Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: Dfq7+qL11nCUJcLbM7WuySbj3XG/s4Y2Rw0EcanQAFc=
Subject key identifier: A7:64:18:DF:0C:B8:AD:99:1C:84:A6:15:FC:98:DE:F9:8F:6D:EF:00
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0197B74569D8BB4FD2A784FF862393402D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=)
3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: f5XFUsmlzBV2wM6tvvxJ8FR4bxNaKD6c7YDseamXsbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:d8:bb:4f:d2:a7:84:ff:86:23:93:40:2d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=a76418df0cb8ad991c84a615fc98def98f6def00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:33:e9:b2:eb:d0:8d:72:01:50:d9:85:22:
4c:f7:91:af:ce:36:9f:5a:73:bf:95:8c:0a:b7:0e:
02:83:ae:8f:c0:8c:0d:60:2f:d6:97:a9:3b:d3:28:
af:b3:fa:97:56:91:80:56:63:6e:ac:a2:30:b0:15:
15:72:0f:f3:85:37:8c:92:40:fe:ab:ee:f8:cc:3d:
ca:e2:9e:33:6f:66:91:23:b5:80:6a:3a:52:11:ec:
0b:e0:fd:5f:90:04:b0:f7:1c:cd:42:c4:b1:68:78:
7d:2b:98:4f:da:1f:c6:c4:9e:b7:92:4e:ba:bf:9f:
d5:f0:c9:94:36:d8:1b:6c:dd:45:4c:f6:89:d3:40:
32:c8:ec:cb:45:9d:82:78:49:20:69:9a:6b:db:d9:
dd:79:4c:29:81:c6:ed:c1:1a:0e:e5:5c:18:92:65:
e3:ab:c9:b4:3e:b3:74:18:c7:23:1c:2f:7b:24:bc:
00:ab:d8:a2:b3:3d:de:53:ed:f2:60:8d:44:10:eb:
ce:4d:4c:2f:b0:ea:d3:84:c5:f9:8b:24:e1:aa:23:
5e:56:01:04:b8:53:f1:12:42:a2:a0:1a:72:e5:27:
79:1c:a2:d6:89:f9:61:9a:33:51:1c:0c:ef:86:a5:
1f:84:92:b5:9e:0c:62:7c:34:17:e3:6b:f7:fb:a0:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:18:DF:0C:B8:AD:99:1C:84:A6:15:FC:98:DE:F9:8F:6D:EF:00
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:de:ec:e6:02:5d:54:1e:63:86:6b:a4:5a:10:6d:b0:81:
11:23:f6:77:24:6c:57:b6:0f:16:b0:7e:0a:aa:cc:5a:6c:46:
55:2f:a9:95:fa:ab:97:38:11:fd:78:34:d1:5f:92:27:1c:8a:
fa:e6:b4:e0:20:35:aa:9a:4d:a2:77:19:c7:73:47:b9:2b:86:
29:a0:ee:e9:97:5d:2e:04:ce:5a:7f:fe:00:79:34:e4:97:11:
7f:5b:f5:5b:af:41:17:2d:34:ff:e2:f1:e2:f8:32:96:f5:6c:
40:65:a2:d5:bf:26:ac:4c:90:8a:81:3f:8a:53:10:fb:74:9a:
69:fd:61:02:5e:f2:4d:bb:d4:dd:42:05:8a:aa:30:91:de:97:
41:88:ad:3b:de:85:a3:78:0f:48:e5:64:25:f6:ca:9a:3f:bf:
98:1c:d2:d8:52:ef:b9:dc:34:41:33:c2:b7:75:99:a5:b2:d6:
55:0d:0f:26:4a:90:b2:57:76:3f:fd:53:6c:42:1c:82:a3:eb:
95:ca:87:dd:f5:18:d6:5a:56:e4:fc:3b:c5:9c:13:d9:8a:dd:
5e:8f:08:93:38:c7:57:83:b2:a2:17:1e:f9:b0:1b:42:a2:b2:
08:00:df:5c:31:fc:36:18:67:6a:a9:4d:42:78:f7:85:ef:ad:
ee:8c:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:48 2025 by rpki-client