Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: wWk/hjd4uad65FqXir8YMMeOLvz1tZrcqWJUmHiDjkA=
Subject key identifier: F5:E2:18:AF:3D:44:CE:F5:BE:48:DA:61:B3:DC:8A:99:F0:EC:5E:B2
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019A4F9900D0F1B1C90B839CF401E044A0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 13FC
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 9l08k01mH5Xr7aHwCJh/YNvxw1UkTVprV+Hay+Hey+w=)
3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=)
7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:00:d0:f1:b1:c9:0b:83:9c:f4:01:e0:44:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=f5e218af3d44cef5be48da61b3dc8a99f0ec5eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:6f:1f:4e:31:7c:3a:c2:56:3e:fb:9a:2d:
ca:d5:c4:cd:ef:58:58:59:82:1a:fd:11:a0:74:9e:
ea:68:3c:b8:a8:88:27:94:8a:26:b0:e7:94:78:da:
1d:fa:90:e4:d8:87:29:57:59:6d:29:f2:4d:bb:1a:
e1:a3:b7:50:0f:dd:99:eb:52:cf:95:52:e3:48:83:
dd:41:1c:b3:fd:70:87:c0:dd:e8:98:d4:8b:ba:70:
c1:2c:72:0d:c0:c9:2d:6c:f5:74:76:13:0f:1e:fd:
60:b8:c9:9c:b7:ae:db:92:85:8f:3f:48:f9:5d:76:
4a:e7:ec:0d:be:3a:6c:ad:57:12:38:e3:2a:ef:cb:
b0:f7:00:47:1d:b3:f9:4f:c2:c4:dd:32:83:85:7f:
f1:6e:7c:72:51:6d:6c:82:78:a7:a2:4e:ec:e2:5e:
36:41:7e:15:7e:74:01:79:45:e7:70:d9:c9:cf:52:
24:50:46:02:3a:5c:25:96:0d:a8:2a:30:54:cc:8a:
4f:f2:16:e8:34:21:a6:2d:ba:29:49:12:6d:dd:b1:
a3:b2:8a:6c:a2:89:ac:1f:30:f6:a4:ef:33:d4:b5:
1e:7c:af:5a:b5:39:d0:c8:04:20:ff:f9:0d:ee:e3:
7f:dd:27:08:a7:98:1f:64:85:df:52:56:d6:ff:a4:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:18:AF:3D:44:CE:F5:BE:48:DA:61:B3:DC:8A:99:F0:EC:5E:B2
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4c:b1:58:69:16:f8:57:e6:37:47:74:d3:cf:be:06:5a:69:
74:53:64:11:6c:bd:c4:3d:f1:bb:c6:26:b7:48:04:fb:ba:17:
e1:a1:21:7d:27:53:47:97:fa:f0:96:2a:55:e7:c9:64:93:3c:
2a:80:8b:2e:da:b1:60:39:af:d3:57:0d:57:35:a3:af:ad:cc:
b4:9d:6c:91:89:3d:a9:47:7d:11:65:9a:4d:bf:21:ce:b4:79:
45:47:d2:60:b5:4a:99:cd:59:1d:6c:aa:ee:b7:ec:36:f7:0c:
94:74:7e:f7:a3:00:1e:f3:ec:e2:62:08:f2:f5:a3:1e:b5:bb:
de:cf:f7:a4:bc:fb:78:d5:f0:80:ec:e9:df:a5:47:ba:90:22:
33:f5:2d:66:fb:59:d2:8f:f8:8e:c7:a4:65:4f:40:8c:c0:ba:
13:42:70:fb:04:c5:ed:ae:8a:21:45:02:a7:9b:33:44:bc:81:
95:34:55:d2:10:b8:48:c8:25:b7:e3:8f:82:4f:70:db:73:82:
e3:eb:2e:91:50:a4:f4:3d:ba:83:fc:02:75:24:6b:be:86:58:
cc:bd:18:01:23:fe:03:ef:97:74:9d:dd:1f:16:55:3a:cd:bb:
4b:04:7d:a5:8c:bf:8a:63:6b:b3:88:37:b0:bc:a5:73:99:5e:
9b:ee:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:17 2025 by rpki-client