Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: rmJix6Xm6/ltcRXjvtCbUE8FpORbLhAMTdAOoyzMjE0=
Subject key identifier: 45:CD:5E:A8:36:37:74:BD:13:71:C3:FE:D0:8C:C5:AB:86:17:12:DE
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019750B373DB0DB9B2150568157056EF4075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 18:00:27 +0000
Manifest this update: Sun 08 Jun 2025 18:00:27 +0000
Manifest next update: Mon 09 Jun 2025 18:00:27 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: NfdvharXrIuCm2RdTjcVSSM9n08lzsCf4hNfjYp2hzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:73:db:0d:b9:b2:15:05:68:15:70:56:ef:40:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jun 8 18:00:27 2025 GMT
Not After : Jun 9 18:00:27 2025 GMT
Subject: CN=45cd5ea8363774bd1371c3fed08cc5ab861712de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:ca:21:e3:15:04:ec:b2:4a:9b:d9:11:d0:
7d:19:d4:7f:17:6e:97:ae:f0:90:ed:1c:36:3b:70:
db:e2:57:91:45:92:d7:f2:aa:2e:ff:73:ea:77:10:
63:ce:4e:9e:74:9f:ed:e9:82:f5:3c:44:24:86:d6:
ad:e1:36:3f:8a:be:fb:bd:f7:c1:3f:dc:82:12:e6:
98:78:a5:a5:11:09:e1:98:82:79:b4:72:bc:e7:2a:
31:41:99:03:30:33:37:0e:fa:32:0e:22:1f:ef:2a:
73:26:f2:c1:a6:df:90:a9:c8:f6:d4:d1:1e:0e:30:
c0:1a:24:86:aa:45:0d:85:d5:57:9d:8b:13:51:a7:
0f:ab:3c:31:00:10:51:db:68:f8:d6:24:3f:6e:42:
ee:3a:71:11:3d:f7:c1:57:23:96:2d:02:0e:f4:61:
80:93:5a:96:fd:69:29:3d:da:9c:83:d6:9f:ea:70:
a8:8d:64:a4:d4:21:8c:2c:1a:70:b4:e8:d6:f3:5e:
08:50:92:f9:2c:b6:ee:d0:93:56:04:99:6f:b6:bb:
65:80:1b:de:f8:68:08:f0:91:40:86:90:ee:95:21:
07:5b:ce:11:ca:b8:56:9f:b0:6c:f1:2d:99:a9:96:
2b:1d:d5:61:c9:fc:cc:24:10:e2:d1:34:c3:7b:61:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:5E:A8:36:37:74:BD:13:71:C3:FE:D0:8C:C5:AB:86:17:12:DE
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:35:46:44:2b:e4:4e:fd:8b:a8:18:43:69:f5:06:59:c3:19:
ed:ae:11:6c:1c:29:f8:cd:13:47:b2:57:27:6a:a1:ce:49:e7:
9e:82:35:fb:d5:f3:9e:5b:af:e3:32:ef:8e:88:07:56:46:9a:
3f:4c:5b:9f:e7:97:ec:bd:44:4e:96:bf:4b:47:f9:f7:e2:2e:
66:5c:f9:1f:60:9c:74:fa:53:25:01:1b:b2:3c:4e:4c:bf:f1:
9d:7d:67:97:33:66:5f:d3:27:44:19:0c:bd:4f:7c:0b:93:7a:
e6:51:dd:76:ec:25:c2:09:a1:a0:5d:8e:fa:6d:17:7f:58:90:
40:c0:c0:49:70:9d:cc:dd:9e:99:a4:07:2f:dd:59:13:bc:7a:
f0:65:9a:6f:90:2a:67:03:0e:72:3b:47:b4:c1:ff:f3:a3:ba:
5c:5f:fd:70:08:be:9c:e2:c0:98:c1:f8:db:60:7d:23:44:0c:
3a:98:f6:43:50:34:b9:d5:a1:16:05:54:07:c0:77:41:98:e7:
c3:ce:9b:5a:cb:db:b0:ea:46:84:b7:3c:55:87:fa:e5:a8:87:
56:70:20:f5:6f:68:8b:dc:9b:83:b7:39:b2:ca:1b:24:0b:d4:
d2:15:e1:4a:b9:f3:84:d3:33:e7:77:fc:98:1c:c2:64:23:00:
08:0f:82:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs3PbDbmyFQVoFXBW70B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx
MDlkODAwHhcNMjUwNjA4MTgwMDI3WhcNMjUwNjA5MTgwMDI3WjAzMTEwLwYDVQQD
Eyg0NWNkNWVhODM2Mzc3NGJkMTM3MWMzZmVkMDhjYzVhYjg2MTcxMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHjKIeMVBOyySpvZEdB9GdR/F26X
rvCQ7Rw2O3Db4leRRZLX8qou/3PqdxBjzk6edJ/t6YL1PEQkhtat4TY/ir77vffB
P9yCEuaYeKWlEQnhmIJ5tHK85yoxQZkDMDM3DvoyDiIf7ypzJvLBpt+Qqcj21NEe
DjDAGiSGqkUNhdVXnYsTUacPqzwxABBR22j41iQ/bkLuOnERPffBVyOWLQIO9GGA
k1qW/WkpPdqcg9af6nCojWSk1CGMLBpwtOjW814IUJL5LLbu0JNWBJlvtrtlgBve
+GgI8JFAhpDulSEHW84RyrhWn7Bs8S2ZqZYrHdVhyfzMJBDi0TTDe2F7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXNXqg2N3S9E3HD/tCMxauGFxLeMB8GA1UdIwQY
MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt
MjVhZTkyOTNmNmI0LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0
LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszVGRCvk
Tv2LqBhDafUGWcMZ7a4RbBwp+M0TR7JXJ2qhzknnnoI1+9Xznluv4zLvjogHVkaa
P0xbn+eX7L1ETpa/S0f59+IuZlz5H2CcdPpTJQEbsjxOTL/xnX1nlzNmX9MnRBkM
vU98C5N65lHdduwlwgmhoF2O+m0Xf1iQQMDASXCdzN2emaQHL91ZE7x68GWab5Aq
ZwMOcjtHtMH/86O6XF/9cAi+nOLAmMH422B9I0QMOpj2Q1A0udWhFgVUB8B3QZjn
w86bWsvbsOpGhLc8VYf65aiHVnAg9W9oi9ybg7c5ssobJAvU0hXhSrnzhNMz53f8
mBzCZCMACA+CQQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:30:09 2025 by rpki-client