Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: JJGVVi0hwcVnFgmerhb/TsoP0vx6f0eMcfd52H4nKJE=
Subject key identifier: D9:BB:E4:86:B4:6E:E8:F5:82:94:72:2E:82:BF:44:F5:07:F5:12:AC
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0197B9337E9AF0F3B540A6942C4A8FD90E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 041E
Signing time: Sun 29 Jun 2025 01:00:48 +0000
Manifest this update: Sun 29 Jun 2025 01:00:48 +0000
Manifest next update: Mon 30 Jun 2025 01:00:48 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: UpATmmjGf3Pc7wYlBBmocT+xrqK9Amff65+VnCHC3Xk=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:7e:9a:f0:f3:b5:40:a6:94:2c:4a:8f:d9:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Jun 29 01:00:48 2025 GMT
Not After : Jun 30 01:00:48 2025 GMT
Subject: CN=d9bbe486b46ee8f58294722e82bf44f507f512ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:1b:27:ad:f8:81:cb:23:69:a8:d4:a1:63:
65:77:a3:14:76:ad:02:8b:96:ed:e8:7d:63:47:c1:
53:5b:f9:e1:41:8b:e2:64:59:39:6c:2e:e8:c9:6c:
e1:ad:8a:e6:d8:ac:0b:39:93:14:e2:65:9e:f4:b5:
56:3c:32:de:a6:1d:b3:41:f7:c1:67:de:21:93:0e:
ed:44:64:1d:d2:cd:ca:73:b2:f3:17:69:17:1a:12:
e5:b9:e4:d6:5a:22:cf:a8:34:fd:40:1b:3f:33:78:
46:c2:00:92:bb:a5:c7:e5:ec:cc:e7:23:4f:35:31:
7e:f2:e4:0f:df:70:cb:49:b4:72:d9:d9:6d:f7:7e:
02:15:8b:69:25:41:97:00:9c:93:73:d4:91:44:47:
38:8b:0e:2f:b2:53:2e:25:f4:ce:5d:65:6a:f0:57:
5a:e4:30:8e:d1:f3:cb:9a:ec:63:58:ad:41:7c:2f:
6a:1f:1e:64:2d:45:f3:7a:4d:f3:6f:c2:34:4b:1b:
ee:fd:15:f3:2c:c9:5f:7b:43:36:ab:54:e5:d0:12:
5e:67:a0:f0:98:c3:7a:e7:2b:bf:b7:10:b9:f8:f9:
75:fc:6c:30:a2:3c:de:d7:7c:0b:4c:cf:09:00:4a:
e9:de:02:a6:1a:ae:0f:93:a7:3a:ce:fa:81:54:ee:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:E4:86:B4:6E:E8:F5:82:94:72:2E:82:BF:44:F5:07:F5:12:AC
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:0c:12:08:48:05:e7:7e:c6:bf:db:d2:6e:b4:2f:7d:e9:
be:d3:2d:b5:e9:e6:53:69:93:17:98:cb:3d:13:ea:aa:c4:21:
31:e3:1a:3d:cd:f9:e1:f0:da:bf:eb:ba:26:6f:73:c4:c6:08:
bf:e0:2b:72:82:30:2c:e5:62:73:e6:1b:23:53:8a:b7:6f:e1:
84:02:05:ae:ec:23:d1:23:83:d2:65:c5:87:e5:03:49:e7:e2:
09:1c:ad:3f:39:4b:de:97:94:f9:d4:f0:d4:b3:c7:2b:d6:9e:
ee:96:be:19:c2:5d:61:41:3f:75:01:eb:5d:8a:58:d2:71:5b:
16:36:88:74:82:99:10:34:b1:d0:5b:24:28:98:29:47:13:ef:
95:94:7a:c4:86:28:30:cc:1a:f3:f2:4b:ec:04:88:3e:4b:9c:
d8:96:e2:ae:a1:c3:52:6f:47:e6:90:69:5e:a4:dc:3b:ac:3b:
c6:cf:ef:aa:8c:8e:06:61:ef:f0:ed:bc:a6:8e:92:3c:75:79:
e9:76:08:d5:22:1a:80:78:be:4b:96:6d:9a:02:6d:b5:76:88:
94:fb:00:c1:f0:ad:db:23:b9:34:d9:9e:93:cd:60:ea:2f:30:
85:7e:4e:92:cf:a3:8a:f3:dd:2d:5b:bb:7c:51:98:f9:88:86:
51:27:3a:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M36a8PO1QKaULEqP2Q5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3
ZmIwNzcwHhcNMjUwNjI5MDEwMDQ4WhcNMjUwNjMwMDEwMDQ4WjAzMTEwLwYDVQQD
EyhkOWJiZTQ4NmI0NmVlOGY1ODI5NDcyMmU4MmJmNDRmNTA3ZjUxMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1EbJ634gcsjaajUoWNld6MUdq0C
i5bt6H1jR8FTW/nhQYviZFk5bC7oyWzhrYrm2KwLOZMU4mWe9LVWPDLeph2zQffB
Z94hkw7tRGQd0s3Kc7LzF2kXGhLlueTWWiLPqDT9QBs/M3hGwgCSu6XH5ezM5yNP
NTF+8uQP33DLSbRy2dlt934CFYtpJUGXAJyTc9SRREc4iw4vslMuJfTOXWVq8Fda
5DCO0fPLmuxjWK1BfC9qHx5kLUXzek3zb8I0Sxvu/RXzLMlfe0M2q1Tl0BJeZ6Dw
mMN65yu/txC5+Pl1/Gwwojze13wLTM8JAErp3gKmGq4Pk6c6zvqBVO4N4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm75Ia0buj1gpRyLoK/RPUH9RKsMB8GA1UdIwQY
MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt
ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh
LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVkMEghI
Bed+xr/b0m60L33pvtMttenmU2mTF5jLPRPqqsQhMeMaPc354fDav+u6Jm9zxMYI
v+ArcoIwLOVic+YbI1OKt2/hhAIFruwj0SOD0mXFh+UDSefiCRytPzlL3peU+dTw
1LPHK9ae7pa+GcJdYUE/dQHrXYpY0nFbFjaIdIKZEDSx0FskKJgpRxPvlZR6xIYo
MMwa8/JL7ASIPkuc2JbirqHDUm9H5pBpXqTcO6w7xs/vqoyOBmHv8O28po6SPHV5
6XYI1SIagHi+S5ZtmgJttXaIlPsAwfCt2yO5NNmek81g6i8whX5Oks+jivPdLVu7
fFGY+YiGUSc6zQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:10 2025 by rpki-client