Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: 6lcOLY5wKw1LxiI438vErohcoz13aCpgKOQm8scua6g=
Subject key identifier: B4:10:90:F9:01:98:63:B0:4C:E3:95:43:A8:EA:33:E8:0A:71:99:E1
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 0198D4E06E411B782921C6A428EA0BAA61D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 11CC
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: UxrldUm7T8xRelkUE3GYsYZTCuSapRI/MWrzg6i8Tlk=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:41:1b:78:29:21:c6:a4:28:ea:0b:aa:61:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=b41090f9019863b04ce39543a8ea33e80a7199e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:5e:09:6d:86:45:5e:41:46:70:85:0c:ca:
3f:9b:4c:f4:6d:be:c3:18:6b:14:54:1a:53:eb:80:
33:5d:a6:2b:13:87:b0:bb:bf:97:d8:b9:d9:af:9d:
ea:7b:af:e3:7f:97:31:4b:17:9f:78:80:5f:32:f1:
27:f0:b7:8d:b9:8f:b7:81:4d:3a:f9:59:4e:36:f5:
15:62:30:6c:45:29:bb:af:0f:e8:60:5a:59:06:7b:
84:14:33:4e:46:d6:f1:f5:11:05:bb:43:f8:ab:a0:
ac:9f:44:3d:b5:68:4c:2f:86:74:4b:a7:70:6d:0a:
9a:ef:a3:b7:80:21:b2:2c:b0:60:31:38:75:1a:08:
21:8a:35:e0:ae:88:5c:65:06:6b:0d:27:f9:90:2f:
82:ec:73:b1:59:0a:3a:88:6a:82:2b:d2:14:e4:06:
68:20:4d:e4:70:04:cb:16:e3:84:29:5b:88:57:e4:
54:d5:06:41:88:20:5c:8e:9c:4b:53:a6:15:a9:aa:
04:47:05:2a:8e:d4:10:fb:a6:0e:aa:ec:e1:4d:39:
30:18:08:cc:0f:31:f3:a7:bc:83:19:36:2d:6d:26:
66:04:d8:22:b2:94:4e:a1:26:0b:3d:11:06:9d:4d:
6f:d8:ba:3f:24:36:90:6f:0b:34:2d:0d:35:82:02:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:90:F9:01:98:63:B0:4C:E3:95:43:A8:EA:33:E8:0A:71:99:E1
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:a4:a7:23:de:15:b4:b2:71:ef:b1:49:91:63:6b:fd:f2:
5f:18:27:5c:2f:86:bd:07:cb:f0:50:d3:94:88:35:68:19:5a:
23:04:9f:d3:c8:ea:43:ca:c5:a7:bb:b6:73:21:69:f4:38:3f:
58:2f:23:11:9e:f5:b8:8e:de:48:4f:93:3b:03:72:32:7c:4f:
8d:1d:fa:17:d3:36:5e:e1:7c:0d:5f:62:a7:09:8c:2b:c9:c8:
f3:7f:1d:9c:ee:cd:4f:70:ea:69:08:3b:8e:de:28:af:6a:23:
82:1c:83:cd:a1:46:07:54:b2:ee:0d:ba:2f:d8:44:09:6f:84:
65:d2:40:2e:c9:fa:3f:63:8b:c6:99:f7:d0:2f:25:da:50:9d:
c8:86:a4:ee:08:d6:7d:2e:47:b7:9f:96:91:ec:5f:d0:8a:b8:
14:f1:1d:e7:43:9f:36:53:da:e3:2e:46:2f:6e:ac:81:ef:69:
b9:28:10:ad:5e:28:7c:d6:d7:3c:5f:77:6f:5d:9f:d9:fb:3d:
47:96:85:4c:1c:eb:da:62:4f:2e:89:6a:a7:88:42:f8:37:df:
e5:80:4d:8e:98:05:e6:61:a3:56:c5:e0:c5:79:9f:97:fa:9a:
e4:93:0c:dd:4e:87:f9:7d:a5:59:ae:70:ce:8c:49:5b:20:fb:
ef:61:37:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4G5BG3gpIcakKOoLqmHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjUwODIzMDMwMjE0WhcNMjUwODI0MDMwMjE0WjAzMTEwLwYDVQQD
EyhiNDEwOTBmOTAxOTg2M2IwNGNlMzk1NDNhOGVhMzNlODBhNzE5OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWReCW2GRV5BRnCFDMo/m0z0bb7D
GGsUVBpT64AzXaYrE4ewu7+X2LnZr53qe6/jf5cxSxefeIBfMvEn8LeNuY+3gU06
+VlONvUVYjBsRSm7rw/oYFpZBnuEFDNORtbx9REFu0P4q6Csn0Q9tWhML4Z0S6dw
bQqa76O3gCGyLLBgMTh1GgghijXgrohcZQZrDSf5kC+C7HOxWQo6iGqCK9IU5AZo
IE3kcATLFuOEKVuIV+RU1QZBiCBcjpxLU6YVqaoERwUqjtQQ+6YOquzhTTkwGAjM
DzHzp7yDGTYtbSZmBNgispROoSYLPREGnU1v2Lo/JDaQbws0LQ01ggKkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQQkPkBmGOwTOOVQ6jqM+gKcZnhMB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQKkpyPe
FbSyce+xSZFja/3yXxgnXC+GvQfL8FDTlIg1aBlaIwSf08jqQ8rFp7u2cyFp9Dg/
WC8jEZ71uI7eSE+TOwNyMnxPjR36F9M2XuF8DV9ipwmMK8nI838dnO7NT3DqaQg7
jt4or2ojghyDzaFGB1Sy7g26L9hECW+EZdJALsn6P2OLxpn30C8l2lCdyIak7gjW
fS5Ht5+Wkexf0Iq4FPEd50OfNlPa4y5GL26sge9puSgQrV4ofNbXPF93b12f2fs9
R5aFTBzr2mJPLolqp4hC+Dff5YBNjpgF5mGjVsXgxXmfl/qa5JMM3U6H+X2lWa5w
zoxJWyD772E3IQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:27 2025 by rpki-client