27 07:00:30 2025 GMT
Subject: CN=c789c8a71b45d04160f11bc4b619ff94575b0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:ec:f4:9a:88:4f:0d:4a:c8:ce:7d:5d:39:
d0:13:35:12:b3:8a:c3:cb:47:55:ba:87:26:35:40:
44:58:d2:46:dd:17:d5:7c:16:5f:a4:a8:33:ee:2d:
0c:b5:5d:e8:f9:4b:e4:4a:65:f8:1d:e7:20:69:72:
b6:0d:c8:d7:3b:91:33:38:98:d8:ed:20:50:09:67:
c2:1b:6b:15:90:31:e2:08:d5:c6:4f:31:83:1a:69:
b0:68:d6:f9:50:66:a2:c7:9f:0e:1d:82:7f:7f:b0:
4e:18:9b:b9:9d:49:51:42:15:a2:e4:c5:c4:61:40:
4f:f5:18:67:36:99:43:de:44:00:ff:a3:67:dd:d2:
10:0a:21:d9:4a:76:8e:4b:db:b2:5f:de:0c:d2:60:
f6:2f:02:26:e0:07:41:85:bd:21:86:86:b7:19:41:
75:a6:3e:47:7e:20:0c:1d:72:4f:03:96:c4:3f:0f:
58:8d:7e:e6:aa:47:96:e0:a8:fa:46:14:05:d7:57:
d2:d5:62:cf:1f:8a:3e:91:1b:7e:94:74:26:71:91:
6c:54:82:bb:5f:44:96:09:09:8b:41:9e:bd:b3:26:
04:a0:dd:de:e3:53:61:23:bd:00:a7:60:4f:ad:4c:
59:dd:63:dc:f9:ba:70:9d:fa:09:b7:86:3f:94:4a:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:C8:A7:1B:45:D0:41:60:F1:1B:C4:B6:19:FF:94:57:5B:04:63
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5a:c0:74:ca:c9:73:21:ce:ee:7e:85:87:a3:a4:1f:15:56:
58:e6:de:7d:9e:e3:54:3a:d6:b7:37:27:da:ba:39:d7:55:55:
fe:cd:3f:e3:47:af:ad:cb:a8:60:4d:d1:1a:7d:5e:c9:b8:8b:
82:53:17:57:86:0d:d1:3e:05:a6:e7:4c:76:e5:ac:46:14:60:
93:9f:9b:56:20:d2:5f:96:22:30:82:fd:fc:f5:a4:4e:36:1d:
a9:f3:89:1e:0e:87:e9:19:9e:a6:80:4d:76:98:74:11:ac:59:
4d:3a:4f:3f:b6:ff:a8:b5:5f:09:65:71:c4:6a:22:b2:15:70:
65:c1:b2:4b:98:7c:33:18:ec:9b:46:cd:33:91:2e:f9:08:87:
a3:06:20:e9:e4:bf:91:08:a6:6d:5e:1e:7c:96:99:7f:b8:b8:
15:e6:c4:43:02:84:22:d5:e1:43:2c:ba:37:66:bf:45:bf:94:
e4:1a:51:1c:b2:f2:35:90:d9:ff:f8:65:92:30:97:8a:04:a2:
78:3a:13:c4:61:c9:a5:03:db:ff:65:36:d0:f4:93:d2:a8:cd:
69:97:1c:be:65:2d:92:56:3d:3d:08:2b:af:2a:d3:13:35:a5:
76:df:35:57:0c:d8:b1:c1:c7:50:25:4d:16:f8:bc:0c:a1:3d:
6b:8f:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:10 2025 by rpki-client