Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: bQY3wp/Co3RXwmTiRS/zvuLn3KCom+9hSCNfT4x3Hi0=
Subject key identifier: 2E:45:EA:4D:10:22:09:60:C3:B1:2D:3C:C7:0D:78:34:1D:4B:99:4C
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01974A7AA20B7FEB005C1A376F7F0ADA4284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 126B
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: ycCCnE7AXhMQGFf7qnH1pE9TaIEL863u8ApLP7BKS6Y=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a2:0b:7f:eb:00:5c:1a:37:6f:7f:0a:da:42:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=2e45ea4d10220960c3b12d3cc70d78341d4b994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:b2:f4:a5:5d:de:39:c5:fb:1e:1d:d3:19:b3:
e4:07:6a:37:51:89:e6:45:33:57:f4:c4:94:3c:b0:
33:90:41:3f:cf:b3:d0:d4:34:dd:dc:8a:f5:e0:ae:
61:c8:5d:f5:61:b6:8a:83:5d:82:f6:33:f6:6d:e7:
c5:26:0b:32:d1:3f:05:f1:9d:fd:44:49:d2:db:64:
b6:5c:42:e4:78:4e:1a:ce:da:a5:1a:6c:bf:f5:f0:
19:18:54:5f:91:58:02:ac:4e:0a:94:3e:28:98:86:
26:0a:96:58:ab:0c:02:b5:7d:10:c6:d1:1c:8e:a2:
c8:35:20:74:dc:10:e8:ec:0d:81:ea:ca:84:1e:f4:
c4:97:a0:0a:2e:97:45:57:18:31:06:06:e4:08:12:
c3:d6:72:d9:0e:2e:e3:f0:06:7e:97:67:42:f9:5b:
29:5a:b3:37:9e:a4:42:15:c2:93:9a:74:ba:ee:0f:
85:dc:35:63:b8:ef:78:80:36:52:7d:c8:21:9b:b6:
10:a3:42:1e:68:7a:c3:89:f3:b4:26:7a:f6:92:eb:
b7:a9:cc:19:52:70:b8:f9:62:6f:ed:e3:b1:3d:2b:
7a:8d:e0:c7:9f:87:43:ed:33:5a:24:b3:3c:67:a8:
61:1d:14:26:18:a8:fb:42:de:5c:83:ac:17:ff:eb:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:EA:4D:10:22:09:60:C3:B1:2D:3C:C7:0D:78:34:1D:4B:99:4C
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5d:9f:49:e4:27:54:07:7d:36:c5:9a:0b:77:f9:24:b8:88:
01:da:1d:8f:58:d0:76:e1:64:bd:66:07:44:da:ec:27:87:c4:
0e:93:ec:34:fd:da:59:b1:01:e0:ea:f2:ce:e3:20:37:60:d9:
af:4b:78:94:f8:69:51:e9:3b:db:c7:26:73:92:c4:2c:13:c0:
81:b9:a9:87:ef:4f:c7:72:dc:3f:b3:85:9e:c8:95:09:12:e4:
08:41:57:f7:05:c5:95:da:16:1b:3f:b6:e7:34:b6:40:ce:e7:
ff:95:de:69:2f:58:5f:d7:a6:15:c8:24:9a:f0:d2:ff:c2:78:
d9:7a:77:8c:19:77:32:12:02:af:b8:e4:38:8a:4c:01:fc:a8:
6d:ac:ed:91:09:92:d1:e6:51:ab:5d:36:da:00:a4:6b:b9:6b:
8d:ed:40:45:bd:33:ef:57:76:1c:ed:25:3e:c2:18:38:38:9f:
85:c6:86:f3:81:57:30:24:c2:d7:6d:a1:00:13:2c:a0:5c:5e:
47:a3:1e:44:48:a9:aa:8a:f6:a1:2d:a7:29:8c:02:41:c5:78:
15:e4:69:8b:a9:3f:d9:22:a5:e2:89:19:0c:10:9c:10:c9:14:
bb:91:b0:4c:d4:b8:77:f8:d9:3c:66:4f:37:e1:cc:66:27:90:
34:d0:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:28 2025 by rpki-client