Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: G/xoUpjVwp6NNcdBVzLoAARFUoNrFdxAidn1s/KtKIs=
Subject key identifier: 98:15:17:85:4C:1C:7C:39:CA:F1:54:B9:C5:A5:3F:78:B4:3D:B6:BE
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019749D5820709218FA3D5A1A4EF97658881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0FB2
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: b1ZNEoz5lY+5nsujMkl0w/3OuTwAnXHuywI5Go69n/E=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:82:07:09:21:8f:a3:d5:a1:a4:ef:97:65:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=981517854c1c7c39caf154b9c5a53f78b43db6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:d0:c8:1d:9d:42:92:72:b2:9a:35:c4:11:
2a:06:b1:e0:c9:6a:51:d1:39:00:09:f3:36:99:6c:
f6:b0:a3:f2:e2:3b:c2:2f:97:be:73:88:fa:e1:4e:
91:7d:7a:78:ab:8b:ca:f2:9a:69:78:11:4b:24:01:
cc:9a:68:fd:3f:70:73:e9:85:a8:13:13:4b:5f:89:
98:fa:d6:29:3b:d0:7c:b4:07:5a:06:a3:74:d8:b7:
90:e2:63:cd:2e:17:7d:0f:b0:46:bf:8c:40:93:a0:
aa:36:69:ed:5a:8a:0c:71:b3:68:49:97:65:1e:7e:
b4:c9:0d:10:5f:a4:8e:7f:02:57:fa:28:ad:2e:15:
f7:9b:75:bf:ca:8a:58:58:36:c3:55:3c:f5:e8:aa:
31:d9:26:77:ab:81:3e:93:52:9c:61:74:60:b3:a2:
6c:e9:92:73:87:af:4c:63:84:56:86:5f:9c:f2:10:
e6:d3:78:bf:5f:86:10:b8:78:df:e6:26:60:0b:ca:
31:8b:a4:d2:40:3c:ae:a9:0b:72:f5:cc:4d:37:dc:
96:09:9d:8c:d6:0c:2f:b3:94:57:20:72:53:f4:9a:
20:80:d8:04:48:ae:fe:91:74:2f:23:7a:6f:9a:2d:
b6:ad:22:57:8f:14:95:3e:98:f0:d5:22:f4:eb:bf:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:17:85:4C:1C:7C:39:CA:F1:54:B9:C5:A5:3F:78:B4:3D:B6:BE
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:0a:47:7a:2a:19:3f:03:37:ec:2a:60:c5:f7:f9:01:57:
73:f9:ad:98:e3:ff:b1:99:f3:fe:9c:0a:e7:b8:4d:59:af:5a:
41:aa:7e:8f:00:0d:a4:81:ac:dc:8a:e8:d1:df:75:7c:64:50:
9f:b6:85:dd:01:45:d8:62:af:72:62:af:7a:49:af:3e:37:56:
0a:62:2c:09:2e:ee:19:a3:32:53:9d:df:b7:3c:b7:04:f2:2c:
da:59:01:68:04:c9:92:de:52:af:1d:9b:54:4a:e6:80:00:41:
49:ba:bd:1b:1c:a0:20:34:7c:b0:e6:15:04:11:46:49:47:c0:
da:c9:8d:7b:19:12:24:66:1c:b1:53:31:4c:e4:4d:ef:eb:62:
54:fc:1a:d3:66:50:e7:e6:bf:7b:71:42:9e:3f:6e:19:2b:23:
e7:62:7a:45:8d:6b:f5:d8:2a:fa:a4:3c:21:85:60:9a:25:eb:
17:cd:ff:99:fd:21:2c:c2:50:76:c3:ef:a9:56:89:80:97:67:
cf:43:00:b5:e7:fb:e5:b4:50:ce:85:b2:08:4c:59:3c:31:01:
80:b1:d3:a0:24:2e:2c:c4:28:d1:63:1d:ff:c0:ba:5f:64:3e:
91:8b:cf:94:d8:6d:97:f7:44:74:22:26:ca:fb:67:80:bb:b2:
4b:5e:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:27 2025 by rpki-client