Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: xSXY2kZ+KkRxTn8MRKGRj+owFt2furwZ+p8+oURQJJE=
Subject key identifier: 26:78:C2:E7:B0:8A:3C:4F:16:B4:53:D1:B1:65:AC:39:71:C4:21:C4
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01987D8A097600569197D4834D3FD5192659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 130A
Signing time: Wed 06 Aug 2025 04:00:55 +0000
Manifest this update: Wed 06 Aug 2025 04:00:55 +0000
Manifest next update: Thu 07 Aug 2025 04:00:55 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: CMb65q0t1Ls9XRaOsE/DSNdYJw+5xPw0f1NI8+7zwQQ=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:09:76:00:56:91:97:d4:83:4d:3f:d5:19:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Aug 6 04:00:55 2025 GMT
Not After : Aug 7 04:00:55 2025 GMT
Subject: CN=2678c2e7b08a3c4f16b453d1b165ac3971c421c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:bf:7f:d0:9f:83:21:2e:52:da:fa:8d:be:
12:97:d6:a0:e6:42:c7:67:b8:18:93:6d:17:81:3e:
66:a4:44:34:ec:9a:58:a4:78:8c:3f:ea:ef:c0:b9:
4c:0f:3f:6d:d9:03:40:d8:77:05:ce:c2:ae:b4:26:
01:4f:0d:7b:1d:e5:1d:0f:1c:2d:25:85:4a:7d:b0:
18:3c:27:e9:60:62:d5:89:1c:cd:3a:f9:1e:bf:1c:
c8:50:20:13:e7:75:0a:bb:7a:69:2b:76:8d:0d:01:
3f:55:13:0f:a9:75:1d:9a:a1:74:df:e8:4e:3e:ef:
fa:ce:e1:0f:24:3d:90:b2:38:9f:cc:5b:93:80:09:
c2:5f:34:34:58:ba:38:00:34:eb:2f:da:9b:a1:66:
4f:4d:ec:f5:b9:51:00:3e:5d:ff:92:e9:fc:32:3c:
59:5d:a7:bb:b5:25:36:2e:b4:27:5d:98:98:7b:ad:
15:85:04:9f:8f:f9:c6:c0:5f:39:e9:f4:49:18:29:
17:2a:cb:fc:8b:99:cd:56:99:88:eb:52:19:26:be:
26:c6:c1:b6:4f:70:8f:2d:74:cc:91:af:1d:f4:b9:
9a:c5:b2:2a:6d:1b:e8:90:93:aa:12:62:4e:f9:89:
39:32:f6:58:da:15:58:9a:e3:c9:91:7b:46:dd:72:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:C2:E7:B0:8A:3C:4F:16:B4:53:D1:B1:65:AC:39:71:C4:21:C4
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:2d:cc:f7:4f:47:72:86:9c:0d:fd:65:97:bd:a2:b5:01:
58:42:8b:d5:41:dd:16:d3:4e:f4:15:2e:da:fb:7f:b5:61:cb:
4b:66:b3:d0:eb:80:3b:0b:cc:66:90:e3:ae:78:43:c6:4c:a3:
44:ea:46:01:3d:04:4b:0f:ff:7a:06:cc:7a:51:66:f9:dd:e7:
75:22:ff:1d:4f:76:7c:92:9f:c6:90:f3:5a:58:d2:2f:de:1b:
39:49:de:62:1d:b2:8d:f1:01:f5:66:62:d6:9d:1c:68:ed:36:
04:21:ab:1a:91:c6:67:4a:c0:21:28:c4:87:49:96:ae:2d:2c:
25:81:8a:6f:75:e8:09:0e:39:5f:74:d8:df:5e:d1:b6:a0:65:
60:9a:69:3c:c1:a5:78:43:a3:e9:76:03:f3:17:50:87:41:fe:
9b:11:c4:4e:fc:20:80:7a:02:c0:db:30:74:74:10:c6:fb:8d:
c6:0e:6c:58:0a:f4:83:33:7f:b8:51:e8:2f:f2:d2:80:0a:57:
83:9c:1e:de:30:d3:07:7e:61:50:05:37:3d:91:53:f0:c7:4b:
a1:6d:e6:15:21:74:75:ff:17:18:5d:47:d5:1f:d1:01:fb:fa:
17:b8:72:b8:94:e7:9c:b5:bf:cf:1e:a6:ee:d9:0e:d5:00:ff:
c4:c2:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:19 2025 by rpki-client