Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: qjhUrb2yy7tVFdgRYoKbgJAuTkCVEUMd9XviEe0G6wo=
Subject key identifier: 7C:AD:45:ED:10:8A:C1:B1:BA:49:34:6C:A8:50:35:5A:A4:31:B6:B2
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 0197B5FC69D410A966DAB8085F41B9C563D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0FEA
Signing time: Sat 28 Jun 2025 10:01:47 +0000
Manifest this update: Sat 28 Jun 2025 10:01:47 +0000
Manifest next update: Sun 29 Jun 2025 10:01:47 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: jVD2+CMNONtzOcnkn2356wQiSnkH8rYax2bxq5xSoRA=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:69:d4:10:a9:66:da:b8:08:5f:41:b9:c5:63:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jun 28 10:01:47 2025 GMT
Not After : Jun 29 10:01:47 2025 GMT
Subject: CN=7cad45ed108ac1b1ba49346ca850355aa431b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:95:a5:71:b7:f1:9d:ff:34:2d:60:4a:19:
cb:11:90:24:74:a7:2f:ab:9a:f2:52:8f:ce:b2:01:
94:3d:1f:1c:fb:ad:3f:ad:d8:cd:7b:16:75:03:e5:
0e:6c:59:cf:95:56:6e:13:57:ed:3e:3c:f4:f0:78:
9e:5a:62:cb:e9:29:d7:bc:1c:5f:88:d6:61:5d:b6:
4d:a9:17:6c:9e:c6:c4:48:17:d2:20:ee:dc:0a:db:
99:0f:6f:d4:a9:38:df:d7:2d:8a:2e:1f:c4:af:6a:
a7:28:56:99:0b:83:44:9e:ae:80:96:a0:af:4b:e0:
d9:38:85:53:d1:4b:e8:76:fe:0f:83:fe:33:7c:85:
05:bf:4d:56:82:ad:bf:de:0e:4a:42:44:fb:55:51:
ca:17:af:36:b6:3b:44:f1:d7:33:31:97:e1:39:fe:
1d:08:ac:15:50:dc:a9:c6:0a:0a:1b:85:79:f5:88:
57:d2:a9:25:1f:3a:1f:64:ca:e0:9a:90:e8:ce:aa:
0e:58:2e:28:3f:f5:38:6e:60:5e:3b:ef:8f:f9:47:
08:cc:b8:b8:d0:4f:e9:fe:f2:01:8c:f3:90:f8:72:
81:47:03:5c:5e:10:af:7a:ee:bf:c0:1d:99:97:fb:
ff:27:a0:a9:76:0d:29:60:71:5d:28:38:ba:b9:d9:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:45:ED:10:8A:C1:B1:BA:49:34:6C:A8:50:35:5A:A4:31:B6:B2
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:11:cd:31:1b:6f:8d:4c:ca:8a:dd:7d:09:e9:60:75:6e:
ac:ad:79:ff:76:d8:61:dd:48:d7:38:22:d4:a6:c9:9f:44:3d:
ca:5f:99:2a:99:89:2a:cc:44:bd:af:fd:a6:a6:03:48:8a:e2:
79:34:a3:0d:7f:3a:ee:7d:9b:f1:88:dc:76:75:51:18:e3:40:
3a:7b:35:b5:93:3c:3b:8f:ea:44:c0:ae:2e:27:06:6a:ed:f9:
ed:c5:a0:70:14:a2:d0:7b:70:66:a6:34:4b:4a:b0:a8:6f:4a:
36:d2:1d:e6:19:b1:b8:ab:c1:63:ed:18:5c:c3:94:af:7c:dc:
a0:1f:91:0e:8d:1c:7c:7f:07:75:96:0c:1d:f8:a0:51:5f:b8:
cd:70:c9:0f:9e:cb:05:35:25:73:ff:c0:58:06:85:4f:98:8f:
ae:aa:de:d7:84:48:c9:b0:c7:ee:d0:df:6d:d4:74:8e:dc:b7:
d2:6b:93:ab:02:88:c4:b8:37:1c:97:ad:8a:e0:b2:b3:da:52:
d6:26:53:39:5c:0b:38:59:7c:9c:fd:ec:d4:47:62:a3:38:94:
e8:d0:fc:40:45:ff:0e:e6:75:86:69:04:80:1f:87:5b:b4:9c:
15:ce:46:19:ad:e7:5f:fa:ac:a9:59:1b:df:4a:3a:22:5c:81:
41:ab:02:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:04 2025 by rpki-client