Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: xPUK+hMzgZO05C+cBXtQhyNhdGW0cHI6BBCHBWCOwc4=
Subject key identifier: B9:9F:90:23:3E:23:EC:30:20:E2:17:13:90:CD:E8:E1:96:4C:C1:D5
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0199FE7E17F3E8EA9CEA4A4E53ED4C1E08CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 054B
Signing time: Sun 19 Oct 2025 22:01:40 +0000
Manifest this update: Sun 19 Oct 2025 22:01:40 +0000
Manifest next update: Mon 20 Oct 2025 22:01:40 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: L9sKpcPOxELA6v7urImN+tvsUI1+EKWTz+OQ50UUFZg=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:17:f3:e8:ea:9c:ea:4a:4e:53:ed:4c:1e:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Oct 19 22:01:40 2025 GMT
Not After : Oct 20 22:01:40 2025 GMT
Subject: CN=b99f90233e23ec3020e2171390cde8e1964cc1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:06:be:fb:48:a6:c3:0f:0b:20:b3:f2:41:
aa:76:10:1b:67:f1:23:4b:2d:9f:62:59:9f:6e:3c:
47:ae:2a:24:b4:0f:c9:90:2b:6a:bd:68:d6:4c:46:
1a:44:40:36:74:cf:90:85:90:1d:7f:cb:34:a0:17:
6c:8c:c8:70:4b:dc:1a:00:ce:85:52:6b:7a:63:f7:
4f:f3:2c:0c:48:6f:bf:75:1b:69:e1:e3:f2:17:f5:
c4:b8:5c:ae:8e:d1:9d:ea:6a:bf:52:d6:e5:8e:25:
f7:f4:8c:8a:3b:c4:74:22:66:ce:de:de:35:24:e0:
2e:f9:5a:aa:b4:b9:b9:db:42:80:5b:e8:2c:f5:56:
02:de:a7:f8:02:ca:7f:e1:35:93:a4:03:94:be:7a:
b4:cb:17:ef:0a:39:fc:04:fe:e2:dd:38:37:d1:0f:
bc:55:ab:55:f6:60:de:5c:15:1c:01:5e:27:95:ab:
8c:71:1e:37:51:37:f3:32:f1:b3:83:79:5f:e9:87:
d9:24:57:09:c9:34:f6:cc:81:e8:57:3d:62:c8:48:
e2:1d:f8:6e:83:23:2c:58:03:68:db:c5:bf:8e:b8:
69:7b:1c:e9:d1:77:58:ff:72:1c:d7:1c:fe:2c:50:
6d:7c:43:cc:c1:28:d7:83:e2:7c:7a:cc:ad:fd:fe:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:90:23:3E:23:EC:30:20:E2:17:13:90:CD:E8:E1:96:4C:C1:D5
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2a:22:00:a2:ae:b2:bb:79:bf:ac:7c:7a:53:d3:c8:d3:59:
20:07:9f:00:7e:88:dc:c8:ed:cf:d3:43:9f:29:a8:12:cb:56:
07:4c:e9:be:f0:eb:37:04:72:b3:39:20:2a:ce:f9:91:07:d9:
e4:a4:be:d4:a1:86:26:5e:fe:ca:58:0f:2f:06:c7:64:d1:ec:
45:26:e2:9e:c2:b8:aa:7e:51:93:bb:c0:97:11:1a:bc:d6:97:
70:5b:62:72:9e:fa:ad:1e:5e:e7:0e:10:cc:02:cf:7c:2b:86:
e4:e4:0c:95:98:04:ef:be:ad:57:08:86:73:3e:92:c3:0c:01:
2f:55:1f:74:e1:80:82:1b:e8:0a:d7:84:66:cc:b5:c2:69:63:
1e:7f:3d:21:2f:17:49:05:e9:08:6a:29:6b:99:76:b8:9f:51:
12:04:88:9e:a1:a1:a8:a6:29:98:8a:a0:d3:17:f3:c4:c3:20:
fb:f1:0c:3c:28:74:42:f3:e4:c4:e9:9a:4e:5c:50:31:ab:03:
c8:a4:c8:99:91:89:28:9e:70:bc:95:72:f8:87:63:95:9f:37:
78:47:dc:47:1f:fe:93:66:16:0b:67:28:d4:3a:1e:1f:9a:18:
e9:18:47:d6:f5:60:7e:73:0b:38:8a:b2:3b:99:fc:59:00:05:
41:bd:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:03 2025 by rpki-client