Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: gGi3nGYLGumKVYF3AHD0VLFQWY+5KBGPhEHHPleGazk=
Subject key identifier: 46:FC:15:62:3E:C2:BE:52:DE:EC:FD:E7:01:65:94:44:CA:DD:92:1F
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019A725C72F6B13B8EDEF9B685D7254E4BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: njhtIK8fKFK769FWtSz3Q+Ty/Pfh0O9ApazPhTgsAEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:f6:b1:3b:8e:de:f9:b6:85:d7:25:4e:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=46fc15623ec2be52deecfde701659444cadd921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:99:b0:03:c1:fa:21:a5:ae:a2:96:8e:3d:
ec:69:5f:3b:18:6a:c8:54:3e:96:a9:f0:3a:65:07:
50:cf:95:5c:bd:3a:dd:c2:7e:b6:d9:2f:5b:58:4c:
25:92:61:dc:a1:9c:6f:ce:d7:e4:f7:3f:af:4a:fd:
d5:15:dd:e8:24:2e:d3:a5:b1:5a:93:5d:6a:27:d0:
04:07:da:56:af:91:69:73:bf:fe:da:bb:85:a1:3d:
1d:b5:9f:05:92:7b:03:9e:10:5b:a3:99:11:c1:7c:
ac:5d:d2:97:cf:5a:95:a8:0b:b2:3b:fa:20:a3:30:
01:72:59:9b:94:20:16:37:99:b0:08:7a:98:fd:65:
cf:bb:ae:de:f3:4a:f2:ba:5d:45:d2:58:69:6d:1d:
6f:6b:43:32:93:c8:13:3d:2c:ce:fa:8e:2e:69:f0:
a5:91:0a:b9:3c:c5:87:4c:e3:54:aa:fe:21:c6:5d:
32:de:e2:a9:b8:0b:f2:5e:69:b8:50:0d:c4:a1:40:
7a:97:7d:75:02:e4:8e:b8:c7:69:c1:fe:eb:e0:b0:
c7:b7:90:47:a9:70:d0:a7:da:eb:63:4e:0e:48:24:
5b:e7:41:c5:e8:90:0b:81:d2:d1:dc:d8:9b:a0:24:
5a:cd:e9:d9:26:db:1f:ba:20:e7:ee:3b:ac:1b:50:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:15:62:3E:C2:BE:52:DE:EC:FD:E7:01:65:94:44:CA:DD:92:1F
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:00:f1:e7:a0:93:56:0a:dc:64:91:2a:e0:36:39:90:b5:ab:
21:d9:fd:24:54:7b:e5:b6:05:49:f8:04:d4:d5:ec:43:b2:67:
89:22:f2:a9:98:35:1d:1e:bc:f7:64:fa:70:77:38:65:d4:4a:
57:3b:93:dd:6c:0b:c9:83:c7:7c:6a:17:c5:74:ef:ef:48:ef:
e9:ca:3f:6c:8e:ca:9c:64:f3:1d:fd:f7:9d:31:21:16:10:e4:
c9:d7:3f:0f:e5:e9:c2:18:7c:e6:3a:98:e9:b5:44:11:53:e0:
a3:8a:45:45:51:7b:ca:45:e0:5d:84:16:0e:fd:a0:d3:35:43:
e4:d9:1a:71:31:05:28:8a:1c:4f:f0:94:cb:79:a9:c0:57:fa:
f3:fe:a1:4c:8e:22:5f:99:2a:4e:e5:4c:b7:f9:9c:ee:39:42:
5b:f6:b7:2a:a7:c5:7f:2c:4b:89:27:b3:74:c0:fd:6f:5c:60:
35:3d:81:b4:39:61:ab:da:b4:27:36:e5:9f:08:03:a0:ec:ef:
44:a8:56:b4:17:f5:29:f9:7f:3e:f4:48:0e:08:9c:b9:0e:ba:
5a:b1:7f:ea:67:80:cb:46:b7:7f:82:ad:e7:9e:1c:c5:63:e7:
56:e4:5c:5a:e2:ac:8e:b6:dc:c5:07:8b:08:97:e0:c9:22:4b:
7d:f3:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:38 2025 by rpki-client