Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: eGC9hsi7C2cp46AFm8N1gvxZjghw768FlOmwt2FX9zk=
Subject key identifier: 51:77:43:5F:E2:D8:55:73:E6:3B:1F:DF:0D:12:A5:24:7E:06:11:A8
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0199FCC6463EC8817C1D0A1D3659D1ADDE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 068E
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: xv+7aCjELycxq5cVgTaiFNFwEOoBqJILqk+bzruh51k=)
3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:46:3e:c8:81:7c:1d:0a:1d:36:59:d1:ad:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=5177435fe2d85573e63b1fdf0d12a5247e0611a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:f5:82:3f:b4:a4:aa:62:8f:cf:23:46:5a:
a1:e2:ce:21:93:3f:45:5c:6e:3e:1c:38:4f:1f:af:
a6:da:f1:3a:1d:f2:b4:d8:68:8a:d8:70:05:7a:de:
7b:bb:78:47:72:d8:84:ad:3f:75:87:0c:c5:2a:88:
30:16:f2:4e:71:37:7c:b0:bd:2a:75:29:f5:92:fe:
5d:a9:dc:1b:64:7b:14:41:41:68:1a:37:51:eb:84:
82:76:87:2f:48:37:b7:52:80:a5:12:6d:24:c3:b5:
b0:73:05:fd:83:72:c8:d0:ac:0f:b8:da:2f:bd:47:
dc:24:dc:f7:09:c3:f2:95:7a:3e:1c:ef:36:18:67:
41:90:5c:92:c7:4f:82:eb:81:fd:f9:3e:56:3a:2a:
89:c1:6b:b8:39:1b:58:de:36:95:75:f9:75:7c:5d:
c0:23:97:67:a9:71:d9:27:68:a5:f9:37:93:b3:1a:
53:00:2c:f4:a7:b2:51:3e:6e:71:50:1f:c1:bb:1c:
58:96:e7:ca:56:3c:53:59:e2:d4:5d:e9:e2:06:a8:
7e:5f:33:44:80:1e:20:4c:8e:d2:98:6b:4c:8a:41:
39:af:81:3c:f5:07:22:67:46:af:88:7a:08:4d:37:
37:d0:89:e8:a2:53:c8:d1:76:44:ad:b9:63:55:bd:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:43:5F:E2:D8:55:73:E6:3B:1F:DF:0D:12:A5:24:7E:06:11:A8
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:19:53:03:a2:d5:2b:11:5a:cb:e3:7e:8e:0e:a4:0e:78:cb:
cb:c3:f1:6d:8c:9b:60:fa:30:c6:26:fc:46:a9:66:86:82:f6:
4f:a3:c8:85:e3:35:7e:47:33:4c:f5:12:0a:80:7b:0a:89:70:
2b:e6:74:12:04:3c:a2:2e:3e:b1:19:50:9c:43:8a:be:54:5c:
ca:1e:e0:fb:9c:2f:c1:20:6e:ef:7e:db:a1:de:ca:05:fc:09:
fb:24:a1:38:55:b6:1b:c4:b6:6c:96:2a:ff:fe:e1:80:13:eb:
ea:43:9f:5a:c7:0f:00:ce:2c:c0:89:77:7c:a1:66:a2:97:31:
39:d9:bc:8c:a0:01:e1:60:fa:e2:89:6f:bc:63:a5:e6:4a:02:
ab:93:76:c9:c4:db:0b:0c:a9:06:7c:11:08:84:48:97:20:be:
b9:37:d0:e8:05:3c:21:1c:c7:4e:8f:07:18:96:b6:4a:f9:40:
cf:e4:60:81:b1:73:f0:29:11:a3:93:b1:54:c8:fd:22:c0:f4:
d2:cb:30:8a:87:8e:d3:df:eb:fc:a3:29:8f:a1:36:57:87:bb:
c9:8d:43:ca:6e:2b:62:fe:3c:11:48:aa:f6:51:53:a2:fd:39:
2e:e2:4b:d3:ff:1a:d2:fb:f2:af:4b:a4:1c:c5:3d:fa:ee:90:
e8:8b:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:16 2025 by rpki-client