Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: wLBJb3ZE/Aymv1eoS/Ha3WbKMPCDqJLquFIKHN7/tT0=
Subject key identifier: E9:C7:84:71:28:38:13:CB:BA:61:F0:9D:73:19:EE:EA:5F:E5:88:43
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 0199FF229241291457EEC77B74A7D49404F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 1119
Signing time: Mon 20 Oct 2025 01:01:19 +0000
Manifest this update: Mon 20 Oct 2025 01:01:19 +0000
Manifest next update: Tue 21 Oct 2025 01:01:19 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: YVaLf2O7YpA6DSLzte2JdRFcBCECJ24Nkr7ykSU/Jhw=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:92:41:29:14:57:ee:c7:7b:74:a7:d4:94:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Oct 20 01:01:19 2025 GMT
Not After : Oct 21 01:01:19 2025 GMT
Subject: CN=e9c78471283813cbba61f09d7319eeea5fe58843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:cc:3d:09:33:d8:22:f8:13:64:cb:7b:e3:
b9:b4:90:ac:82:3c:2f:70:f2:f8:e7:a5:cb:c0:59:
c7:2c:67:a0:c6:7e:ae:d0:9e:ec:98:0e:d9:52:b0:
b2:ff:05:50:29:38:36:71:b5:f0:3f:f8:a9:07:c7:
b7:26:41:b7:21:d3:44:4a:76:6d:90:5c:da:96:39:
7e:97:b5:25:15:3d:5c:e6:82:52:09:08:cd:7e:7c:
da:86:df:66:ba:f9:b3:f0:dc:2e:e5:c9:6b:c1:58:
08:51:42:50:2e:da:8d:d7:e5:30:af:54:ba:a6:c4:
eb:25:5d:2b:53:f8:e7:f0:d9:1a:1f:12:b6:73:fe:
8a:68:6e:7e:d1:eb:39:c4:92:bf:5f:06:89:3d:2b:
ee:15:25:df:dd:eb:e5:84:7c:e8:5a:2c:c6:6c:e9:
13:ea:c7:fc:8e:44:e4:b3:c5:c6:e8:81:07:9c:aa:
ef:7a:cf:b6:08:06:18:03:09:69:50:c1:bf:bd:65:
86:5b:02:13:98:6e:3d:18:a9:94:92:0a:8a:63:bd:
9b:2d:de:b4:89:06:ab:84:0c:71:c8:6d:26:b0:0d:
1a:ac:80:ea:67:68:c5:9a:ad:ae:a3:80:26:3a:9a:
d5:e4:c5:ad:45:11:91:3a:90:c8:fb:7c:96:31:74:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:84:71:28:38:13:CB:BA:61:F0:9D:73:19:EE:EA:5F:E5:88:43
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ff:95:64:bc:1a:96:a8:d3:58:e9:7c:37:6d:e0:7a:44:e8:
f4:56:a4:34:ca:7e:e3:6f:d2:68:6a:51:c2:63:b6:87:84:f5:
c0:83:8d:23:bf:ea:a8:4d:7d:dd:2c:48:d5:f5:79:ba:70:40:
2e:53:a6:e2:7a:cc:06:7a:f5:60:c2:f9:b5:07:c4:d8:9a:ae:
ac:34:eb:37:36:66:79:56:fd:01:ab:b9:30:83:d3:c4:65:cc:
d5:fa:65:44:0f:c9:e3:69:14:61:62:60:d1:c8:20:fd:65:60:
2b:52:5d:9e:bc:97:e5:dd:70:c8:3a:87:f9:1e:95:73:54:db:
5d:09:e3:ff:72:41:52:22:b9:c6:3a:07:e9:be:4a:50:5f:2d:
37:f1:76:5b:84:28:b9:06:30:12:42:58:76:52:cf:a8:6f:a0:
14:b6:82:04:aa:18:e9:ee:5a:d0:a1:38:a9:bb:13:f5:8b:9c:
a4:65:60:42:d6:63:2e:00:cc:c2:33:7b:eb:fa:48:1c:92:ad:
c5:47:c0:b0:8d:64:e6:06:cd:c9:d5:b1:1f:27:64:7a:6c:59:
2b:0b:98:3e:5b:4d:00:6b:ec:83:0f:72:0d:56:b1:b6:cd:dc:
c1:81:df:c3:b5:c6:4d:6f:ad:54:33:e7:a0:44:70:23:5c:77:
bd:7c:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:39 2025 by rpki-client