Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: tZQZL9JDff+928QJHtnmuduUzwC6NdnXPUls9hzTjso=
Subject key identifier: 35:F3:8F:19:F4:6A:1B:1D:A9:C6:1F:90:0E:23:0E:B6:21:D6:58:D1
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 0196B4EB424BA7830E3D92363B8E97EA2542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0729
Signing time: Fri 09 May 2025 12:00:38 +0000
Manifest this update: Fri 09 May 2025 12:00:38 +0000
Manifest next update: Sat 10 May 2025 12:00:38 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: QyQqo2l0mkDlsFCm6HmSeJ8UKR0OKAzDRZDU4uKYAn0=)
2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:42:4b:a7:83:0e:3d:92:36:3b:8e:97:ea:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: May 9 12:00:38 2025 GMT
Not After : May 10 12:00:38 2025 GMT
Subject: CN=35f38f19f46a1b1da9c61f900e230eb621d658d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:61:75:90:1e:43:15:6d:1a:a6:d3:3a:e0:
24:d3:76:66:16:15:05:df:ce:70:cc:91:c7:5b:63:
e1:ea:9b:60:60:1b:d7:8e:2a:33:92:af:53:a8:8e:
1f:fd:09:c6:e2:59:bc:34:2d:c3:c6:8a:0e:45:c9:
3b:5f:9b:6b:bd:76:c8:ba:9b:e0:21:5a:65:ec:72:
6a:58:f4:2b:9b:8e:8e:cc:8e:4a:1d:bf:da:9a:e4:
aa:be:a9:28:43:5d:f5:16:61:7c:2f:af:2e:96:8b:
34:17:6e:11:b3:8b:a2:b0:36:f2:82:ca:b5:55:ca:
68:b0:9a:7d:6a:92:7e:ff:9f:ec:eb:7d:d8:b2:85:
05:3d:ec:b8:97:dc:06:c5:1b:7a:d2:00:8e:8c:95:
6e:27:05:4d:ef:c9:a3:67:c0:9a:eb:77:ea:f2:85:
4a:8f:0b:37:dc:23:b2:85:d6:fa:54:2f:dd:70:31:
80:f8:2b:6c:fe:89:25:ff:95:ff:80:61:6f:a7:8b:
f2:a4:05:08:81:3e:c4:8f:23:10:34:fa:13:56:22:
65:a9:89:72:35:e6:ea:0c:42:46:fa:af:b0:c9:c2:
bd:2c:6d:45:f8:67:9d:fa:7f:52:d9:70:a2:89:d6:
8d:23:da:0a:a4:5d:28:55:12:f4:cd:8a:5d:4c:f2:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:8F:19:F4:6A:1B:1D:A9:C6:1F:90:0E:23:0E:B6:21:D6:58:D1
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c4:b4:cf:34:9a:3a:20:02:a6:7a:98:a4:7f:d7:49:83:17:
fe:5c:d7:ac:89:e3:33:c6:ec:24:b4:06:97:48:18:ec:18:58:
40:35:16:b8:bf:4c:c8:61:db:7a:6d:ec:09:37:93:54:76:5e:
c1:7e:03:0f:5d:88:cc:3d:38:d2:d0:96:1b:6d:73:62:75:ba:
61:7a:76:7c:59:63:2a:2e:58:e6:b1:ad:bc:fb:ef:08:ca:38:
be:c5:8e:27:29:fe:8d:38:b0:b7:3e:e9:45:b3:cc:de:16:9c:
dd:f8:eb:8e:c9:d4:8b:79:99:76:ae:ac:c7:27:39:35:f3:79:
3e:16:cc:0d:20:65:67:d3:0c:09:91:50:57:19:49:df:41:5f:
a6:03:bb:54:6c:ed:f7:d9:fe:64:0a:e2:17:e2:ca:1e:77:43:
ef:5e:b0:48:3d:94:79:09:83:2a:fd:16:4a:27:e5:e2:65:8e:
d0:d3:e3:9b:09:06:9b:03:c9:95:71:54:b2:76:ca:8a:6f:70:
86:77:06:46:da:59:b5:86:53:c5:b7:e9:a6:89:e8:3d:c2:54:
c0:0a:1a:bd:ac:a4:eb:f8:c0:ff:b9:31:23:c5:47:26:c9:34:
eb:67:e9:fc:09:38:9d:1a:0c:d4:82:52:cd:d7:7f:22:a8:1d:
41:12:84:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa060JLp4MOPZI2O46X6iVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTA4YTI4YzcwN2IwZTVjMmMyZTZjMjEzN2Q0NTg3OTEx
NGJiOTIwHhcNMjUwNTA5MTIwMDM4WhcNMjUwNTEwMTIwMDM4WjAzMTEwLwYDVQQD
EygzNWYzOGYxOWY0NmExYjFkYTljNjFmOTAwZTIzMGViNjIxZDY1OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiRhdZAeQxVtGqbTOuAk03ZmFhUF
385wzJHHW2Ph6ptgYBvXjiozkq9TqI4f/QnG4lm8NC3DxooORck7X5trvXbIupvg
IVpl7HJqWPQrm46OzI5KHb/amuSqvqkoQ131FmF8L68ulos0F24Rs4uisDbygsq1
VcposJp9apJ+/5/s633YsoUFPey4l9wGxRt60gCOjJVuJwVN78mjZ8Ca63fq8oVK
jws33COyhdb6VC/dcDGA+Cts/okl/5X/gGFvp4vypAUIgT7EjyMQNPoTViJlqYly
NebqDEJG+q+wycK9LG1F+Ged+n9S2XCiidaNI9oKpF0oVRL0zYpdTPLNzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXzjxn0ahsdqcYfkA4jDrYh1ljRMB8GA1UdIwQY
MBaAFAoQiijHB7DlwsLmwhN9RYeRFLuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUt
MWY4NTgxNDIxNzYwLzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUtMWY4NTgxNDIxNzYw
LzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcS0zzSa
OiACpnqYpH/XSYMX/lzXrInjM8bsJLQGl0gY7BhYQDUWuL9MyGHbem3sCTeTVHZe
wX4DD12IzD040tCWG21zYnW6YXp2fFljKi5Y5rGtvPvvCMo4vsWOJyn+jTiwtz7p
RbPM3hac3fjrjsnUi3mZdq6sxyc5NfN5PhbMDSBlZ9MMCZFQVxlJ30FfpgO7VGzt
99n+ZAriF+LKHndD716wSD2UeQmDKv0WSifl4mWO0NPjmwkGmwPJlXFUsnbKim9w
hncGRtpZtYZTxbfpponoPcJUwAoavayk6/jA/7kxI8VHJsk062fp/Ak4nRoM1IJS
zdd/IqgdQRKE+A==
-----END CERTIFICATE-----
Generated at Fri May 9 18:15:43 2025 by rpki-client