Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: IcgODvWHuGivHbDoMb7PchnFK0Mom2XahVBgeiOAKac=
Subject key identifier: 7D:3B:BE:19:F8:90:50:4A:AF:D1:71:37:D8:A3:43:E9:29:08:32:64
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 0198D5BB8DF00024B22FE695D5184139F903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 107F
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: ir+Tp0Dy3JuZi7PyHxHiXiGCMpTBYdGY01oWOWj3YKU=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8d:f0:00:24:b2:2f:e6:95:d5:18:41:39:f9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=7d3bbe19f890504aafd17137d8a343e929083264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:0e:7a:e6:e3:e7:be:07:57:1b:77:36:9d:
b5:dc:29:61:d2:87:8d:b7:99:b5:08:da:0b:54:73:
b5:4c:1e:ba:df:8e:92:d1:8d:a1:fe:f1:6e:bf:1b:
c8:a6:2d:2e:4b:6e:b0:a2:7c:db:a6:fc:39:dc:17:
e8:7a:08:45:5b:f4:09:99:29:8c:8d:11:ec:11:63:
78:dc:68:d5:d8:d2:72:dc:21:2e:01:72:ca:72:fe:
21:8f:c2:54:73:99:64:ee:1a:e5:58:e1:20:49:94:
6b:b3:6f:48:e3:55:0a:f4:58:60:3c:10:ea:6e:b3:
d3:4a:d1:22:de:ee:1d:ac:a5:b1:e2:53:2a:56:b2:
42:b7:27:4d:b1:d3:ad:e4:6c:f8:54:2f:76:3f:72:
bf:f5:1f:fd:07:1f:62:9c:66:ea:ed:72:c2:ab:ee:
4f:89:6b:ef:be:68:d1:9b:b9:f5:27:f3:81:9e:b6:
3f:86:7b:91:3d:70:88:b2:e5:3a:68:3e:33:97:d0:
05:b2:db:28:c6:12:96:ad:84:ea:3b:94:75:75:0f:
55:12:1f:90:c1:59:b0:38:76:61:9c:08:43:34:36:
da:9b:99:1b:db:6e:54:11:d1:f1:9a:2a:48:c9:55:
02:36:73:8d:67:cf:ca:4e:3b:5a:79:2f:35:a7:2c:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:BE:19:F8:90:50:4A:AF:D1:71:37:D8:A3:43:E9:29:08:32:64
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:a3:b4:ca:d2:82:8f:04:49:b4:12:07:af:b0:54:6e:64:
d5:c9:21:ea:5c:75:00:bc:37:03:4c:6c:16:d0:bc:08:59:c3:
4a:09:f4:43:97:2b:2c:34:a6:73:a4:f2:c2:38:a7:45:9c:71:
6e:00:59:e0:74:57:17:bf:5f:56:1b:ab:75:61:97:66:f3:16:
ad:d6:5b:9c:77:f7:15:aa:33:ed:95:ad:1b:6a:8d:f9:82:58:
f8:c0:a0:f5:b5:20:08:89:55:de:de:d8:3e:c4:39:e7:b4:e7:
52:ba:ff:80:a1:80:b5:17:78:bb:b2:a3:31:3c:88:9c:bc:4c:
7b:4b:e0:6f:67:76:c0:a3:09:87:67:80:45:d0:2e:30:a5:1e:
f9:9e:1c:42:3f:b9:1a:67:47:00:db:30:dc:1f:14:45:d2:73:
8b:d7:ce:aa:95:30:7c:23:50:63:23:27:5b:ae:fa:e7:75:b6:
92:9f:73:06:86:53:bf:57:07:3f:7a:d0:37:ec:b6:8f:8a:f0:
b7:a5:b9:56:8a:cd:39:d9:ea:3a:0a:e4:56:31:5f:92:55:3c:
48:15:57:f1:9f:09:98:d9:5b:5d:8e:b8:2f:50:be:19:60:d7:
61:c6:64:a5:4d:48:6a:82:0d:1b:cf:89:8a:f0:d2:23:3f:94:
72:70:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:11 2025 by rpki-client