Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: 65HU0cxPY+5jsS7iiFjiEiksjdz6Him+CgR2sCTKNFY=
Subject key identifier: FB:13:A9:D2:6C:17:E5:85:D6:77:E1:0B:01:7A:F6:F2:D2:99:AE:1C
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 0199FB45B02D18996F9E01202702C542589E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 31
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: edwd1SAP8y/7LBLy3C66xaoPCjPS99lrk72K7THqsvo=)
2: Q4OZxztfyDSVk8gALqZq70chyas.roa (hash: +wq+wwit7khNj/v3e6ja2msUgF3YYPnUELKveLLehBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b0:2d:18:99:6f:9e:01:20:27:02:c5:42:58:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=fb13a9d26c17e585d677e10b017af6f2d299ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:d6:ff:3a:94:e1:06:6c:c9:66:3a:9a:73:
65:61:82:0b:68:dc:8b:9e:92:21:af:18:c5:09:10:
de:f2:85:68:0c:2b:ab:f2:3d:b0:c5:d9:98:44:e2:
9c:1c:1e:01:da:25:1a:8b:ee:eb:e1:ff:4b:15:5e:
87:df:eb:16:f1:07:2b:38:c3:4d:ae:93:00:f6:03:
18:56:49:cd:f0:a0:e3:18:1e:56:bb:b3:0e:f5:f7:
d5:c9:3c:9c:ff:c6:fc:50:48:5a:cd:af:91:58:ba:
40:3d:80:ac:f6:fc:30:55:0b:17:35:f4:82:06:42:
e7:b1:38:82:60:f0:d0:cd:75:af:67:82:ac:7a:a0:
e0:69:fc:82:f8:e8:4f:0b:7b:41:e8:81:ed:d2:05:
b8:e8:39:ae:ad:84:5a:a5:20:ea:32:08:91:32:91:
a7:f5:16:56:fb:da:35:d4:20:bf:b2:16:cd:56:59:
ab:01:9a:28:de:65:b8:be:55:42:7a:1b:27:22:48:
3f:a2:ec:ef:6a:c5:60:a2:5b:de:43:36:79:8a:67:
5e:64:a7:47:33:0f:da:18:4a:ee:9b:05:b3:a7:a4:
e9:9b:b0:ee:73:83:d9:bf:0d:3e:32:79:99:a2:79:
ee:43:42:4d:62:fc:74:af:83:95:c3:37:21:c7:ba:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:A9:D2:6C:17:E5:85:D6:77:E1:0B:01:7A:F6:F2:D2:99:AE:1C
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:ea:43:9a:54:97:24:50:af:ac:ae:18:66:f7:4d:33:c5:
f9:02:e3:18:f3:c0:11:94:7d:a3:f6:4d:f1:14:84:a7:f0:f5:
3f:62:bf:96:e1:7d:4e:63:58:cb:3e:27:b8:95:b5:46:0d:90:
e6:65:a2:74:04:ea:cc:d1:34:b6:47:94:2f:e4:f4:49:0e:7d:
ec:46:a3:8e:a5:f0:c1:47:75:ce:b7:dc:b9:bd:f2:90:96:3d:
9e:77:b0:b1:ed:de:0b:c6:64:60:0a:a9:bf:95:d1:df:38:b7:
4c:d0:73:50:f0:c7:17:3a:02:cc:3c:4b:bd:40:32:ef:56:b9:
28:1b:6c:ad:a5:f3:9c:f1:17:e2:16:df:14:1a:02:cf:b7:a2:
7b:ab:a5:01:90:6c:a2:ea:fe:9c:e7:4e:61:6a:bb:4f:ab:f1:
3a:6f:b5:5b:eb:93:e3:d5:d4:85:0a:ea:ff:52:6f:a7:4b:96:
be:ac:52:10:13:25:68:fe:a8:e2:9b:8a:ae:c8:4a:13:4a:fc:
ff:d1:9b:04:c0:96:e8:b7:94:27:77:bd:96:53:70:1e:4e:22:
c4:51:ad:61:a4:96:a7:4d:4b:36:03:9f:04:ba:92:b2:19:67:
07:cf:d7:fe:7f:71:65:8b:08:30:28:05:f0:d9:d3:0d:1a:41:
ee:eb:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:10 2025 by rpki-client