Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: mOP+Hz8YtdWXp1rtER1tZnqFygOfBkBTITlfO05u1Cg=
Subject key identifier: 7C:4B:A6:E7:8A:6E:40:43:45:91:67:8B:89:D8:FF:F1:E5:EB:15:B4
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 0197B7B372B6F6675E3F59D1EE25C047AF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: rqqcP4irqTy0CC5ut7p9hrlzzQr07FlMsALd5GCG/gA=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:72:b6:f6:67:5e:3f:59:d1:ee:25:c0:47:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=7c4ba6e78a6e40434591678b89d8fff1e5eb15b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:4a:47:91:69:68:38:6b:86:eb:c3:5d:76:
71:65:e9:44:3c:ce:84:c0:c5:ac:b7:fc:f1:7b:af:
b4:c3:09:cd:c8:3d:cb:9c:fc:84:b1:8c:a1:72:31:
83:c9:58:ea:59:e1:39:e5:85:57:0c:d1:b6:9c:15:
2f:30:9b:99:5a:44:57:16:22:91:ef:8a:13:ad:08:
91:de:ab:a2:7d:33:96:c3:5e:84:1b:b7:50:6f:b8:
5b:37:95:24:05:b9:c7:42:e6:be:56:33:98:cf:61:
b4:30:5b:a4:61:d9:1a:42:3e:6e:dc:ba:99:08:82:
33:e4:78:47:ce:fe:cc:86:7b:98:43:e7:66:55:a1:
e0:90:3b:4d:a1:4c:bb:e9:cc:e8:c7:83:80:2a:49:
d7:eb:87:41:7f:a3:3e:59:1c:fb:ed:2d:8f:8f:e4:
40:53:7e:8b:2e:d0:a0:3c:6f:c6:80:e2:5c:cc:65:
25:2d:73:a5:cf:31:b8:19:33:ee:19:77:3a:21:24:
94:df:60:4e:73:ee:28:f4:a2:4c:61:68:85:f8:90:
ec:19:bc:6a:ec:e1:df:cb:18:b5:a5:52:28:c9:33:
a2:0f:ac:8a:2a:d4:96:13:57:df:f9:6e:b5:27:ea:
bd:50:56:1a:c7:1e:ef:8a:3a:46:db:db:0e:da:37:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:A6:E7:8A:6E:40:43:45:91:67:8B:89:D8:FF:F1:E5:EB:15:B4
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3e:2e:eb:b0:5a:50:ba:57:63:26:29:aa:b8:ee:7a:3b:b9:
10:55:18:c9:20:3e:c7:11:93:47:93:16:7a:1b:3c:73:eb:6d:
82:23:df:72:38:33:ca:a4:0c:3b:d5:8c:a1:49:99:93:49:de:
b0:cb:ed:a6:dc:f9:14:ad:f3:1d:13:cc:c3:85:70:aa:25:6b:
46:c2:1c:a8:19:db:6c:0e:54:22:15:87:8f:b8:ed:b2:ab:08:
c5:8a:7f:bd:52:90:b0:b7:01:bb:97:1c:3c:eb:26:b3:15:6a:
9d:dc:75:6c:a1:1a:d3:4c:ac:ed:c1:de:14:09:c1:2c:84:87:
a8:ee:a2:49:a5:f8:a4:58:52:a0:bf:1a:51:96:62:30:6d:8a:
50:19:a9:e6:ef:d7:20:d3:b4:a0:2d:f1:93:e7:87:85:f8:1d:
e8:30:d3:48:8a:b6:da:55:fc:76:cb:01:22:bb:b2:c2:8f:af:
d6:c1:06:76:bc:df:be:be:d1:2c:29:7a:a5:74:58:f8:3a:ee:
6d:da:fb:ce:f8:58:94:91:43:4a:82:82:61:82:57:95:f2:55:
bf:74:71:c9:b5:5b:01:e0:75:af:88:a2:a7:84:31:17:2f:4d:
25:fb:c6:33:1b:0d:b2:6c:d1:1f:30:15:cf:44:fa:74:c0:f7:
65:9f:71:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3K29mdeP1nR7iXAR6+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjUwNjI4MTgwMTIwWhcNMjUwNjI5MTgwMTIwWjAzMTEwLwYDVQQD
Eyg3YzRiYTZlNzhhNmU0MDQzNDU5MTY3OGI4OWQ4ZmZmMWU1ZWIxNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVNKR5FpaDhrhuvDXXZxZelEPM6E
wMWst/zxe6+0wwnNyD3LnPyEsYyhcjGDyVjqWeE55YVXDNG2nBUvMJuZWkRXFiKR
74oTrQiR3quifTOWw16EG7dQb7hbN5UkBbnHQua+VjOYz2G0MFukYdkaQj5u3LqZ
CIIz5HhHzv7MhnuYQ+dmVaHgkDtNoUy76czox4OAKknX64dBf6M+WRz77S2Pj+RA
U36LLtCgPG/GgOJczGUlLXOlzzG4GTPuGXc6ISSU32BOc+4o9KJMYWiF+JDsGbxq
7OHfyxi1pVIoyTOiD6yKKtSWE1ff+W61J+q9UFYaxx7vijpG29sO2jf/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxLpueKbkBDRZFni4nY//Hl6xW0MB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPT4u67Ba
ULpXYyYpqrjueju5EFUYySA+xxGTR5MWehs8c+ttgiPfcjgzyqQMO9WMoUmZk0ne
sMvtptz5FK3zHRPMw4VwqiVrRsIcqBnbbA5UIhWHj7jtsqsIxYp/vVKQsLcBu5cc
POsmsxVqndx1bKEa00ys7cHeFAnBLISHqO6iSaX4pFhSoL8aUZZiMG2KUBmp5u/X
INO0oC3xk+eHhfgd6DDTSIq22lX8dssBIruywo+v1sEGdrzfvr7RLCl6pXRY+Dru
bdr7zvhYlJFDSoKCYYJXlfJVv3RxybVbAeB1r4iip4QxFy9NJfvGMxsNsmzRHzAV
z0T6dMD3ZZ9x3w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:24 2025 by rpki-client