Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: mCNx3fIdbJeCKJSYkbsbzQAFNGdNa6Uf4i63C7AxKq8=
Subject key identifier: B5:D0:38:8F:E3:78:2D:C8:91:24:C5:96:3D:EB:CA:E9:F5:54:60:83
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 01964FDA9F3A2A5F297B559AE7EC37EF71F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 107E
Signing time: Sat 19 Apr 2025 21:00:49 +0000
Manifest this update: Sat 19 Apr 2025 21:00:49 +0000
Manifest next update: Sun 20 Apr 2025 21:00:49 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: oobAxd0sWife6taJnLAGfd6AIuT+NxssP1XCmtTLek4=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:9f:3a:2a:5f:29:7b:55:9a:e7:ec:37:ef:71:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Apr 19 21:00:49 2025 GMT
Not After : Apr 20 21:00:49 2025 GMT
Subject: CN=b5d0388fe3782dc89124c5963debcae9f5546083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:2a:94:12:58:1f:4e:1e:fc:a9:48:e8:a6:
6d:fb:2d:40:fb:59:d1:7a:0e:09:e8:e7:e7:63:42:
49:4c:98:33:b0:c0:d6:4e:58:ce:12:55:98:d2:ff:
30:45:28:08:30:71:52:14:23:9e:1a:c3:46:b0:e5:
3b:8f:63:49:16:16:04:16:51:1c:71:b1:f9:33:e8:
3c:c9:9e:14:79:58:32:f7:4c:5b:06:67:76:2c:ea:
3d:2f:a3:9c:47:71:c1:79:e7:65:9a:ba:65:69:c0:
86:95:a9:99:f0:84:39:7d:c5:c8:e9:c5:2a:81:44:
3f:95:e3:55:f1:73:fd:02:62:52:f0:ec:37:b1:8a:
48:47:f0:57:8b:1f:4d:f6:8f:44:9a:6c:2e:89:8f:
e7:71:72:b1:aa:ef:9b:cb:56:c0:b2:dd:2b:2f:48:
60:fb:0e:ea:cf:d8:f8:f7:98:36:11:97:a9:37:39:
c7:c0:cb:3a:3d:6a:de:34:d9:11:c9:3f:61:e3:45:
15:15:e8:e2:b8:2d:c9:5e:d6:42:74:26:83:03:b6:
67:59:b1:c7:72:41:a3:84:d6:17:e0:d5:2a:07:a8:
06:48:81:09:cc:57:bf:a9:1b:2f:12:b1:56:f8:ee:
30:64:e0:95:b9:ec:21:54:53:f9:5b:ab:5d:26:80:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:38:8F:E3:78:2D:C8:91:24:C5:96:3D:EB:CA:E9:F5:54:60:83
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:4d:b5:ec:7c:0e:76:13:d1:4a:4d:6e:c2:8e:4d:b8:67:
3a:95:2a:b6:9b:f7:94:ac:14:be:cf:11:63:02:46:6e:76:c9:
87:e9:ee:f5:02:23:e4:1b:59:da:ee:3b:dd:84:72:9e:11:d5:
d8:bf:0b:7d:29:6d:39:e0:55:3d:72:b6:e9:9f:43:4e:9f:39:
16:84:a0:1e:c6:0b:3e:a4:a9:b8:2f:5d:a6:58:97:06:a9:34:
ea:c4:cd:30:d2:db:98:46:e3:aa:b5:d0:f7:66:30:dc:b4:2f:
23:36:ba:3a:9f:8c:5f:fd:21:3d:91:62:c2:eb:b6:76:f7:8a:
72:83:21:58:b4:b9:d0:ac:7a:18:a2:b6:03:50:7e:5e:fd:f9:
ff:7a:06:aa:c1:05:39:af:65:95:c9:1e:68:fc:39:f6:d1:0f:
b5:20:1c:f0:0d:c7:f1:3f:b4:82:1c:b9:3f:e7:f0:a5:49:b7:
74:01:52:73:c3:83:0a:8f:51:60:99:c8:b6:7b:b3:c9:c5:5a:
38:4f:7f:db:77:9d:18:87:2c:95:d1:48:93:e9:4b:5d:31:89:
30:4a:e7:02:d4:e1:e9:b9:c1:b2:9b:64:f6:32:26:8e:36:2e:
0f:1a:58:4e:9a:6b:df:c0:58:ca:0d:49:45:04:19:b5:44:c6:
22:7e:75:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2p86Kl8pe1Wa5+w373H4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjUwNDE5MjEwMDQ5WhcNMjUwNDIwMjEwMDQ5WjAzMTEwLwYDVQQD
EyhiNWQwMzg4ZmUzNzgyZGM4OTEyNGM1OTYzZGViY2FlOWY1NTQ2MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj0qlBJYH04e/KlI6KZt+y1A+1nR
eg4J6OfnY0JJTJgzsMDWTljOElWY0v8wRSgIMHFSFCOeGsNGsOU7j2NJFhYEFlEc
cbH5M+g8yZ4UeVgy90xbBmd2LOo9L6OcR3HBeedlmrplacCGlamZ8IQ5fcXI6cUq
gUQ/leNV8XP9AmJS8Ow3sYpIR/BXix9N9o9EmmwuiY/ncXKxqu+by1bAst0rL0hg
+w7qz9j495g2EZepNznHwMs6PWreNNkRyT9h40UVFejiuC3JXtZCdCaDA7ZnWbHH
ckGjhNYX4NUqB6gGSIEJzFe/qRsvErFW+O4wZOCVuewhVFP5W6tdJoDXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXQOI/jeC3IkSTFlj3ryun1VGCDMB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflZNtex8
DnYT0UpNbsKOTbhnOpUqtpv3lKwUvs8RYwJGbnbJh+nu9QIj5BtZ2u473YRynhHV
2L8LfSltOeBVPXK26Z9DTp85FoSgHsYLPqSpuC9dpliXBqk06sTNMNLbmEbjqrXQ
92Yw3LQvIza6Op+MX/0hPZFiwuu2dveKcoMhWLS50Kx6GKK2A1B+Xv35/3oGqsEF
Oa9llckeaPw59tEPtSAc8A3H8T+0ghy5P+fwpUm3dAFSc8ODCo9RYJnItnuzycVa
OE9/23edGIcsldFIk+lLXTGJMErnAtTh6bnBsptk9jImjjYuDxpYTppr38BYyg1J
RQQZtUTGIn51IQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:12 2025 by rpki-client