
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: Y07QvJtzEorJaAtH4TtJdEp4ynF8Nb7rjZIhEuAKCQk=
Subject key identifier: 3F:1A:23:98:71:AF:47:0E:9F:0F:AA:2A:3F:EA:35:C0:18:53:F9:AA
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0199FC8F59AB779DF2110A27F92737EBE082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=)
3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: M0/H8DR3o3HVc7BQGoDTfCbBdMiQoIAAFmsBQg35KJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:ab:77:9d:f2:11:0a:27:f9:27:37:eb:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=3f1a239871af470e9f0faa2a3fea35c01853f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:b3:a5:5e:fa:04:4e:39:b6:10:5d:5f:10:
92:9b:59:ed:f3:0e:3e:14:66:9d:70:cc:8c:6f:14:
26:e7:49:69:be:c2:ba:e1:b4:eb:4f:31:23:06:a7:
20:a5:d1:ef:16:12:d8:35:5e:d8:07:b9:24:96:73:
7d:54:1d:f2:8d:88:56:e5:d6:3e:b6:f0:ed:ba:81:
98:0a:24:9c:cd:5c:66:1d:ee:d4:8d:51:02:3f:29:
86:43:cd:9c:37:e2:4f:34:c2:c7:ab:8f:0f:7b:cd:
65:ad:65:0e:0b:ec:32:c1:fd:a8:92:14:0f:87:34:
68:a4:d1:25:67:b6:dc:4d:77:11:fe:80:31:1f:f8:
be:9e:eb:5c:78:ef:4e:b2:2b:f6:25:4f:8c:67:d7:
29:bb:89:29:13:a2:0c:1d:30:94:b5:f4:8a:2e:fb:
c2:be:a0:fe:7c:df:a4:26:9f:57:5c:ad:bf:ca:be:
c7:51:47:bd:19:1c:9d:f7:e9:05:41:53:45:f5:54:
08:53:f5:4e:d8:ca:8d:1b:42:e5:88:1f:a0:d5:5b:
7b:e5:46:f7:6f:c3:0f:b7:f8:59:33:df:f2:53:d5:
f6:60:b1:93:1f:fd:2b:ca:0e:d1:ed:50:d2:0f:94:
7f:ef:33:7e:9a:ed:54:97:1b:f1:e6:cc:d9:f3:46:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:23:98:71:AF:47:0E:9F:0F:AA:2A:3F:EA:35:C0:18:53:F9:AA
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:25:16:46:d3:55:84:e9:6a:cc:8f:ca:83:19:c2:a1:e6:
a0:4c:c7:13:18:9d:7d:fe:05:9a:04:0a:73:ee:48:25:d5:5a:
82:b8:4d:8e:b4:e4:c4:38:84:9a:07:82:eb:35:77:98:cf:74:
46:48:2b:ed:fb:9c:4a:d2:29:74:18:ff:09:1d:2f:f1:91:10:
7a:47:c1:b8:81:0f:73:27:ab:5a:fa:ed:7c:0e:cf:08:1d:ac:
f2:2c:8d:80:81:21:69:e3:8b:2a:b5:e3:af:c6:c1:80:30:f5:
ff:2f:27:21:9a:73:9c:67:c4:fc:97:2a:57:29:2f:09:61:18:
63:bb:ee:5b:7a:85:a9:9c:8b:1d:ac:12:93:b4:0c:8c:df:86:
05:0e:0f:c0:e6:ed:3c:79:29:56:46:4e:09:52:68:1c:02:b3:
19:14:74:f7:2c:b0:88:79:20:d1:b0:12:a3:25:77:fc:bd:4c:
b0:50:00:53:2c:41:e4:4d:53:ad:c2:f6:47:74:ef:7f:67:fa:
f9:13:20:e3:46:59:68:81:4d:f2:fd:d0:71:22:31:4b:87:95:
ab:c5:ed:18:9e:f5:f3:39:e8:34:93:dc:ad:27:df:df:96:ef:
50:41:79:21:f6:b3:39:e7:c9:68:a3:4c:b9:e5:cd:e7:3d:a9:
7d:df:fd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1mrd53yEQon+Sc36+CCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5
NGFhYzQwHhcNMjUxMDE5MTMwMTE2WhcNMjUxMDIwMTMwMTE2WjAzMTEwLwYDVQQD
EygzZjFhMjM5ODcxYWY0NzBlOWYwZmFhMmEzZmVhMzVjMDE4NTNmOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCazpV76BE45thBdXxCSm1nt8w4+
FGadcMyMbxQm50lpvsK64bTrTzEjBqcgpdHvFhLYNV7YB7kklnN9VB3yjYhW5dY+
tvDtuoGYCiSczVxmHe7UjVECPymGQ82cN+JPNMLHq48Pe81lrWUOC+wywf2okhQP
hzRopNElZ7bcTXcR/oAxH/i+nutceO9Osiv2JU+MZ9cpu4kpE6IMHTCUtfSKLvvC
vqD+fN+kJp9XXK2/yr7HUUe9GRyd9+kFQVNF9VQIU/VO2MqNG0LliB+g1Vt75Ub3
b8MPt/hZM9/yU9X2YLGTH/0ryg7R7VDSD5R/7zN+mu1Ulxvx5szZ80bABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8aI5hxr0cOnw+qKj/qNcAYU/mqMB8GA1UdIwQY
MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt
Y2Q5ZWNjZjkzYjMxLzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx
LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgIlFkbT
VYTpasyPyoMZwqHmoEzHExidff4FmgQKc+5IJdVagrhNjrTkxDiEmgeC6zV3mM90
Rkgr7fucStIpdBj/CR0v8ZEQekfBuIEPcyerWvrtfA7PCB2s8iyNgIEhaeOLKrXj
r8bBgDD1/y8nIZpznGfE/JcqVykvCWEYY7vuW3qFqZyLHawSk7QMjN+GBQ4PwObt
PHkpVkZOCVJoHAKzGRR09yywiHkg0bASoyV3/L1MsFAAUyxB5E1TrcL2R3Tvf2f6
+RMg40ZZaIFN8v3QcSIxS4eVq8XtGJ718znoNJPcrSff35bvUEF5IfazOefJaKNM
ueXN5z2pfd/9XA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:56 2025 by rpki-client