Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: q3S/gp9NP0N13j8utiee1AKKcBjP0KZaPObFR+3L3Ow=
Subject key identifier: 9B:50:EB:23:BA:D6:13:28:5E:F4:AC:1A:69:12:C1:33:87:9A:F6:A8
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 0198D472A62A5A7B468BE1D72C60DB77143C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1337
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: xt2RvIV8YHIPs5KopXCd44x4ArbF2Lo7Rjym8qbqUow=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a6:2a:5a:7b:46:8b:e1:d7:2c:60:db:77:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=9b50eb23bad613285ef4ac1a6912c133879af6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:27:c6:ab:f1:90:3c:11:2f:a1:4f:f4:95:
64:fc:93:4d:30:7c:a1:59:a7:4b:f4:37:54:48:8f:
84:02:e4:e8:6b:ed:5c:fd:56:5b:2f:7e:a3:aa:b6:
73:aa:a2:08:1a:f1:bf:3b:44:23:60:63:31:a4:c7:
8c:e1:b5:a7:38:c7:b2:db:71:a2:6e:a3:77:22:21:
d7:51:bb:79:4e:b1:46:fe:ff:62:a7:0b:32:6c:af:
e7:73:74:05:eb:43:88:69:63:8c:1b:88:83:16:6d:
a5:c9:db:aa:2c:9e:69:37:4c:03:59:6f:fe:ae:78:
06:2b:76:14:cc:29:85:39:18:29:9b:68:c5:be:d3:
a2:bd:5b:2d:b3:ad:ad:86:8a:04:a3:2f:79:7e:c1:
98:94:52:15:91:22:85:dc:37:d3:20:c0:66:dd:8a:
e2:57:d8:98:5e:85:eb:e7:da:3e:3e:0c:d7:60:22:
fa:d7:7e:d6:ab:31:67:db:2c:7f:14:b8:8c:89:b4:
80:59:25:43:eb:b1:a9:67:59:c7:fe:3a:4c:d3:e8:
78:95:58:27:af:89:20:6e:61:48:71:54:0e:9d:cc:
d4:ce:9b:b4:ef:2c:70:4c:55:ad:aa:28:bf:89:d5:
9b:34:4d:34:91:af:82:76:cd:f0:71:21:95:86:5a:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:EB:23:BA:D6:13:28:5E:F4:AC:1A:69:12:C1:33:87:9A:F6:A8
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7a:8f:0d:67:48:36:c9:7f:40:c7:96:9f:86:e1:ca:e8:19:
f5:54:2c:37:89:15:dd:9d:a6:50:23:6b:7b:c9:44:ea:50:03:
51:d6:47:95:19:15:16:d6:86:3a:46:82:63:bd:2f:11:2a:e3:
e3:d3:e8:b6:f1:c4:56:60:e2:ba:d4:81:99:f5:c5:ae:96:3b:
7c:fb:c5:92:9b:a7:23:f3:60:bb:d9:bf:84:da:b4:93:cc:5a:
6b:bc:25:55:1f:4f:55:2e:85:0c:62:cb:63:e5:c0:14:9b:ca:
4f:27:cc:2b:c6:ae:10:3a:60:19:e5:75:26:66:16:21:9d:87:
5d:5d:88:e9:ec:1c:13:23:ce:64:1e:d3:5d:ea:01:de:c6:92:
30:3d:92:d8:85:33:63:53:b4:d9:85:eb:1c:5f:b0:82:6b:cc:
73:77:1e:96:d8:50:f5:d7:8a:a1:93:aa:64:a4:41:36:c1:9f:
e3:91:50:3c:8f:b4:78:11:c5:08:73:a6:d9:d1:2c:df:75:dc:
db:68:79:b3:82:be:d1:db:45:6c:36:9e:b0:66:c3:65:e4:cd:
10:d6:59:41:60:c5:91:7c:53:44:e4:3f:9d:02:29:67:57:04:
9c:e3:a8:eb:ed:74:91:c3:1c:76:74:9e:bf:3b:ef:0f:89:57:
48:ab:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:09 2025 by rpki-client