Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: fGTjJOmtaZ5J5FKEmm1Vos9f9+wJeN1GC5Zal+Vw8VI=
Subject key identifier: 55:68:2F:93:52:AA:56:F1:57:BD:38:C0:E6:0C:B9:B4:7A:5B:96:49
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0198D515760F3AA768CE6ED6B0F5BC8C8791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 04B1
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: CZnBbYZRykOH2QCc5s0poM9X+jzR0shX+gpfeTknUD0=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:76:0f:3a:a7:68:ce:6e:d6:b0:f5:bc:8c:87:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=55682f9352aa56f157bd38c0e60cb9b47a5b9649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:ce:cc:35:b4:93:b3:51:4f:fb:26:0d:34:
32:0b:bd:05:83:a1:48:14:73:81:52:58:25:46:88:
65:9d:7d:30:36:4b:fe:2e:60:8b:92:73:27:d8:6e:
24:c0:7d:fb:5b:a0:ee:e2:11:4b:39:0d:3c:56:97:
d0:85:13:cf:e0:4b:c2:98:8f:07:9d:cf:bc:d4:98:
46:11:41:63:e1:19:fa:30:10:08:9d:10:38:12:0e:
61:64:ee:57:1a:2b:66:7d:c3:8a:8e:61:e7:c6:c2:
7b:98:c5:70:32:19:82:1d:f8:fa:f6:6b:a7:03:0d:
2d:17:11:e2:10:12:7a:69:ce:c6:cf:45:fb:75:4e:
90:16:20:d5:45:1c:20:07:3e:84:c7:e0:c1:2f:7d:
bd:ec:f0:60:1f:a3:8a:e6:92:8f:82:43:d6:51:b2:
ec:3f:2e:a3:ea:40:5c:f1:7e:f8:a5:8d:e3:73:3f:
e5:1b:80:de:7b:b8:0c:61:04:b0:e5:63:98:f7:95:
27:c0:c0:1c:32:9b:a3:1f:9a:a6:28:79:cc:91:ae:
be:42:49:ab:4c:95:d2:7c:84:b0:40:75:fd:86:6a:
2f:64:80:c6:de:bc:6a:80:a1:c7:b3:9a:b8:b1:8c:
37:00:11:a3:57:c2:5a:54:41:27:c5:f1:37:6c:8a:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:2F:93:52:AA:56:F1:57:BD:38:C0:E6:0C:B9:B4:7A:5B:96:49
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6e:f8:e2:05:de:a3:18:d9:c4:8e:0b:eb:e4:ce:da:4e:19:
c4:04:a7:35:5e:c5:62:7e:e0:e2:38:c0:66:3d:aa:46:64:02:
d9:59:dd:a2:f3:71:66:5b:dc:c7:fa:2f:16:38:b3:6f:55:de:
f4:94:07:7f:d6:21:b5:e9:fc:b5:e4:83:0d:6a:80:20:6f:3b:
bb:da:89:2d:1e:a0:54:84:b8:d6:28:6b:93:91:6a:21:17:82:
14:54:d2:e1:1b:9d:de:68:fe:ce:44:21:46:85:c4:b6:33:8a:
72:04:bf:2b:f4:c5:2a:2b:23:35:59:eb:c0:0c:51:27:75:49:
99:74:d6:2d:da:de:d8:5a:8f:24:d5:54:dd:9f:67:2b:a0:b9:
c5:ea:12:07:e2:d4:c9:c0:84:42:fa:cf:83:0f:9a:1b:f2:ca:
ca:6a:c7:33:af:9a:55:09:02:cb:cc:62:9f:6d:c1:79:62:f8:
86:e2:5a:0c:d8:24:c4:35:b4:f6:85:71:3e:22:6b:d9:eb:43:
51:02:b7:dd:e4:2c:55:9f:6f:50:4d:bd:da:d7:8d:06:58:e2:
e8:ac:2b:b7:af:40:16:52:d5:84:25:fa:53:73:27:3b:85:74:
53:77:e8:da:50:ac:f7:6a:a3:18:67:ff:cb:c8:92:26:fe:c3:
7b:96:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:18 2025 by rpki-client