Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: CGlx3TPnUlOPw7ruYxsPdJibpbBN/1akx25864vTIYg=
Subject key identifier: 82:2A:4B:26:1E:6F:20:13:BA:FD:35:33:0E:2C:25:05:54:46:4E:90
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0196C0140156E089CB811FC09497DE891C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 16:00:58 +0000
Manifest this update: Sun 11 May 2025 16:00:58 +0000
Manifest next update: Mon 12 May 2025 16:00:58 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: tSL3fYj64GrltAanK/cSIvbJzofTL7NdcGjZJoGoVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:01:56:e0:89:cb:81:1f:c0:94:97:de:89:1c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: May 11 16:00:58 2025 GMT
Not After : May 12 16:00:58 2025 GMT
Subject: CN=822a4b261e6f2013bafd35330e2c250554464e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:43:85:18:78:5e:59:17:75:d4:66:94:4a:
b0:44:b5:28:1d:a4:34:d0:5e:f3:31:7f:fb:b9:ad:
f5:da:c6:84:7b:dc:c4:ff:9e:40:72:8d:25:10:e9:
8e:8b:b8:73:08:3e:76:16:23:d4:a1:1c:70:39:7d:
15:92:62:0a:96:9b:9d:f4:f2:e0:da:3a:c1:66:bb:
7f:ba:e7:a6:a8:07:27:4b:c4:b3:bc:a2:9c:f5:8b:
42:8d:36:58:d1:12:d4:26:72:8b:18:f1:46:16:2c:
fc:5e:9d:57:ea:6c:54:9b:30:c8:c1:7f:a7:52:a3:
06:2e:37:11:6f:3b:43:32:af:a4:b5:dd:a5:3b:f4:
52:b5:6f:80:5a:5d:dd:bb:90:66:e7:0d:31:8d:f9:
fd:85:4d:b9:14:8a:b8:f5:aa:2d:f7:7c:81:d9:23:
e7:6d:76:98:74:e0:42:84:de:74:83:9e:ed:36:29:
50:c9:aa:0e:35:ea:d4:35:70:45:32:bb:04:9e:f7:
ab:8c:47:1c:b7:c9:50:1e:8d:b8:25:66:2b:aa:27:
84:dd:20:ce:93:3e:da:8d:e4:7e:4c:d8:39:dd:e8:
81:e5:1b:d9:97:91:8e:ec:9e:40:23:96:94:ff:bd:
94:f1:55:92:c0:ec:4b:6a:e1:fc:89:3a:da:e8:63:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:4B:26:1E:6F:20:13:BA:FD:35:33:0E:2C:25:05:54:46:4E:90
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f9:86:d9:5e:52:b8:a1:07:03:0c:56:97:ec:43:94:59:94:
13:b1:97:46:03:5c:da:90:dc:82:2a:44:0e:b7:1e:c5:c4:05:
af:4a:d8:8a:d3:13:f0:54:65:8a:7a:fc:20:8d:ac:57:ef:9b:
e7:8a:71:46:20:47:60:27:c9:64:b7:14:bb:d8:cc:dc:d0:18:
c3:ed:bd:56:37:a9:5b:35:61:48:21:ae:06:99:d5:b2:08:19:
b9:b4:00:60:78:0b:4f:0a:40:6e:6d:ed:8d:51:05:54:71:1d:
5d:aa:54:72:09:af:33:8f:4a:9e:8f:b6:88:14:56:14:bb:3b:
91:07:c9:62:df:c1:7b:0e:79:3a:6e:b8:9b:84:ac:6d:74:26:
7d:38:d9:30:57:15:48:19:82:3d:d3:ff:2e:97:f4:20:28:95:
2b:ad:05:58:fe:d8:cf:7c:e2:f3:ed:fc:e1:68:17:0e:2c:5e:
ab:f6:c1:b5:0f:fa:73:dd:a9:b4:63:e3:b6:f5:bb:4b:54:7d:
ff:3f:74:b9:09:f5:b8:5e:8a:78:4e:62:9f:d2:02:ce:8e:73:
da:e0:52:14:63:4b:3c:7a:be:72:92:fd:26:77:76:15:70:9b:
d9:fc:f0:ae:05:bd:dc:43:50:c0:bb:f2:f4:56:06:a0:10:c0:
e7:d4:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:43:09 2025 by rpki-client