Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: ziAj1e1ib3EMfzAKqKkK5J1Nb0WKjZYVO3K3ZS+eGqI=
Subject key identifier: E0:2B:A6:96:1D:30:C6:21:28:4D:D0:66:BD:F7:20:F3:83:13:B2:EC
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019A23D2FCD869B1FBE82D7072711C84DBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 112C
Signing time: Mon 27 Oct 2025 04:00:21 +0000
Manifest this update: Mon 27 Oct 2025 04:00:21 +0000
Manifest next update: Tue 28 Oct 2025 04:00:21 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: 5dO1fRilARDASqBe3LjsGP/o0NBkhspJPB/HAtkOU7g=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:fc:d8:69:b1:fb:e8:2d:70:72:71:1c:84:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Oct 27 04:00:21 2025 GMT
Not After : Oct 28 04:00:21 2025 GMT
Subject: CN=e02ba6961d30c621284dd066bdf720f38313b2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:40:b5:f8:e2:14:12:3f:c0:cb:0a:b7:8b:
df:90:29:91:8b:51:60:6e:d1:6a:3a:d1:0d:cd:16:
22:8a:9e:db:3b:98:dc:9e:e7:7a:66:3e:ae:4b:0c:
0f:58:13:72:bc:47:6a:f1:34:da:fd:65:2d:b6:f3:
d2:f5:e9:fb:f8:e0:9c:49:fd:0a:b1:77:cc:89:45:
39:4c:be:81:dd:b2:ca:1b:1f:08:91:25:3c:36:83:
dd:f6:16:1a:36:b5:11:ad:61:ba:52:67:04:66:32:
16:9e:da:c6:c2:4e:fe:38:e4:d1:3b:99:a2:b9:cf:
f5:0d:f1:74:30:a3:08:3f:99:d4:c3:73:58:a3:ec:
88:d2:cd:d2:18:58:d7:a8:03:22:a8:9c:09:f1:c6:
a9:85:12:3e:24:47:dc:1b:0e:9c:04:01:1f:16:43:
d2:c0:94:14:7a:34:17:22:7b:26:d4:68:cd:3b:75:
98:e5:86:74:79:8e:ef:16:4d:a5:67:64:ad:1e:10:
19:c5:10:6d:d9:46:f3:21:3e:86:7f:c4:88:ff:19:
af:a3:8a:84:b4:ab:a3:51:57:4b:76:4b:9c:23:9c:
a6:f4:4f:c8:94:e7:96:60:cc:be:55:10:e0:d3:6f:
a5:5c:b5:ab:9f:bc:36:8a:f0:28:a6:3a:59:18:ec:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:A6:96:1D:30:C6:21:28:4D:D0:66:BD:F7:20:F3:83:13:B2:EC
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4c:46:2e:50:cd:6e:ed:b7:ab:69:f4:8a:57:79:4e:00:92:
6e:30:48:b6:6b:c1:5c:37:05:77:ac:fb:88:ea:90:e6:ab:19:
03:8e:61:66:95:8a:51:78:bf:f8:51:ad:5f:ed:91:df:4c:04:
e5:d8:73:a1:51:f3:32:83:b3:aa:e6:f5:8a:33:c5:13:23:2e:
43:21:06:9d:4a:37:b7:86:26:5d:ea:34:4d:ab:b5:9d:ae:f5:
ec:b5:ee:4f:00:0b:08:c5:58:ca:8f:b5:c0:5d:11:b6:2d:88:
2d:20:56:53:da:8e:64:34:a9:f7:7f:1d:8e:e8:f2:38:63:d5:
94:f0:b8:ed:0a:80:5d:f9:fd:a3:ec:ac:ba:67:02:f4:93:b5:
97:19:13:7b:27:04:e3:cd:88:98:cb:51:71:01:40:55:fb:a9:
66:03:7e:58:72:2c:f8:c5:25:06:35:e7:19:c2:eb:8c:62:73:
b1:d9:f5:48:53:f0:04:7e:c1:1d:c7:ae:be:7c:57:6d:44:99:
0c:50:fc:54:b6:ee:66:89:44:a0:47:d1:16:3d:75:15:5c:32:
a6:b1:8f:23:f3:b8:57:b4:69:2f:b3:d2:9c:78:4d:95:9a:7f:
b7:27:2a:c6:5a:c9:5b:5a:dd:1b:5f:c6:1f:04:7b:e9:ce:e6:
9e:a8:3e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj0vzYabH76C1wcnEchNvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm
NDM3MzkwHhcNMjUxMDI3MDQwMDIxWhcNMjUxMDI4MDQwMDIxWjAzMTEwLwYDVQQD
EyhlMDJiYTY5NjFkMzBjNjIxMjg0ZGQwNjZiZGY3MjBmMzgzMTNiMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhxAtfjiFBI/wMsKt4vfkCmRi1Fg
btFqOtENzRYiip7bO5jcnud6Zj6uSwwPWBNyvEdq8TTa/WUttvPS9en7+OCcSf0K
sXfMiUU5TL6B3bLKGx8IkSU8NoPd9hYaNrURrWG6UmcEZjIWntrGwk7+OOTRO5mi
uc/1DfF0MKMIP5nUw3NYo+yI0s3SGFjXqAMiqJwJ8caphRI+JEfcGw6cBAEfFkPS
wJQUejQXInsm1GjNO3WY5YZ0eY7vFk2lZ2StHhAZxRBt2UbzIT6Gf8SI/xmvo4qE
tKujUVdLdkucI5ym9E/IlOeWYMy+VRDg02+lXLWrn7w2ivAopjpZGOwviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOArppYdMMYhKE3QZr33IPODE7LsMB8GA1UdIwQY
MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt
ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi
LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ExGLlDN
bu23q2n0ild5TgCSbjBItmvBXDcFd6z7iOqQ5qsZA45hZpWKUXi/+FGtX+2R30wE
5dhzoVHzMoOzqub1ijPFEyMuQyEGnUo3t4YmXeo0Tau1na717LXuTwALCMVYyo+1
wF0Rti2ILSBWU9qOZDSp938djujyOGPVlPC47QqAXfn9o+ysumcC9JO1lxkTeycE
482ImMtRcQFAVfupZgN+WHIs+MUlBjXnGcLrjGJzsdn1SFPwBH7BHceuvnxXbUSZ
DFD8VLbuZolEoEfRFj11FVwyprGPI/O4V7RpL7PSnHhNlZp/tycqxlrJW1rdG1/G
HwR76c7mnqg+/g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:51:56 2025 by rpki-client