Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: PmRLsVt6gBbNLqKx96lmzot/m10vnRkKsKcaHOGFX9k=
Subject key identifier: 5F:E2:26:83:89:CB:6B:DE:68:72:5A:7E:E5:43:AA:0E:96:79:47:A3
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 0198488972B7D30C9CD858C4621A98598BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 21:00:23 +0000
Manifest this update: Sat 26 Jul 2025 21:00:23 +0000
Manifest next update: Sun 27 Jul 2025 21:00:23 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: zXtsHVH4EgHgBfFN8qlaV8acvkXzg4TYsb2FUuhPys0=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:72:b7:d3:0c:9c:d8:58:c4:62:1a:98:59:8b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jul 26 21:00:23 2025 GMT
Not After : Jul 27 21:00:23 2025 GMT
Subject: CN=5fe2268389cb6bde68725a7ee543aa0e967947a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:2a:d3:00:e3:30:21:17:51:77:9b:06:0c:
cc:df:ef:a4:51:af:b8:a5:3b:f0:a4:1e:b4:23:f2:
fe:84:0a:68:f9:ec:58:c5:48:25:17:45:1e:8a:b5:
5d:b0:11:a2:b8:d4:55:65:6b:89:bb:c2:d1:3e:92:
28:89:22:50:41:f0:8d:e5:f2:09:bf:02:ab:0e:05:
03:c3:78:b9:c8:30:63:21:ca:2b:1f:0b:6f:3c:78:
00:5d:f0:48:de:3b:99:57:41:ec:bb:15:47:42:48:
8f:5f:28:b8:12:68:f0:5a:55:7a:4a:8f:78:88:5e:
77:7e:88:64:81:b5:77:22:ba:0a:2b:11:36:34:de:
74:e8:17:cd:9f:56:ec:12:df:d6:3e:79:b2:59:5b:
49:19:3a:c9:c0:ac:dd:cc:a6:97:2a:9c:90:09:61:
c0:c9:b2:1c:cd:57:7c:23:83:fd:30:27:11:a2:87:
30:6d:4f:58:0e:5e:14:cd:ac:58:30:6b:91:78:7d:
ae:fc:71:5b:6f:12:be:8e:f4:dc:57:43:a4:49:7b:
de:b2:13:3b:0d:0e:a9:4a:88:bc:5f:85:ba:dc:36:
16:76:e9:f3:99:bb:a0:59:06:f1:1d:6c:91:ea:e8:
90:05:f5:b8:4d:4e:53:79:b6:72:61:d1:c8:f6:f9:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:26:83:89:CB:6B:DE:68:72:5A:7E:E5:43:AA:0E:96:79:47:A3
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1a:25:bc:af:4c:3e:61:30:0c:9c:80:cf:44:ee:5f:1b:22:
c5:eb:be:95:7c:5d:3c:89:83:b4:cb:88:b7:7c:49:63:65:b0:
e2:54:f1:d7:04:7a:78:ae:5e:e6:f5:45:d0:be:1f:0f:ac:8b:
f0:80:de:05:d3:04:27:2a:ff:b4:07:5f:62:a7:ec:c1:e6:ca:
89:85:83:5d:de:95:55:a2:4a:fb:bd:e6:45:e2:81:e6:be:d1:
b3:b3:38:e9:18:66:22:21:36:b5:ff:bb:14:33:31:d1:04:5e:
66:b6:b7:84:c9:a0:60:3b:b1:ca:6b:ed:a1:88:87:68:e3:76:
8f:37:1a:b0:e1:89:3c:73:c3:63:fd:74:b4:49:10:fd:89:07:
18:76:73:60:87:8d:c3:e9:44:32:12:9d:27:1b:d4:99:37:97:
8c:27:b4:44:12:b1:45:17:31:a5:be:3b:72:27:a5:8f:5c:92:
28:10:08:ef:1e:0d:38:23:97:db:32:a1:5b:9a:51:4d:fe:b2:
11:d6:c2:a4:26:c6:90:7f:47:91:04:26:8c:c5:db:93:99:ff:
8d:ca:f8:b7:c0:48:3c:69:bc:25:b0:ad:dc:d8:e9:91:d4:33:
70:40:ee:96:51:61:87:61:96:04:94:24:ff:89:38:23:b5:35:
c5:1e:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:09 2025 by rpki-client