Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: 8695H8nCSKjCkf0S3aVbM7KLiq0gl1C7DUBCqy4Q7eU=
Subject key identifier: 29:1B:94:86:A2:78:BD:35:57:5F:11:18:26:B3:ED:D0:69:DB:7D:67
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019A7225E4B79D65131D722E08DBD73046D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 12A2
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: caEwhu3FL9CsnJJgJGp3CMD8mCQHfAR0d9ta41KU+EM=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e4:b7:9d:65:13:1d:72:2e:08:db:d7:30:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=291b9486a278bd35575f111826b3edd069db7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:08:d5:3f:46:6e:9a:80:58:69:62:1e:c2:
ee:6a:19:df:d4:a7:8c:83:0e:fd:c9:b2:ee:eb:00:
70:38:8f:f4:64:2e:dc:9e:a2:03:9a:fb:22:ee:01:
60:ee:0f:38:8d:62:53:55:de:8a:4a:cb:c9:60:af:
dc:80:a2:4f:70:89:f2:96:bd:ba:e0:75:19:10:df:
d4:51:f9:bc:9c:d1:90:29:74:51:c5:e4:16:cf:3b:
c0:46:bf:20:13:3f:36:89:73:99:17:e0:66:8a:e7:
11:3f:73:16:ca:9e:4d:0d:03:45:21:fb:a7:23:de:
33:58:68:e6:71:0a:8b:45:fc:79:d3:aa:18:bd:5a:
ae:86:f6:18:ff:e6:7f:98:77:0d:ca:da:08:26:01:
fa:b8:c2:8f:bb:3e:26:23:96:6f:9a:90:b5:98:4d:
57:70:ad:c4:c8:12:78:f8:3d:15:f9:3f:82:5b:ac:
6c:3a:ee:19:91:2e:72:c0:59:40:e3:32:8f:6d:66:
3a:d0:50:0a:ad:55:0f:f4:7e:7f:70:12:dd:a8:ec:
94:09:70:02:38:66:3c:3c:e6:8d:66:5e:d1:13:7e:
46:14:43:b9:92:37:16:72:38:ff:c2:07:d0:cd:1c:
64:28:a9:6b:97:62:4a:af:c4:d1:03:94:0a:03:42:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:94:86:A2:78:BD:35:57:5F:11:18:26:B3:ED:D0:69:DB:7D:67
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d5:e5:f8:12:6f:29:28:c1:7a:7c:61:85:7f:da:4d:7a:5f:
e7:25:9f:b9:18:97:86:ec:fe:52:74:e8:2c:63:5f:35:58:2d:
5f:f5:c0:ff:89:48:7e:2a:18:0e:a2:0d:1b:08:5d:26:93:37:
61:13:4e:6b:e1:9d:18:f2:1c:63:6f:4c:c8:b8:80:27:a1:44:
fe:ba:3e:75:50:d4:fe:be:bf:e7:f2:ee:a7:78:6d:0e:ba:70:
76:ef:87:05:4d:3c:c0:a4:44:96:f1:e5:e0:5d:43:29:85:26:
36:4d:0d:56:39:83:eb:a3:31:a7:9e:1a:bf:b0:ec:c3:1c:a6:
f8:82:2a:15:b9:8f:75:19:64:f5:a3:dd:8a:3c:a3:01:49:b5:
de:aa:45:9b:1c:e3:9b:45:6f:22:c1:10:58:5a:8a:7e:69:42:
0c:ac:27:b9:df:00:f4:d4:f9:a9:91:af:86:66:0d:ee:74:29:
fb:3c:99:56:e8:99:a9:2f:b7:e5:11:4e:f2:59:18:03:bd:7e:
1a:d2:c4:27:73:62:f0:2d:1d:af:eb:16:8a:2c:64:07:03:7c:
fe:87:b6:70:27:81:cb:33:c0:de:3b:cc:02:2c:2a:0b:bd:e8:
96:6a:4d:87:cc:28:7e:b0:12:2b:c9:51:b6:07:c6:1c:97:d2:
9d:85:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client