Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: SYuCw7jgdVlI8lIQfl4y5bA5RNkiqTXQeKQDyenmAQM=
Subject key identifier: 95:81:C4:24:DB:AE:86:F6:50:DE:12:E9:BE:FC:85:32:86:BD:4F:F7
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 0197B6A12CC4F12A705CAF87567E6E565108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 12A3
Signing time: Sat 28 Jun 2025 13:01:45 +0000
Manifest this update: Sat 28 Jun 2025 13:01:45 +0000
Manifest next update: Sun 29 Jun 2025 13:01:45 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: SMEMiNoE+UZ7+/5B/gfpb0CUUPw+y9y6k4ISpaVMUYc=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2c:c4:f1:2a:70:5c:af:87:56:7e:6e:56:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jun 28 13:01:45 2025 GMT
Not After : Jun 29 13:01:45 2025 GMT
Subject: CN=9581c424dbae86f650de12e9befc853286bd4ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:98:d8:3d:d1:0e:a6:07:19:86:e7:33:12:
2e:ea:99:af:c1:d0:04:79:fe:13:52:d1:d0:b1:42:
6f:d0:e4:1e:9b:ee:47:f8:2d:b4:a3:b9:21:19:90:
de:aa:9b:c2:f2:7a:7d:2a:34:18:ae:40:90:03:f8:
32:d0:8b:a2:7b:36:49:82:b4:76:76:de:13:46:25:
28:56:5c:db:d8:9b:07:91:5a:8f:c3:54:6c:25:29:
6a:5b:8f:f7:94:5c:99:cc:a2:23:00:88:a0:1a:b3:
e8:51:30:b3:f8:be:4c:a1:34:a8:2b:78:60:2d:f3:
79:2f:eb:19:8d:83:16:2b:07:ac:c7:8d:4b:b6:ae:
75:7c:69:6f:93:06:0f:26:c4:86:62:27:d0:6e:ec:
15:9d:e2:d1:3d:6f:2e:8d:db:0f:d3:5a:4b:f0:1c:
b1:b5:46:f7:37:42:f1:60:e9:d3:34:13:0a:a9:d2:
3c:76:48:b1:bd:b4:49:e1:3c:9b:52:ae:b6:0e:48:
b5:14:1c:c4:9a:21:76:d9:48:ed:a0:37:9a:96:5d:
f0:45:ca:24:e8:40:f1:d8:d5:7b:c5:1c:21:ba:62:
4b:f6:ab:2b:dc:80:b4:9a:c4:b3:bb:b8:ea:14:17:
16:37:fb:0f:f4:4e:df:20:63:1f:88:3a:fe:60:66:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:C4:24:DB:AE:86:F6:50:DE:12:E9:BE:FC:85:32:86:BD:4F:F7
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:4e:ac:b2:be:18:cd:2c:36:6a:e4:c9:66:7e:eb:91:a3:
c8:52:cf:74:d9:6a:6e:49:ef:56:74:73:61:a7:40:b6:75:8f:
3c:57:33:78:a5:d8:b8:ca:b0:71:06:5f:11:06:f7:19:68:cb:
8c:54:00:2d:bf:69:89:0f:c2:d8:59:e8:b5:44:7a:08:52:a4:
1c:ce:2c:b8:b0:eb:9d:43:61:32:d7:e1:a0:c3:2e:f1:a9:c2:
24:62:91:01:6d:51:e7:7f:ba:00:cc:66:97:0e:aa:48:e5:7f:
46:e9:30:6b:fb:18:08:de:a7:bb:d9:73:58:4f:ba:ff:af:c3:
e8:ca:60:c3:e8:b8:57:46:ad:29:ca:ca:9a:cb:13:d5:39:3f:
34:b3:67:e7:36:0c:d6:8d:54:95:96:f5:4b:5f:5f:42:10:9f:
9d:d5:53:80:f4:1d:ee:b9:1a:6a:d5:d5:ac:76:69:b5:c9:65:
a3:f3:19:6d:d0:ac:22:07:c7:da:41:25:27:91:bf:5d:76:a2:
84:d2:80:c0:b2:3b:ec:e7:68:11:9d:c6:36:6b:40:9d:dd:3a:
a6:d5:00:7d:a3:d4:94:93:45:ad:95:93:06:ef:a7:c9:f6:ab:
ed:3a:e4:44:19:f1:97:9a:cd:cd:71:74:ff:55:95:f5:87:44:
40:91:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:48 2025 by rpki-client