Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: MNpg/AMKeuDHLBvYmWun7XPkBeavyRtGCM+PDdyoNUY=
Subject key identifier: 4D:58:98:7B:4A:F5:9E:8D:B3:5C:8C:7D:88:39:E3:ED:B3:F8:38:0D
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019845F634499B7BB37A27A0870A2E791E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1182
Signing time: Sat 26 Jul 2025 09:00:19 +0000
Manifest this update: Sat 26 Jul 2025 09:00:19 +0000
Manifest next update: Sun 27 Jul 2025 09:00:19 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: uBb7usKEwji8DpNzvkPKy0LWpGVFtKYl8DqnuFEnpRY=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:34:49:9b:7b:b3:7a:27:a0:87:0a:2e:79:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Jul 26 09:00:19 2025 GMT
Not After : Jul 27 09:00:19 2025 GMT
Subject: CN=4d58987b4af59e8db35c8c7d8839e3edb3f8380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:d2:a5:b4:cc:b6:e3:30:9f:f3:18:7b:54:
3a:1c:08:56:45:b5:84:11:60:da:92:f5:06:85:d6:
3c:6b:95:65:d6:8b:0a:43:c4:ea:a2:7c:7c:96:c5:
3f:39:93:b8:01:53:e1:43:fe:64:51:ea:c8:a0:e2:
5d:d7:a3:d6:95:21:b6:c1:d5:1c:b6:04:77:46:6a:
a5:21:31:1d:f4:46:9b:8c:fc:ad:11:e4:ef:87:4e:
6e:3d:58:5a:b4:4d:7f:3b:2a:c7:a0:a1:01:ca:45:
5f:98:86:65:b7:2b:0d:56:42:85:6a:3d:58:1d:80:
12:82:61:cd:51:2f:fb:ec:00:03:ee:6d:81:d2:25:
23:97:89:b8:36:7d:a4:f9:3f:68:81:e9:ca:15:5b:
20:a2:fc:b2:bf:47:c6:8e:ac:f4:99:10:1f:84:43:
55:2c:11:51:05:59:b1:20:42:1f:7d:13:2d:c4:26:
8c:05:b7:3e:a2:31:b9:b5:8f:be:38:d8:bc:07:be:
fa:39:a7:f8:a6:ee:3c:f2:10:92:ca:32:44:a3:7c:
1a:be:12:a7:b8:e7:e7:f3:72:ca:c5:1a:e3:df:72:
8a:bf:ee:7e:4b:60:47:d1:36:ac:7a:f0:a3:19:e7:
3d:87:ba:60:af:97:fe:5a:6f:f3:75:d6:96:64:ac:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:98:7B:4A:F5:9E:8D:B3:5C:8C:7D:88:39:E3:ED:B3:F8:38:0D
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:71:3d:71:26:40:f1:e1:aa:f8:54:72:39:16:a7:f0:79:
15:ae:bb:17:a0:f0:56:9f:6f:3c:1f:7b:08:a6:04:d1:00:85:
67:d6:e6:6d:c4:ad:d8:da:7e:14:27:c5:0e:75:a2:76:97:3b:
a1:2d:80:7a:8a:63:74:a9:0e:e1:38:98:e2:ef:d5:ba:de:17:
76:81:ea:68:5f:3b:3a:65:d5:f9:39:02:96:ce:b7:e4:bb:47:
94:27:b9:4d:00:43:ba:03:05:ff:e4:29:2a:de:aa:39:6a:cc:
42:c2:6e:0e:5a:d5:d3:c4:56:af:5d:d3:57:15:80:ee:d5:99:
57:04:55:9e:f5:cb:49:49:56:ea:e8:da:30:e3:90:c7:a8:c7:
8b:4f:ba:ce:3a:2d:4c:ac:05:c3:ed:63:96:22:0c:ba:14:ab:
da:ec:ba:e3:44:eb:fc:1c:63:56:81:a6:b3:72:7c:69:cd:c7:
2c:56:8e:c2:89:7e:52:d6:78:42:eb:48:63:41:c1:d3:22:86:
42:72:41:04:b3:e6:c4:c1:7c:4b:31:0c:21:bc:0a:08:a0:a5:
b3:42:3a:a8:d5:ed:82:f7:11:c0:d6:0c:23:df:17:89:34:68:
e1:cf:2c:8d:8f:ae:fc:26:ae:4e:67:9e:02:5b:90:46:e0:d8:
93:51:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:07:06 2025 by rpki-client