Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: 0zi4ougvshiVmbhMcB6oTdyuxfTw8bnyjsEFBM1Ijtk=
Subject key identifier: B1:A1:BE:27:C8:36:54:BD:03:B1:74:47:68:8E:70:13:0C:52:A5:FF
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 0196A6C1F7AD96976F0DEE36D026254D0F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 10AB
Signing time: Tue 06 May 2025 18:00:51 +0000
Manifest this update: Tue 06 May 2025 18:00:51 +0000
Manifest next update: Wed 07 May 2025 18:00:51 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: 8GU8LkQetn03vZnVn31ykNKjF99ZzTJq3Niw8OdrF+k=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:f7:ad:96:97:6f:0d:ee:36:d0:26:25:4d:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: May 6 18:00:51 2025 GMT
Not After : May 7 18:00:51 2025 GMT
Subject: CN=b1a1be27c83654bd03b17447688e70130c52a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:7a:10:0f:1e:ac:b5:8f:e7:53:8c:e2:4e:
7d:1a:9a:54:01:7d:05:e1:ed:84:76:d1:3b:3c:43:
6f:53:1d:6a:cc:a8:84:f3:6f:1a:5b:53:1a:f1:12:
6e:e1:01:cf:36:1e:62:38:52:6b:32:cf:5d:d7:51:
23:9e:11:22:97:bf:fd:e4:cc:96:d2:3e:34:b1:fb:
15:98:dc:e2:01:84:16:f2:5e:73:44:99:bf:f6:ff:
5c:c1:fb:db:a7:a7:e6:94:8b:f9:93:84:ab:7a:d3:
ec:e1:32:c6:03:82:aa:f8:eb:47:7f:4e:fc:d3:04:
00:9e:58:22:97:4c:8d:a9:7b:6a:34:1d:69:dc:2a:
6d:e6:bb:6e:26:44:b4:ac:24:86:24:09:38:28:c9:
ac:db:b4:30:0d:47:38:5f:52:10:c0:f0:a9:0c:f1:
dc:0a:24:ab:91:62:c4:35:71:97:96:db:05:1c:04:
b3:79:d0:00:47:d2:bc:f9:bf:3b:41:de:1f:99:de:
c8:36:5c:7c:ea:1a:be:81:ba:db:f0:bc:e9:53:19:
ff:1d:ea:52:d4:28:bf:50:68:51:40:e9:a4:81:1b:
1e:1f:bf:8c:15:a0:82:9a:ef:86:74:e2:6c:eb:9e:
66:5e:d5:e3:5f:d7:ef:98:3b:7d:c8:53:89:55:2c:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:BE:27:C8:36:54:BD:03:B1:74:47:68:8E:70:13:0C:52:A5:FF
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:f4:47:d5:fc:01:d4:bb:1f:ae:4d:b1:9a:81:3b:05:d9:
48:96:bf:4a:1f:68:7b:35:9f:b5:15:f3:20:68:30:f5:58:87:
dd:c5:31:8b:34:c4:06:8b:d6:71:ad:8f:d4:cd:24:4b:c8:4b:
a5:d0:cd:9d:a4:fa:00:44:74:1f:7f:0e:19:2f:a0:74:59:07:
07:6e:3a:16:b8:30:6a:56:a9:e3:d5:40:93:57:fa:63:7b:d4:
ff:43:6b:ee:08:8b:b2:d6:57:fe:a2:f5:53:d3:fd:9a:f1:6f:
49:98:ce:36:df:b4:f8:20:ce:5e:cd:f5:15:ef:c7:20:4c:a7:
0c:1f:8d:bd:4d:99:9d:5e:d0:0e:53:81:d0:51:6c:c2:24:9d:
38:39:b5:f3:f8:f1:cd:c8:fa:74:d4:95:2d:2c:9f:29:a0:c1:
5c:07:7b:9a:9c:fc:c2:86:9c:12:d4:02:42:3c:9c:f2:77:6d:
f0:44:69:60:29:28:30:db:77:a1:9e:83:ec:83:0f:09:c9:5e:
ab:07:40:26:78:db:8e:54:d4:1d:c5:8f:aa:78:ee:f3:eb:f6:
c0:78:1c:e7:8a:3e:6b:42:01:a2:86:40:80:66:cf:9a:97:b2:
e9:bb:1e:20:1b:b5:79:7b:84:90:fb:c7:1b:bf:59:49:c7:85:
3d:cf:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:37:36 2025 by rpki-client