Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: H37yt7TnsKi8g/OlLgr+AvhsLTUELN6UR0NbkpzRMbs=
Subject key identifier: E3:F2:24:C4:2B:C7:86:C4:78:2B:C2:E2:A5:19:5B:D6:C2:31:68:51
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019933122D62E2EBE3ABF0C9687B648F1917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1368
Signing time: Wed 10 Sep 2025 10:00:53 +0000
Manifest this update: Wed 10 Sep 2025 10:00:53 +0000
Manifest next update: Thu 11 Sep 2025 10:00:53 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: ZSj3RgEyryoV64L2HSl/BumVZGY/53zPx2TarrxF7e8=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:2d:62:e2:eb:e3:ab:f0:c9:68:7b:64:8f:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Sep 10 10:00:53 2025 GMT
Not After : Sep 11 10:00:53 2025 GMT
Subject: CN=e3f224c42bc786c4782bc2e2a5195bd6c2316851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:0e:30:15:d6:4c:c9:3a:94:0b:4f:e4:4e:
3d:10:3f:cc:1e:0b:ac:d5:b9:88:04:9e:cd:0a:b3:
1e:e7:c6:f7:ad:b1:c5:77:e8:dc:ec:09:a9:bc:b2:
c4:64:8b:cc:27:f9:69:0a:30:4c:e7:ae:81:66:55:
d9:eb:c0:07:1d:cf:0a:f3:c8:c1:92:3e:4c:cd:6e:
c1:c7:3d:f8:b5:82:6e:c4:74:9d:44:be:6c:bb:fc:
bd:f1:d9:46:7f:a7:04:ae:6b:33:78:47:33:f0:03:
0d:0c:0c:7d:a7:af:69:fb:52:af:2e:82:5f:a3:55:
29:a8:d9:d9:06:5a:b9:a5:f0:91:1a:68:16:ad:48:
86:71:9e:7c:f0:be:fd:d2:b1:98:29:17:40:a9:29:
1a:22:84:cf:ff:83:6f:78:aa:a6:e6:b7:d6:28:57:
b0:1a:1c:5b:94:a4:75:07:24:af:01:15:16:82:f5:
35:ee:12:00:4d:f8:3d:ca:1b:8d:ee:f1:4a:fb:09:
97:16:3b:1e:55:5b:f6:b5:72:e6:9a:f5:a1:62:cc:
1b:ed:37:1b:27:c5:9f:d4:e4:87:b8:a6:6a:8c:7e:
05:9f:17:d8:e7:7d:0b:cf:05:a3:d8:b2:e3:ad:e7:
9f:7b:a5:12:fd:3c:13:11:69:4b:45:ee:4c:d7:52:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:24:C4:2B:C7:86:C4:78:2B:C2:E2:A5:19:5B:D6:C2:31:68:51
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:97:57:ed:13:61:37:5d:42:2e:23:fd:3f:9a:53:a5:f1:
b3:50:f9:cb:25:0e:f0:c1:6d:0a:b7:86:8b:f0:b6:ad:e7:24:
a0:43:f4:09:4e:d0:2f:fb:da:79:8b:1a:ca:77:53:52:e5:f0:
21:a7:97:a2:65:db:ca:ff:96:8b:41:b8:95:5a:17:b4:9f:64:
a3:81:a1:6a:82:89:53:37:4a:74:f6:19:e8:75:17:40:0e:32:
47:d7:6d:30:c7:58:f6:44:9a:c3:c2:eb:e5:32:f6:33:9b:ff:
fb:da:90:71:31:c4:6e:5e:7d:ad:60:59:c5:6b:86:77:a2:41:
03:0f:90:7a:16:74:44:0e:d8:d2:86:c5:e7:0b:40:e8:bd:3d:
7c:10:91:20:5b:e9:95:9f:f1:42:df:a9:ff:d2:be:59:02:3f:
08:b4:9c:6b:7f:38:68:fd:bf:08:22:fb:1c:46:78:40:05:ec:
8d:7b:10:81:94:d8:e6:24:9b:18:07:a0:bc:36:49:bd:27:f2:
14:9c:20:ee:34:e0:65:54:92:cc:c0:a0:5f:1e:89:09:f6:a9:
9a:bc:bc:0f:45:1e:a2:41:3d:8e:63:0c:0e:69:c3:4a:4a:9b:
1c:de:cb:57:71:be:73:61:96:63:7d:5c:89:02:3a:f0:ea:58:
ec:de:4a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:36:38 2025 by rpki-client