Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: KsW0WxkLNe7knSeuzmNaQgZfEku0fRNTyEMl+5tDCr8=
Subject key identifier: 18:67:D4:BB:33:00:CC:DD:12:30:F9:60:35:16:12:20:47:3D:72:C7
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 0197B70E6270C49D1DDFB98A83AA45AAFC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1138
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: MEzcr8wxvBSd6FHgwv1z714pXErZEl4uLvDTpUesjlc=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:62:70:c4:9d:1d:df:b9:8a:83:aa:45:aa:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=1867d4bb3300ccdd1230f96035161220473d72c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:99:c3:f9:35:d1:15:18:53:66:31:5f:65:
27:22:52:02:f1:2d:b7:1c:e4:1d:37:0d:00:85:e9:
22:e0:8e:25:49:5c:70:02:01:54:12:0a:13:53:dd:
dc:df:1d:60:d9:b1:f4:6b:15:be:d0:a6:5c:23:5a:
c0:5d:2e:e5:61:66:4b:5f:8a:d4:92:55:4a:6e:2b:
5d:b6:ad:87:e8:15:47:76:8d:25:a0:2f:62:d7:a2:
79:30:67:5e:c1:93:b9:30:b4:b4:77:0a:17:30:3f:
68:63:a4:8e:2e:49:44:d8:73:b3:4f:1b:3e:b8:69:
c4:76:f6:b9:1a:1d:bc:df:85:e9:7d:7e:bb:8b:ca:
2b:e9:10:83:a2:6c:1e:f9:43:6c:fc:ec:e8:ec:70:
3a:5e:7f:a8:b2:11:7f:b4:70:74:c0:a0:26:c4:73:
13:79:d6:c1:10:38:48:b8:de:28:92:a9:d1:76:95:
5b:fd:f1:d9:01:6a:47:1a:ed:c9:31:5a:c8:3d:83:
f3:78:29:b9:95:a7:f1:0e:ae:65:b4:63:06:62:37:
71:36:05:3d:da:0d:e2:66:fa:9c:96:56:dd:35:c4:
28:9f:cb:ce:d5:d4:fc:c5:a0:af:a6:ca:5e:10:83:
0c:0b:34:b3:7c:81:df:9b:00:9f:93:ad:e6:13:b9:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:D4:BB:33:00:CC:DD:12:30:F9:60:35:16:12:20:47:3D:72:C7
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:50:08:c5:75:9c:ad:8d:9c:b6:75:b0:e3:76:36:84:e1:2c:
f8:95:51:1f:fb:3e:a6:69:d7:fb:48:6b:ac:77:8f:48:40:de:
45:35:4c:c4:bf:90:1e:e5:54:b6:45:98:6c:77:4c:58:f2:b4:
85:20:38:45:13:bb:80:79:46:b2:49:64:bb:1e:ac:71:6b:0a:
c8:24:3a:fd:0a:a2:2d:77:cd:10:3e:0d:d8:0a:de:d0:a1:b4:
62:ea:52:2a:f7:ff:0e:e6:64:2d:d2:d3:bf:e8:1b:47:33:28:
34:7b:e8:ca:2a:65:11:fd:8a:21:1f:96:85:f2:1e:a4:b4:50:
3b:ec:6f:da:d9:cc:b8:17:e4:fb:ac:ed:53:3f:45:d7:2a:24:
47:ff:be:d1:c6:e5:46:b7:c9:53:88:d0:3a:d1:db:7b:bd:de:
e2:55:09:73:a3:51:0f:1d:d1:9d:43:b3:02:81:9a:22:4b:1b:
94:25:fd:b6:24:c0:48:0b:2f:8b:e9:c8:c8:80:5f:01:ab:78:
d1:fb:ae:ce:29:0d:68:cb:b7:c3:b9:d3:f4:38:0a:69:5b:76:
77:bd:76:4f:38:80:cb:02:70:87:40:44:8a:35:bf:1d:f2:a4:
93:f6:f4:0e:6d:23:cf:30:0b:b0:c4:84:96:90:42:c9:bf:a7:
72:9f:ca:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DmJwxJ0d37mKg6pFqvwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjUwNjI4MTUwMTAyWhcNMjUwNjI5MTUwMTAyWjAzMTEwLwYDVQQD
EygxODY3ZDRiYjMzMDBjY2RkMTIzMGY5NjAzNTE2MTIyMDQ3M2Q3MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGmZw/k10RUYU2YxX2UnIlIC8S23
HOQdNw0Aheki4I4lSVxwAgFUEgoTU93c3x1g2bH0axW+0KZcI1rAXS7lYWZLX4rU
klVKbitdtq2H6BVHdo0loC9i16J5MGdewZO5MLS0dwoXMD9oY6SOLklE2HOzTxs+
uGnEdva5Gh2834XpfX67i8or6RCDomwe+UNs/Ozo7HA6Xn+oshF/tHB0wKAmxHMT
edbBEDhIuN4okqnRdpVb/fHZAWpHGu3JMVrIPYPzeCm5lafxDq5ltGMGYjdxNgU9
2g3iZvqcllbdNcQon8vO1dT8xaCvpspeEIMMCzSzfIHfmwCfk63mE7ni3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhn1LszAMzdEjD5YDUWEiBHPXLHMB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1AIxXWc
rY2ctnWw43Y2hOEs+JVRH/s+pmnX+0hrrHePSEDeRTVMxL+QHuVUtkWYbHdMWPK0
hSA4RRO7gHlGsklkux6scWsKyCQ6/QqiLXfNED4N2Are0KG0YupSKvf/DuZkLdLT
v+gbRzMoNHvoyiplEf2KIR+WhfIepLRQO+xv2tnMuBfk+6ztUz9F1yokR/++0cbl
RrfJU4jQOtHbe73e4lUJc6NRDx3RnUOzAoGaIksblCX9tiTASAsvi+nIyIBfAat4
0fuuzikNaMu3w7nT9DgKaVt2d712TziAywJwh0BEijW/HfKkk/b0Dm0jzzALsMSE
lpBCyb+ncp/K0g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:58 2025 by rpki-client