Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: VWn4b/fbMFhsUxEtxJVCOfy7/AY3OYKQ2ywsxSxkEiE=
Subject key identifier: 45:09:5E:96:E0:4C:6D:55:CA:13:CE:A1:AB:B8:51:5A:EC:00:14:6C
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0197B934288F14BB7198372B9030FDABD222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 01:01:32 +0000
Manifest this update: Sun 29 Jun 2025 01:01:32 +0000
Manifest next update: Mon 30 Jun 2025 01:01:32 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: gXDtizP9cps0NufRX+vEcHRZPIosT29S+YFZ791VZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:28:8f:14:bb:71:98:37:2b:90:30:fd:ab:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Jun 29 01:01:32 2025 GMT
Not After : Jun 30 01:01:32 2025 GMT
Subject: CN=45095e96e04c6d55ca13cea1abb8515aec00146c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:e7:4d:d1:c5:69:48:40:c5:8b:41:5e:82:
4b:02:f8:ea:79:c8:12:62:be:01:e1:a8:68:09:8e:
4d:9f:59:14:fc:63:99:e1:e2:f5:44:a1:2e:45:98:
8d:a6:ce:ea:97:b2:fe:ed:66:7a:25:9c:11:f8:20:
d7:b9:d4:73:d3:0d:f3:30:c5:73:be:63:36:10:6e:
15:0d:fb:32:52:34:8c:39:b4:70:75:68:74:74:2b:
3c:5b:26:e9:49:e0:78:6e:84:69:6f:2f:62:d4:f7:
b8:1a:33:bc:f3:f6:04:e5:0d:3c:e5:16:3f:bd:48:
b7:40:15:9e:ef:76:03:f0:9b:b5:a7:02:e3:fc:95:
a4:e9:a4:1c:d1:06:f1:76:15:c1:82:ac:6c:fe:06:
c1:16:03:d1:a3:e7:b5:95:41:b2:9f:57:0c:86:22:
8e:16:ac:ae:b5:59:68:fd:c5:0f:89:32:a8:3d:82:
a8:c1:8f:d6:78:4d:5a:bf:b6:4b:47:9b:4e:eb:b6:
3d:85:f1:e2:d5:ce:24:9d:96:d0:fd:62:b5:77:53:
97:11:7c:3b:0e:84:31:0c:e4:80:78:04:47:c4:b4:
16:14:26:41:56:04:27:b1:65:6d:1b:72:47:0a:ac:
c8:d3:3b:db:13:8c:7d:d2:0c:b6:79:ac:52:8d:49:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:5E:96:E0:4C:6D:55:CA:13:CE:A1:AB:B8:51:5A:EC:00:14:6C
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5a:9b:f8:99:c9:0a:e1:ba:3a:d4:c1:fd:65:93:01:6f:de:
73:00:d7:4d:49:e2:0f:53:91:f8:1e:95:fa:0b:5e:6e:52:51:
55:e3:48:79:cb:a1:6e:ea:0e:4f:18:ad:62:c5:a7:e3:d3:c0:
61:59:d0:60:eb:96:f5:a0:69:ac:0a:81:58:5b:bc:36:21:62:
fc:97:70:46:06:ad:8f:93:81:2f:e1:36:0f:35:79:5b:14:b7:
d5:cf:3d:22:2b:0d:75:18:40:08:73:1e:20:df:f0:0c:23:35:
d4:f9:48:78:b9:09:43:c4:c7:a5:4f:1a:e2:f0:e5:32:b5:9e:
4d:4f:13:7e:a6:29:32:87:0a:3e:b3:49:06:0d:bd:c7:dc:d5:
7b:02:e1:6f:04:fc:70:1a:a4:5c:1c:16:47:90:6f:b1:ed:a9:
5e:a8:8e:8b:3a:d2:79:46:82:c8:54:88:80:fc:ca:19:9e:23:
6e:a5:30:b1:46:44:ba:05:59:13:f2:00:48:46:8f:62:fc:cb:
8d:d2:8a:e5:6f:28:69:17:29:6f:ee:63:76:da:27:dd:2e:17:
e8:e9:e8:5c:20:8a:99:53:05:54:bb:2a:3d:ae:9d:b4:bc:59:
e4:65:f6:58:52:71:6f:89:6e:8a:39:65:a5:7f:b7:8f:ae:f8:
f4:2e:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:16 2025 by rpki-client