Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: 7PdTKMRIkt2FwcykPbXsRIE/fyvg4PhmsSjzg3g5huo=
Subject key identifier: 17:EE:ED:B3:76:60:88:33:24:85:32:DE:9C:9A:31:7C:5A:FC:9D:3D
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 0197BB901FBF7C265773FB03D07B5F559FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 07B1
Signing time: Sun 29 Jun 2025 12:01:14 +0000
Manifest this update: Sun 29 Jun 2025 12:01:14 +0000
Manifest next update: Mon 30 Jun 2025 12:01:14 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: tItQ0kzR74RfehtiKNa6ddkqGm+1k2snhYWkst4Ri+Y=)
2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:1f:bf:7c:26:57:73:fb:03:d0:7b:5f:55:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Jun 29 12:01:14 2025 GMT
Not After : Jun 30 12:01:14 2025 GMT
Subject: CN=17eeedb376608833248532de9c9a317c5afc9d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:b8:a7:b3:09:a9:b1:c1:6b:29:31:4f:de:
47:35:97:13:3d:08:cf:63:87:2a:15:f0:55:49:5d:
73:cc:f4:37:8a:0a:75:5b:27:cd:25:47:53:75:b6:
bd:24:f7:aa:42:25:c9:51:9c:df:37:05:f2:26:54:
48:4c:da:71:1d:f4:a2:43:3b:af:ed:1d:36:53:71:
36:28:c9:cf:4e:f6:10:4d:b9:ef:8e:14:68:be:65:
b2:5e:2f:d1:40:e6:07:d3:b5:3a:25:dd:7f:61:dc:
b0:2c:11:86:e7:68:33:88:af:2d:41:5a:43:0f:7e:
dd:5a:90:e3:26:ff:16:6e:c0:45:9f:8c:63:45:ca:
22:d8:52:81:b7:3d:b6:cd:f0:2f:02:6f:51:b6:f8:
de:bf:33:3e:33:13:35:80:cb:ee:e7:e6:cc:cf:45:
81:49:18:55:ac:71:bf:1c:1b:65:a4:78:ee:18:f2:
7f:12:0d:f6:de:6b:60:cc:57:c7:68:84:ad:99:71:
c5:b4:e8:b8:ee:1c:3e:fa:f1:bc:e7:14:f6:fa:09:
3f:71:97:b3:77:57:04:46:04:b4:39:b2:60:00:87:
09:7d:7a:ee:2c:1a:c8:e5:e9:d3:cc:4e:c3:b4:00:
4c:cf:be:3c:e0:c4:c7:14:73:b0:26:8a:58:2b:ec:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:ED:B3:76:60:88:33:24:85:32:DE:9C:9A:31:7C:5A:FC:9D:3D
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:5a:34:f7:98:59:e4:dd:d3:f1:08:03:70:d4:54:c9:4c:
57:16:c1:32:9b:2b:e0:6e:e3:e9:0d:bb:3c:1b:5e:70:68:3e:
f8:b0:8f:7e:31:6b:1b:ed:3c:20:96:80:4b:0f:31:59:ad:de:
51:d1:b4:0b:f4:c2:76:36:ef:f1:22:86:7c:44:e1:a1:59:5a:
cf:eb:de:7a:27:d4:14:61:12:3b:b3:b6:01:e0:75:ca:2d:a8:
77:75:f0:ef:c3:c8:b5:18:60:29:3b:ce:1e:e0:bf:8c:f1:67:
ea:37:c3:53:26:b7:db:e2:19:e9:32:fc:68:09:05:d9:92:b2:
e2:a9:62:b1:c1:f8:82:27:8f:0a:3a:f0:65:b1:56:4e:70:e3:
bd:44:19:a8:09:33:5e:e1:9d:2e:32:9a:0a:ec:a7:80:20:ba:
60:dc:5d:d1:a9:78:09:14:27:f3:e2:ca:01:27:43:e0:3e:18:
47:16:ae:c7:1c:b5:9c:7a:fc:8f:ce:f3:19:6a:f1:e3:cb:eb:
3b:72:77:03:72:68:c9:d9:30:a7:a6:aa:fe:8e:e4:70:af:34:
e2:77:81:aa:4b:c7:54:14:87:4a:49:f0:fb:df:4e:b8:a1:77:
59:54:c4:02:64:9e:17:98:65:d1:3e:29:8d:49:c6:4e:03:ee:
21:11:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:31 2025 by rpki-client