Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: rMsRLlOFOhvs/RNKOO7HgqvX6jLgW5h4ERtUPQd9zog=
Subject key identifier: FA:9C:5F:31:25:BB:9D:F5:38:0A:4B:3F:72:28:6E:84:7A:FD:91:76
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 0199FCFD6254C93AC65320F51B124A1A2404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: 8RCRQMQ5haFIrVJESojsUs/x68tcqg4fIL4noeih9Zc=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:62:54:c9:3a:c6:53:20:f5:1b:12:4a:1a:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=fa9c5f3125bb9df5380a4b3f72286e847afd9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:cd:45:1e:40:32:39:00:46:0a:d8:a2:2c:
4d:35:57:02:b7:74:a8:5f:39:2e:91:aa:bd:8c:dc:
d9:50:3a:88:8e:d2:58:fe:70:e3:12:2c:04:4a:c1:
83:fc:0e:18:ac:22:e1:78:cf:5f:9f:a1:a4:1c:b7:
79:e8:e7:40:cb:5f:8d:f1:4c:a7:95:14:9e:1c:9d:
3f:c4:e7:e9:38:db:16:64:c1:74:b8:12:2a:0c:3b:
6e:d8:ce:91:fc:3f:38:6f:10:50:62:b6:17:77:79:
93:46:02:ba:92:0b:d0:ff:31:2a:4a:bf:ad:c9:78:
05:9f:59:af:0c:35:19:f1:e3:7c:09:d2:71:8d:52:
fe:2e:54:ef:9a:75:18:a5:88:8a:ee:58:85:a9:9b:
b7:29:20:95:a4:31:f8:ea:fc:53:c9:a9:60:d5:4f:
63:ee:c2:2d:30:8a:59:1e:0c:01:23:2f:1e:56:25:
85:f8:dd:66:cc:63:f1:4b:eb:75:dc:a9:62:5b:ef:
ed:bf:28:b8:b7:2c:6e:3e:d4:e2:36:eb:9e:00:71:
79:eb:1d:7b:0e:a2:b5:0c:16:3c:6a:24:d4:67:ea:
fd:14:e5:af:cf:a6:1a:e9:26:5f:d5:92:c9:1d:a4:
4e:f6:8b:28:f5:f3:ed:0c:d0:0a:9d:ac:26:8a:a1:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:5F:31:25:BB:9D:F5:38:0A:4B:3F:72:28:6E:84:7A:FD:91:76
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:5b:30:78:c7:63:d4:db:e1:7c:63:4e:ab:4b:ab:4c:00:
96:1c:62:a2:be:6c:0f:0f:d4:de:17:6d:db:e0:ab:fc:16:88:
2e:3a:c5:70:0e:d6:82:ed:b3:dc:6a:b0:71:1e:04:1f:3e:4f:
e7:12:97:0d:9e:e7:63:3f:ca:a2:a5:ff:15:ec:63:19:76:31:
c1:c3:f3:81:8d:3f:40:f7:60:5f:45:39:e8:79:01:11:8e:22:
b9:1d:e1:f9:01:19:2c:69:ea:64:a7:e8:e9:76:76:3b:0e:2c:
5f:99:73:69:32:d2:9b:d6:15:7c:70:d0:fc:34:cd:3c:e7:b3:
ac:2e:58:19:c7:6e:bb:e3:e0:35:fa:a1:5c:3a:8f:09:43:ac:
84:d6:12:eb:05:f0:3e:ee:c0:90:d8:c9:56:72:9b:86:0f:ea:
0f:a2:77:15:47:69:b9:6f:3b:e5:86:b2:a7:6e:6e:6f:6b:dd:
8d:38:e1:73:db:ef:2e:d8:02:1c:e4:27:a0:ef:ed:83:ce:92:
ec:28:e5:5e:8e:16:d4:6d:8d:6a:8f:8f:68:9d:06:30:ea:df:
86:fb:01:f3:3e:7a:0b:77:34:ae:f6:13:f0:3c:e5:20:d3:c0:
62:61:5d:04:0d:e5:b3:37:74:07:75:77:e4:fe:6c:49:ab:9f:
e4:72:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:03 2025 by rpki-client