Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: Lz1AK0oj1H39Pqp9BfSJGFmGBibQZAn0C9aMSnttgjo=
Subject key identifier: CA:01:BD:B2:0E:50:97:32:3A:03:39:23:98:D7:9D:19:1D:D2:4E:79
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 0199FBEAEC17A9699A4B1C903713EE67A72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 13D0
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: Q32O2GvHGo4ySppXsdkIxPYrVlDW3okpS9jogVL/3VE=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ec:17:a9:69:9a:4b:1c:90:37:13:ee:67:a7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=ca01bdb20e5097323a03392398d79d191dd24e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:33:2f:77:56:49:c4:bc:07:9a:70:04:4b:
4c:16:d2:d7:a4:09:63:b6:a6:85:ba:7c:4b:26:5b:
14:dd:68:b6:c7:9b:ab:5e:af:c0:d2:0e:01:e2:b5:
0c:d8:dc:18:a1:45:26:dd:7a:03:0a:6d:ac:ec:25:
82:08:48:2d:ad:dd:ee:d1:e2:07:15:d1:13:57:85:
33:ef:bc:d3:4d:27:d3:aa:50:98:e2:0e:9e:9f:25:
e1:6e:c0:55:fd:87:51:c4:70:04:22:8d:88:bd:5e:
c8:1c:44:98:3b:e5:d1:ff:2a:5e:6c:8f:66:f8:6a:
a7:a4:f8:9b:b7:5b:a8:7d:44:7a:fd:93:0f:ad:09:
6a:d3:4d:02:e6:7d:8f:ae:e4:fa:00:57:33:bf:da:
7a:f1:d1:14:cb:c6:de:36:65:dd:c5:a5:da:f2:82:
9b:f2:2e:02:91:fa:25:b5:b3:2b:1a:92:09:5f:3d:
46:b1:7d:53:0e:33:a2:c7:40:f5:bf:28:67:67:f8:
6a:37:48:b4:a9:b8:dc:12:8c:1d:13:95:b3:48:42:
b0:2e:0e:fe:5c:3f:5b:ca:fb:df:fc:00:00:b6:cf:
32:bf:94:89:97:11:7b:d0:3a:60:6a:5a:22:84:13:
df:d4:3b:b5:2b:b4:2b:9a:1d:f8:13:67:61:26:c3:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:BD:B2:0E:50:97:32:3A:03:39:23:98:D7:9D:19:1D:D2:4E:79
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:d4:94:4c:2a:5a:8e:89:d5:1c:3e:59:df:85:a8:b1:35:
47:d2:28:0e:70:e5:7f:f0:76:8b:d3:bc:dc:98:e0:28:9d:0e:
bd:e0:33:8f:23:93:cf:1f:54:fd:87:79:e1:87:c4:25:1e:7a:
12:aa:e6:e4:e0:47:15:a4:53:f7:2d:e6:78:2b:d1:24:61:bd:
79:26:3a:c3:95:24:25:8b:d0:d7:ae:bc:0b:41:48:56:66:5a:
7d:7d:2f:50:b4:61:bd:9b:23:cb:74:3b:7a:4f:1c:70:58:1c:
70:6c:a1:e8:d2:51:b8:bc:5f:ec:20:c4:e2:6e:a6:19:06:ca:
74:a2:d9:f2:aa:52:b2:ef:e3:69:e5:09:14:f7:97:31:5b:57:
e6:c4:84:9c:0c:9a:71:39:81:f0:af:f2:30:d9:a1:f9:ef:15:
62:9f:ac:ae:ee:57:a8:82:42:53:26:b6:56:66:23:99:30:e3:
c6:92:61:f3:04:c6:06:a1:e2:f6:11:ab:ce:9c:5c:76:3e:97:
af:93:21:74:73:c7:77:cd:87:bc:33:17:4e:02:84:20:bf:28:
ef:4c:7c:cb:68:96:19:0c:5d:aa:79:76:9b:90:92:27:28:47:
c2:34:b6:e9:69:ef:ee:fc:e5:6b:db:be:d8:0f:c1:ab:71:b9:
15:74:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:38 2025 by rpki-client