Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: nVewG3+jVp1D6pbrRqRt7XuO0WbDaTnFv3PW3Qi01UQ=
Subject key identifier: E5:88:6D:F9:4B:7A:4A:6F:45:39:0B:72:52:8C:6A:40:FE:58:D1:99
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0198D515F5799CE7DA56F58D4F8BDA7CFD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: x1ig4ipBvxQ1oHQBDtb2xJWjgOAYPRO7DOZCso2eLOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f5:79:9c:e7:da:56:f5:8d:4f:8b:da:7c:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=e5886df94b7a4a6f45390b72528c6a40fe58d199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:56:f8:ab:1c:e5:01:ca:91:a4:16:da:b2:
34:e0:24:dd:f9:f1:a8:7f:f5:65:c2:fc:73:3b:23:
7b:d9:2e:96:3b:35:dd:35:dc:ff:d0:27:31:83:fc:
03:3f:a4:1f:19:f4:65:77:06:40:50:91:2f:e5:db:
bb:75:49:14:0a:0f:90:99:c4:f7:a9:32:2d:6f:b9:
a8:11:98:44:dc:cf:c7:e3:33:92:40:b2:42:0d:78:
f7:b6:86:75:c4:b3:e0:dd:e3:34:ed:df:f1:39:61:
5f:f0:bd:15:ae:2b:16:25:6d:de:62:b0:7f:7e:c6:
f2:51:86:ff:c4:b2:92:66:17:6d:f9:c2:39:38:74:
88:6a:c3:03:20:fa:27:b0:7b:f4:91:31:b2:69:07:
7e:06:a0:d5:ec:82:49:11:30:1c:ca:5c:2a:bf:b1:
83:b2:0e:73:36:5d:2d:d1:cb:85:90:b5:7b:35:78:
8f:04:c1:f5:4f:35:78:fb:9c:b1:f7:38:35:36:6f:
8d:01:59:96:b7:e4:12:53:cc:31:c6:2b:05:74:7e:
eb:f2:8d:1c:2f:5c:27:ed:3b:be:2a:f1:e4:51:17:
96:17:74:23:d2:18:0a:29:7b:4a:7e:46:d4:98:be:
84:fc:46:de:6b:d8:05:9f:eb:9c:a4:98:be:df:ac:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:6D:F9:4B:7A:4A:6F:45:39:0B:72:52:8C:6A:40:FE:58:D1:99
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f7:d6:05:6b:d7:b2:5e:c4:32:df:f0:42:29:1f:7e:07:08:
9f:c7:3e:c6:38:b8:4f:d1:0b:8e:09:5a:be:1a:50:d7:87:a6:
65:0a:a1:4c:57:27:b9:38:ac:b6:ab:1d:cc:9a:05:4e:88:79:
35:4e:8b:14:90:37:42:f5:ae:d8:0a:ed:9b:3f:5d:fe:ec:c5:
95:aa:10:95:35:f9:1e:5e:5e:ec:6b:b6:eb:bb:cb:45:6c:46:
ad:2f:d7:5c:f0:88:8f:cc:f6:94:84:eb:e0:a8:36:b9:9b:eb:
5c:9f:34:7d:ce:17:8c:f5:99:44:8b:30:5c:74:de:88:5d:30:
f2:8c:fc:91:f5:5b:d1:bc:b1:9a:31:9b:64:5a:b2:30:92:a2:
a6:e4:cd:c9:c5:3a:53:2b:28:a7:54:87:00:2b:ed:ae:22:75:
15:c6:86:2b:ba:50:b9:36:c1:e8:e3:f5:9e:7c:41:3b:27:b9:
fd:63:db:26:5a:4b:af:2b:61:80:e0:b1:8b:ff:17:a1:39:84:
a1:36:6b:46:69:4c:96:b6:8e:9e:05:70:bf:05:a8:04:79:b4:
95:f7:6c:68:23:cc:bb:49:f6:f0:52:9b:71:b0:8f:11:39:ab:
cf:0c:8b:4b:34:21:f2:8e:18:41:1f:16:29:2e:1e:5e:d8:5b:
cf:b4:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:19 2025 by rpki-client