Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: Z52bHTMdsnfz+FmJxRPjyYPc59lIU9tGmM6KYyPiERo=
Subject key identifier: F3:26:72:5B:1C:EE:0C:B5:F3:3A:72:29:8B:7B:88:55:1D:16:F7:33
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019A213FAE3C3BBCBC26693E180787941FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 13E4
Signing time: Sun 26 Oct 2025 16:00:12 +0000
Manifest this update: Sun 26 Oct 2025 16:00:12 +0000
Manifest next update: Mon 27 Oct 2025 16:00:12 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: Mt2qxlFoD82AXg8Ffq6tasklabz/1uFvhW3G2GZWfsg=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:ae:3c:3b:bc:bc:26:69:3e:18:07:87:94:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Oct 26 16:00:12 2025 GMT
Not After : Oct 27 16:00:12 2025 GMT
Subject: CN=f326725b1cee0cb5f33a72298b7b88551d16f733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:8b:16:d7:ca:18:a6:2b:74:95:b8:42:1f:
de:0e:b3:5e:a4:b2:ed:8d:03:99:64:11:4d:02:bd:
1b:38:f6:10:09:11:9f:f9:8d:7a:bb:07:eb:fe:47:
9c:90:6c:9b:c5:35:3d:ed:42:22:72:5f:81:9f:36:
f3:33:e3:d2:a7:fe:55:cb:4a:2d:8e:78:b9:bb:cd:
98:36:6f:de:8b:16:1b:93:36:41:85:0c:8a:87:dd:
a4:0b:9b:68:ca:67:5a:32:95:64:2e:df:01:6e:27:
a3:12:22:fa:3d:db:41:77:81:37:81:11:70:5c:fb:
ca:ef:a4:6e:08:bb:2c:a3:bc:a6:bb:52:2c:da:91:
3f:7d:59:d1:de:09:c2:61:e4:24:06:64:63:af:42:
3e:45:e9:dd:92:b5:f0:9e:8a:0a:71:04:43:bc:dc:
15:43:79:65:2b:26:17:55:0c:dc:81:63:16:d2:0c:
46:81:b7:15:dc:57:3f:e2:9a:6f:e4:5f:f5:3e:1e:
92:e9:e6:c6:f9:d7:69:da:e7:d9:5a:72:34:2b:d4:
6e:c0:cd:2e:f5:a5:f5:3e:01:b2:ca:3a:72:82:2b:
6e:21:d5:31:3d:09:e2:22:b8:4d:8f:54:d8:16:27:
af:e2:35:c7:b0:22:3e:80:41:ab:c3:2b:65:7a:c9:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:72:5B:1C:EE:0C:B5:F3:3A:72:29:8B:7B:88:55:1D:16:F7:33
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:b3:c5:ee:a1:af:a6:20:24:6d:27:60:e6:e1:e4:d9:89:
ec:bc:67:cc:b6:ed:af:0d:34:f8:4f:02:ee:09:08:6f:5e:3c:
7f:f1:50:b3:b7:6a:09:2d:dd:1e:ae:d9:6f:d2:f3:e6:d1:93:
b5:d4:9a:0b:8b:dc:26:c9:c9:d2:bd:61:e7:f3:b9:b3:af:03:
ec:e9:ac:a6:fa:00:ad:5c:60:e2:ec:bd:51:46:eb:da:06:67:
7f:0d:4e:9a:e3:25:5e:13:75:6a:08:f3:b5:3c:0c:0a:8c:61:
49:01:3c:5f:01:0b:ef:6f:a8:c6:9e:e4:c3:35:6d:09:00:b2:
94:b3:f4:fd:44:2e:ea:cb:3b:fa:ef:82:1a:4f:52:ad:db:af:
58:1e:ca:ad:17:7e:ed:7f:47:36:b9:5c:b8:aa:e4:96:ac:00:
b6:7d:3c:8a:e5:22:4c:23:96:15:3b:60:e0:43:c2:e1:05:62:
cd:4b:fe:ff:ff:09:1f:46:98:ed:33:65:cb:0b:ac:f6:e9:49:
c8:f1:0d:c6:86:28:8a:4e:0c:20:82:52:5e:e9:26:d7:8d:ea:
3d:22:d0:fb:b7:58:ea:d8:5e:c5:29:e4:f7:8f:2c:fc:6b:20:
4b:cb:bd:27:08:1e:f0:2b:cb:a2:be:91:eb:94:65:9f:33:7f:
d4:0b:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:25 2025 by rpki-client