Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: Y8D9qKrudElbt3R0OveAxPfamLygBed/EW5+A3aAdwg=
Subject key identifier: 9A:38:89:0E:A1:A0:5E:83:5E:91:0F:38:DA:7D:7D:CF:49:F8:A2:FA
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019748FA83772671D666EA6EEF7F058F11C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 10FF
Signing time: Sat 07 Jun 2025 06:01:06 +0000
Manifest this update: Sat 07 Jun 2025 06:01:06 +0000
Manifest next update: Sun 08 Jun 2025 06:01:06 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: SdtS+N3TFopoLXOwPFqriKMOg39uT6IQiq6lZNnhVsM=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:83:77:26:71:d6:66:ea:6e:ef:7f:05:8f:11:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Jun 7 06:01:06 2025 GMT
Not After : Jun 8 06:01:06 2025 GMT
Subject: CN=9a38890ea1a05e835e910f38da7d7dcf49f8a2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:e2:36:3b:23:e3:65:8d:cf:7a:69:5e:7b:
fe:c1:7d:3a:10:fe:53:16:a2:6e:5d:85:b3:d3:0e:
7d:bd:5f:a1:05:a8:26:58:1d:ea:96:6b:68:b9:49:
64:5e:00:83:ac:44:ce:a7:d7:fa:99:5d:df:5d:12:
ba:98:6a:5b:ee:5a:09:94:1e:bf:05:cc:c4:d5:24:
8a:4e:5c:6f:3a:1f:cd:fb:57:fd:18:cb:10:b5:6c:
0a:74:7c:9c:1b:62:24:db:04:bf:2c:22:1f:4a:30:
96:62:35:4c:92:f7:a2:83:a6:eb:30:dd:ca:08:d0:
c3:4e:65:4b:84:b7:f8:29:6d:97:1e:ce:88:de:ff:
06:37:4b:ca:e3:5b:6c:88:5e:fd:4f:88:9e:aa:29:
7e:64:94:e7:7d:da:a0:c4:76:d6:ff:f3:f8:51:d0:
db:52:86:97:a1:c9:9a:4e:a2:d1:6f:d7:1e:ff:d2:
d5:66:79:9c:40:66:0a:3c:7c:08:19:30:83:89:96:
70:7d:45:03:f0:a9:fc:1a:41:68:e2:ba:cd:b3:2d:
07:91:75:74:2c:98:df:e4:15:49:7c:bf:e0:4e:90:
f7:76:17:8d:09:6f:c3:df:24:8b:fd:f0:35:bf:f3:
e5:27:9a:3b:8e:e5:b3:b1:e0:f6:dd:5f:a1:b9:c1:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:89:0E:A1:A0:5E:83:5E:91:0F:38:DA:7D:7D:CF:49:F8:A2:FA
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:5d:b4:4b:fc:3d:07:a4:c9:42:90:48:bd:d4:19:86:00:
c3:28:b0:b2:75:32:7d:7d:59:87:f7:c5:1b:e9:15:0c:37:6d:
a8:f1:6c:d2:42:38:bd:37:a8:ff:24:f2:10:24:f6:65:b7:14:
e8:6e:91:50:11:0b:bd:4d:07:0b:dd:55:e4:0f:ee:8f:49:50:
ab:ed:07:08:c0:f2:51:d0:25:9d:c2:23:49:72:75:32:5b:9c:
47:2b:79:d0:ad:e9:a7:70:76:a1:3b:73:fd:55:bc:f2:a0:ea:
dc:38:d7:06:c0:c3:18:ad:83:14:6a:23:74:f2:dd:2d:28:90:
f2:91:55:5a:d2:fd:61:bc:15:f7:d3:7b:0f:6c:1e:f2:0b:e1:
01:53:34:20:7c:6d:b4:34:4c:9d:b4:78:ad:7d:78:6f:7c:a4:
26:88:48:61:b2:41:5b:e6:30:8d:3b:af:4e:99:d9:7a:ce:07:
c3:75:80:a1:aa:62:90:30:c4:64:2a:48:43:75:83:3c:5c:1d:
71:a5:6a:33:15:42:82:8c:c0:bb:30:21:74:97:52:1f:16:74:
bd:85:c5:66:33:45:c6:cc:1e:10:95:5b:ae:2d:05:f4:f8:21:
e7:8a:45:c3:d6:51:24:94:4b:d9:c7:a0:8d:66:2c:24:de:25:
52:80:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:18 2025 by rpki-client