Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: oWO6RduUK9QTLlEtGpa6ZvNwyuZalpQXy1R7pO9frrE=
Subject key identifier: 60:29:63:A7:26:7D:A3:AC:FF:FA:22:55:E3:2F:7D:69:74:60:07:25
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019849D36730AB6173A0744A63F4664A0CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: QS+BhLhbXVFkTzf+e/hy2IwCURmDpwwIY4IF2AM6coc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:67:30:ab:61:73:a0:74:4a:63:f4:66:4a:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=602963a7267da3acfffa2255e32f7d6974600725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:2c:e8:19:e1:7f:7a:cb:27:51:13:ad:97:
16:88:35:1a:f2:6a:9a:4f:d9:59:1e:38:ea:22:ef:
60:65:cc:4b:bd:aa:9d:8e:d9:d3:2c:95:6b:73:6c:
83:d0:e3:1e:3f:23:e9:ac:a8:aa:8b:4e:35:4d:b1:
29:d6:c3:a3:f3:28:54:6e:dc:81:84:72:85:17:b9:
59:1a:f5:a7:4f:ef:7d:64:eb:45:1e:de:a0:8f:b8:
68:bc:61:21:b6:5a:bc:a5:7e:30:68:5c:4c:79:ec:
2e:31:f3:53:7a:73:32:5a:36:47:15:23:4b:5b:53:
54:9b:75:52:32:df:b4:bf:31:6a:b7:a2:da:e3:6b:
6c:c5:e0:96:6c:1b:d2:8f:48:0e:0e:f4:ef:94:c8:
f4:04:33:e2:19:cf:5a:15:c0:e8:c5:c6:90:34:64:
f7:46:ee:df:de:8b:e2:16:7a:0c:43:4f:66:2f:b6:
d3:cc:cf:41:02:e6:0d:c8:91:01:dd:aa:b3:20:88:
bc:bb:fc:fd:dd:ec:6d:36:7b:b3:36:22:6e:ca:f1:
6b:fe:09:5b:a0:2b:7e:a6:ad:9a:35:a0:11:8c:04:
f5:c3:a5:70:72:c2:36:8d:ee:0f:50:b3:93:9e:75:
05:83:ed:d3:f5:51:81:ad:c2:92:2a:27:a0:34:21:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:63:A7:26:7D:A3:AC:FF:FA:22:55:E3:2F:7D:69:74:60:07:25
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:1d:2d:43:ba:a4:cd:f1:0a:66:57:dd:18:cf:98:67:d4:
e1:e0:69:b5:e1:3f:60:8c:c7:2b:47:16:45:3f:55:5f:0d:1e:
8d:2e:01:1a:90:11:ee:3e:fb:62:f8:eb:be:ee:5f:99:b0:c8:
0b:72:da:67:b4:33:ff:7b:34:e0:60:d5:7e:5d:3e:6a:56:2d:
fe:0a:b8:49:ff:d2:cd:40:ee:c0:09:e7:e2:4e:a8:19:18:f3:
15:c3:5d:47:9f:ad:b0:cc:78:2e:84:05:05:00:4f:6d:98:9e:
d1:5c:ab:93:40:2b:d7:94:96:bb:e3:1f:24:25:56:84:41:ce:
32:28:19:a2:1d:ca:66:04:db:f9:42:35:34:f6:35:14:bb:e2:
ba:63:46:a8:14:5b:35:57:3c:df:38:9f:a0:6e:6c:14:b9:1d:
9b:4f:fb:c4:13:bb:ce:d4:00:b3:44:c1:78:5f:a0:43:20:29:
20:e9:19:7a:ff:85:80:ba:cb:c8:76:b6:b7:b1:c0:44:4b:93:
a5:53:bf:e2:4c:2c:f2:bf:34:28:76:e4:b0:98:5e:43:51:d5:
f0:57:36:da:1f:42:66:c8:b0:36:df:18:98:b8:0b:7c:77:97:
09:23:69:a0:0e:1a:9f:ef:b3:97:c1:c3:f2:37:4e:a4:f2:9d:
82:cf:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:24 2025 by rpki-client