Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: 8m8xVo8PKTWGdYhOzJTYWmuPai80ryG98Mo2XOHUTHI=
Subject key identifier: EF:44:71:11:DC:02:09:F0:32:7F:CB:13:54:84:68:02:84:AE:14:56
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019922553881F6531716EE32BD6AD6EAAA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: sWsoalZ3GlSADIAp4+d/ztlHOcdH5e9tThrmUtpEdz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:38:81:f6:53:17:16:ee:32:bd:6a:d6:ea:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=ef447111dc0209f0327fcb135484680284ae1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:a5:73:be:42:9d:7f:01:ff:34:31:57:0b:
b2:7d:56:88:c1:4c:a6:c8:c8:2d:a6:30:ee:49:8d:
ae:5b:89:c3:69:03:dd:6f:f5:b9:e4:31:87:49:12:
0f:de:c5:2e:c9:34:dc:de:1e:6f:22:a8:af:fe:46:
4b:1c:65:05:ee:ce:9b:7e:1f:37:75:75:db:d1:43:
b8:d4:a6:35:3c:1f:5c:b4:5d:c5:44:64:1d:bd:ad:
fe:40:60:10:c4:fd:cf:cc:07:a7:fc:89:07:d9:73:
13:be:d7:07:46:ae:cb:ec:34:07:a9:04:ed:f9:30:
bf:fd:1b:c7:61:fe:a3:23:95:52:0c:e8:2f:0d:04:
16:fd:38:04:9f:fa:c2:5d:8b:a6:08:7e:ed:2c:30:
80:7f:41:9e:b1:e6:08:de:c4:cb:d2:6b:11:d0:50:
80:ac:99:4b:bc:7a:71:f2:95:44:4f:11:76:94:55:
00:17:cc:02:bf:8b:81:e5:0b:13:50:8c:82:d0:9d:
ec:72:44:c6:1b:b4:18:1e:a2:68:6c:f9:20:5d:f7:
58:14:68:89:ee:cf:f5:b9:a7:ac:7f:39:f8:94:13:
06:db:b6:70:aa:b9:17:eb:55:cc:a9:82:9f:65:aa:
da:84:f8:dc:cb:47:e0:97:f2:29:0f:db:e7:72:d7:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:71:11:DC:02:09:F0:32:7F:CB:13:54:84:68:02:84:AE:14:56
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:9f:f9:fc:ec:83:59:64:c6:78:1a:65:9f:22:a9:a3:ce:
0a:f3:63:4d:0e:72:58:73:06:dc:39:82:ff:01:eb:c7:6e:d1:
4d:ce:2f:13:fd:68:3b:4a:b5:de:be:ef:fb:95:53:bc:be:de:
38:01:1f:07:93:a9:8c:72:7d:24:ec:70:6d:f2:3e:0b:1c:10:
fc:78:6d:cf:60:5f:6d:1c:da:96:34:19:2b:27:11:71:31:ed:
c4:d9:23:12:5f:42:6b:a3:40:48:2b:82:ef:ba:b5:b5:d0:d9:
f1:3b:ba:de:65:3d:a5:02:b4:9e:84:c7:02:c1:0a:1a:d4:8b:
77:77:9f:2e:dd:47:dd:6b:c4:70:78:de:bc:2c:03:c9:49:ce:
6b:b6:07:8a:02:35:21:73:88:db:66:b9:38:16:da:17:48:8a:
58:43:40:58:09:da:7a:70:29:6b:c2:86:77:2b:ce:21:d6:ca:
ba:ce:f0:31:2b:44:0f:9d:88:be:4f:26:92:46:f6:c4:01:6d:
4b:7e:d8:93:6a:09:72:47:aa:63:c6:9e:46:7c:57:9c:2a:c0:
f1:80:bd:0d:15:06:a7:ac:a8:16:b1:06:04:26:98:03:73:23:
ad:0f:6e:f9:cc:15:b2:f8:6d:37:26:65:9d:34:c7:91:40:db:
15:3e:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client