Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: 6EgxOri55HlZ1acWwt6KSMJhPqSfSWRBS8aAZA5R+DU=
Subject key identifier: 35:45:D8:FD:7A:92:59:15:EE:10:DA:B9:FB:36:C0:34:C0:39:F6:D2
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01984AAEB29B6E79C5E6B42759AB459D37EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 1037
Signing time: Sun 27 Jul 2025 07:00:19 +0000
Manifest this update: Sun 27 Jul 2025 07:00:19 +0000
Manifest next update: Mon 28 Jul 2025 07:00:19 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: nkR8CP2JTalaO+18d1XeWwrsenturOXQghmGUXxNiLA=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b2:9b:6e:79:c5:e6:b4:27:59:ab:45:9d:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jul 27 07:00:19 2025 GMT
Not After : Jul 28 07:00:19 2025 GMT
Subject: CN=3545d8fd7a925915ee10dab9fb36c034c039f6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:c1:48:27:ae:04:73:e0:05:d0:98:fd:41:
5f:30:9c:b4:37:3d:72:3a:d2:07:cb:34:25:94:a2:
14:6e:51:02:c4:a9:82:b5:a3:a0:ae:1d:a8:26:d1:
92:c4:57:8e:80:a6:43:8c:b5:b4:5f:32:34:e5:f4:
13:f9:b3:64:cd:c1:84:8b:61:9a:2f:0d:3a:9a:0c:
13:ff:f3:5e:a4:18:c9:c0:70:ce:32:cd:f0:7f:62:
80:29:e6:da:c9:70:56:d1:06:25:65:4a:98:35:36:
86:99:81:04:09:86:69:36:14:6f:1e:6e:ba:6d:eb:
30:63:fe:1d:58:f4:09:4c:ed:a5:ad:e3:76:18:35:
ac:01:d3:01:3a:14:96:ce:f4:ff:9a:01:c8:4c:2e:
dc:25:08:70:f1:31:96:8e:ae:dc:64:bd:eb:3d:dc:
34:8d:1d:cf:56:80:2d:bd:87:b9:3d:67:02:52:3a:
31:c8:5f:1f:0a:05:5f:2d:7c:20:97:2a:8b:5c:fb:
54:9c:59:4a:4a:34:f1:1c:7f:3a:55:7b:95:b8:fe:
70:c5:c5:bf:15:f5:0e:b1:dc:84:f0:58:56:06:f3:
a6:e2:cc:03:74:c0:7c:7a:f9:2c:44:b4:9f:88:90:
ae:dc:10:c8:e0:45:9a:eb:f0:e2:b5:39:e1:a6:17:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:D8:FD:7A:92:59:15:EE:10:DA:B9:FB:36:C0:34:C0:39:F6:D2
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:8a:04:0c:a7:06:48:01:ba:d6:6b:05:5d:64:21:c1:3f:6f:
c9:e3:18:80:53:58:de:2b:6b:59:30:95:3c:89:7b:9d:67:e6:
47:54:a8:5f:48:89:94:22:2c:4e:95:7c:c9:e0:92:c2:41:9a:
fc:6e:5d:30:73:a5:f8:6d:43:cd:56:ba:c4:8d:20:44:f9:0f:
e4:1e:d8:3c:aa:e2:c0:d8:46:cd:51:53:4b:fb:ea:59:ae:c5:
8d:6d:e4:2d:02:04:b6:6c:bc:02:db:46:0f:8c:9d:db:17:e2:
cb:5c:e1:0a:55:47:17:16:13:10:b8:f5:f8:68:fc:31:e3:1d:
c8:48:bb:d8:c7:c4:00:4e:6b:c0:d2:0c:a6:8c:c4:33:d3:a2:
f6:fb:93:6a:9d:27:cd:70:49:4a:86:aa:7a:27:e5:0c:27:14:
8a:61:3f:f3:d4:bb:6b:a0:8a:46:cc:6a:75:6c:5a:fc:ba:2a:
51:48:43:12:95:7a:91:79:3f:23:8f:7d:7d:bc:12:89:7f:42:
33:d9:42:16:b7:77:3e:27:34:b9:b4:e8:9c:a2:05:24:2b:e7:
b5:62:67:54:bc:1c:29:61:68:85:39:83:fc:0d:02:aa:b9:f9:
cc:28:6f:9b:ce:cd:c6:a0:88:93:d0:48:9a:ff:1c:8f:6a:ce:
b2:20:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:29 2025 by rpki-client