Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: jXOeIYuIuG9dks3nzcZmgO/26D7Pe7CwRZiJpW+/Qjo=
Subject key identifier: F7:0F:2B:7B:B0:B8:E8:53:58:53:84:1D:F0:18:48:B7:DF:16:32:2F
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01960BD615A57534C0176A418ECF5F53D331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 11C6
Signing time: Sun 06 Apr 2025 16:01:41 +0000
Manifest this update: Sun 06 Apr 2025 16:01:41 +0000
Manifest next update: Mon 07 Apr 2025 16:01:41 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 2xbHKm1PHW7CvhBXyjpTnOcSkwyxAX24JVpe4ip7GB4=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:15:a5:75:34:c0:17:6a:41:8e:cf:5f:53:d3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Apr 6 16:01:41 2025 GMT
Not After : Apr 7 16:01:41 2025 GMT
Subject: CN=f70f2b7bb0b8e8535853841df01848b7df16322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:00:6a:95:27:9a:26:95:c6:3d:3a:e4:2a:
b0:ab:e7:b3:3d:0c:75:1c:f5:55:0e:0e:57:bd:9e:
08:97:77:c1:4c:56:cf:26:1d:91:43:51:3d:15:f5:
f1:46:18:4a:5d:83:e5:0f:cb:fb:c1:eb:52:29:ed:
e0:1e:73:0e:f0:3c:53:42:9c:c7:fc:6f:d8:10:96:
c6:00:2f:c9:21:2b:48:47:d7:3a:61:91:4e:d9:0d:
49:e4:a6:24:dc:a3:43:5f:41:bc:73:a4:15:12:16:
55:e9:a8:9c:65:da:ac:32:1a:8c:bd:d9:46:26:4d:
02:76:08:a0:9d:d0:89:ea:a5:3a:32:2b:84:e4:a6:
b2:f4:d2:5c:2d:47:8f:2e:22:88:81:9d:9c:03:97:
49:83:2f:d6:34:30:56:fa:b5:ca:45:c2:56:ad:e3:
e2:7d:9e:7d:b5:9c:23:fa:16:38:5a:0d:9e:ec:06:
72:ba:03:bc:53:8e:58:4c:47:8f:ab:ba:80:b5:a2:
3b:35:14:ba:24:af:de:97:4e:25:8d:5f:39:a9:9a:
6e:4e:ff:5d:64:7d:70:62:52:80:1f:ce:09:8d:f7:
3b:a7:23:f3:cd:8f:16:71:af:36:b2:23:21:fa:50:
0d:f5:72:bc:46:f9:28:df:fe:f5:01:f0:75:1d:1c:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:2B:7B:B0:B8:E8:53:58:53:84:1D:F0:18:48:B7:DF:16:32:2F
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:e6:2d:e2:ac:9a:45:08:77:7d:bc:79:f7:17:62:96:bf:
43:af:df:ea:b4:ce:5f:06:68:f3:5a:3d:54:5e:3b:ab:ad:39:
ba:ce:93:e3:0f:e1:04:9a:ce:88:71:c7:fe:e0:59:cb:0e:d3:
9e:f8:be:ca:0b:e5:29:5d:37:df:27:80:5d:1d:ab:d7:e3:40:
de:72:b3:40:b8:9f:3f:8f:ba:c5:d1:40:78:5c:a5:4b:21:c0:
df:84:f3:c5:9b:e2:e8:c8:09:e3:3b:e2:ed:53:2c:1b:9e:6a:
48:0a:d4:32:09:fb:4f:1e:e7:8f:8d:ba:cc:e0:8f:4c:18:45:
48:1c:ca:d1:22:be:7f:d3:ed:d2:12:12:b4:ef:68:e4:ae:f5:
40:2d:ec:11:31:9b:b9:06:68:93:e7:6e:cd:79:ac:6f:af:cc:
fc:44:c2:74:25:61:e6:9e:47:1f:a2:80:d2:c6:10:a8:90:a5:
89:84:c7:8c:50:ae:33:16:86:5b:04:e2:6f:bd:94:cb:f8:3a:
01:b1:ed:69:00:3a:1e:5a:85:8e:5b:70:79:a3:b0:f6:8e:24:
b2:cc:10:9c:37:fc:46:1e:7b:75:ff:61:14:ba:ea:cc:ee:5a:
23:06:ea:41:e7:20:48:10:0e:5b:8b:ff:1b:c6:5b:5e:23:81:
a7:9c:50:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYL1hWldTTAF2pBjs9fU9MxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjUwNDA2MTYwMTQxWhcNMjUwNDA3MTYwMTQxWjAzMTEwLwYDVQQD
EyhmNzBmMmI3YmIwYjhlODUzNTg1Mzg0MWRmMDE4NDhiN2RmMTYzMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nsAapUnmiaVxj065Cqwq+ezPQx1
HPVVDg5XvZ4Il3fBTFbPJh2RQ1E9FfXxRhhKXYPlD8v7wetSKe3gHnMO8DxTQpzH
/G/YEJbGAC/JIStIR9c6YZFO2Q1J5KYk3KNDX0G8c6QVEhZV6aicZdqsMhqMvdlG
Jk0CdgigndCJ6qU6MiuE5Kay9NJcLUePLiKIgZ2cA5dJgy/WNDBW+rXKRcJWrePi
fZ59tZwj+hY4Wg2e7AZyugO8U45YTEePq7qAtaI7NRS6JK/el04ljV85qZpuTv9d
ZH1wYlKAH84Jjfc7pyPzzY8Wca82siMh+lAN9XK8Rvko3/71AfB1HRz7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcPK3uwuOhTWFOEHfAYSLffFjIvMB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLDmLeKs
mkUId328efcXYpa/Q6/f6rTOXwZo81o9VF47q605us6T4w/hBJrOiHHH/uBZyw7T
nvi+ygvlKV033yeAXR2r1+NA3nKzQLifP4+6xdFAeFylSyHA34TzxZvi6MgJ4zvi
7VMsG55qSArUMgn7Tx7nj426zOCPTBhFSBzK0SK+f9Pt0hIStO9o5K71QC3sETGb
uQZok+duzXmsb6/M/ETCdCVh5p5HH6KA0sYQqJCliYTHjFCuMxaGWwTib72Uy/g6
AbHtaQA6HlqFjltweaOw9o4ksswQnDf8Rh57df9hFLrqzO5aIwbqQecgSBAOW4v/
G8ZbXiOBp5xQ1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:26 2025 by rpki-client