Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: fWwDgILuQ8+jAtas6/l/ducOBIp+R9Hgn8j4tzwL2rg=
Subject key identifier: 1B:DF:CE:B0:68:2D:33:18:40:F7:25:10:B8:B6:E8:AD:69:07:02:DF
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0199FC8F87DD0BCF7A7AB24D077DE5252A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: z1pxSeaLHcNFnxVSOl3m/vn1PiyuEgGsFNHZeqzrK4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:87:dd:0b:cf:7a:7a:b2:4d:07:7d:e5:25:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=1bdfceb0682d331840f72510b8b6e8ad690702df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:32:9c:eb:49:63:e3:94:8d:2e:13:a9:68:95:
19:75:dc:44:11:f4:21:4e:65:42:d0:e0:65:56:17:
13:98:4e:55:44:8d:74:dc:31:ce:af:91:cf:2e:27:
de:02:ea:39:df:6d:ae:6a:f0:3a:51:dd:b0:ab:d8:
07:10:34:95:56:39:3b:43:1c:3e:3f:ad:95:39:ad:
8f:4f:e5:83:1e:0d:da:9a:46:28:05:ac:6c:ab:11:
45:ab:60:59:9c:8c:78:eb:31:d0:5d:90:e7:f7:1e:
65:c4:b1:ad:23:6a:1f:25:39:b2:d8:7c:7c:7b:f7:
5d:90:ef:f1:59:ca:98:42:e7:f7:e3:59:dd:8a:54:
b1:f5:f4:c9:b9:77:f0:02:aa:cb:29:12:a9:b0:60:
56:d0:df:cd:af:a0:a4:23:91:17:97:24:c4:5f:a6:
76:f0:50:bc:2a:e9:32:52:22:ab:f9:74:fb:5c:9e:
94:ab:72:2a:70:f2:9b:b6:53:39:2d:df:2f:b1:59:
78:40:e1:ac:41:9e:d0:4e:a3:18:23:29:f5:72:d1:
70:60:01:06:48:08:fb:e9:b2:8f:ce:79:09:c5:94:
92:af:5f:38:d7:a0:2f:41:50:ac:7a:b6:af:ad:2d:
92:da:ab:94:50:58:0c:97:39:02:8f:61:2c:dd:70:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:CE:B0:68:2D:33:18:40:F7:25:10:B8:B6:E8:AD:69:07:02:DF
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:cf:c6:a5:05:b4:af:0f:13:70:f4:bb:70:18:14:16:17:
44:01:f7:ed:ab:6c:00:80:cc:84:5d:3f:da:e2:5a:dd:49:fb:
b6:1b:e9:0a:dd:04:29:55:9d:8c:3b:78:d6:98:fe:95:23:1f:
23:87:eb:7f:49:de:04:34:81:0d:c4:c4:0b:25:63:29:08:64:
4e:97:70:e5:85:2b:a7:37:82:16:7e:4e:6c:59:11:ef:a0:f3:
56:fe:7b:80:1f:22:bb:e7:c7:11:77:4f:ca:d9:77:71:0e:c8:
64:d1:4f:af:e0:5c:9c:2b:3d:e4:b5:82:8d:04:e2:7a:ca:f6:
03:5a:2f:f9:8e:7b:d3:e5:a7:57:da:8e:78:81:e4:c1:d6:c2:
3b:94:86:66:07:b0:aa:7f:5d:59:fa:49:d1:16:bc:eb:ce:cb:
f9:90:be:57:48:ca:c2:9c:9d:0c:a4:2f:4e:e0:5f:e8:1e:13:
0a:d8:49:0c:12:85:d0:39:a4:84:00:4d:df:c1:74:30:e1:37:
78:63:db:57:b0:2d:d4:aa:a1:9a:4c:d9:60:ef:7f:67:d8:db:
ae:14:b5:79:26:1c:d9:71:57:25:b0:b8:be:e3:78:73:c5:de:
33:31:89:09:76:bd:01:9c:23:6c:cb:5c:cf:cb:4d:6f:c1:a7:
d9:43:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:19 2025 by rpki-client