Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: m0dynodBGDctuitHBGrJShYgpClQR8V0cu4RWff0Akg=
Subject key identifier: 88:A4:79:DD:81:DF:DA:3A:B4:69:38:02:29:C9:9D:66:FD:3C:03:08
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 019A7112F4E65C6591930D529EFCEB321C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 6E
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: 2ZpN87PSR1SGxDcrnHDKm2NoSgz3XGgIpRWYgcmaQ/s=)
2: Q4OZxztfyDSVk8gALqZq70chyas.roa (hash: +wq+wwit7khNj/v3e6ja2msUgF3YYPnUELKveLLehBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f4:e6:5c:65:91:93:0d:52:9e:fc:eb:32:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=88a479dd81dfda3ab469380229c99d66fd3c0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:92:32:74:5f:c0:9a:ee:f8:7b:f8:f0:e9:
7c:7d:7a:1b:fb:fd:a6:ad:f2:28:5c:4b:e4:10:02:
a6:fa:09:08:09:14:3d:77:23:47:1b:f6:c1:f8:27:
a7:43:fb:2c:dc:68:3b:04:5a:dc:70:cf:de:2a:df:
43:1c:20:1e:4a:56:33:d1:42:03:72:a9:84:ea:d1:
d9:1a:79:68:e2:fd:bc:4d:ff:f9:b1:f5:f3:3f:08:
04:10:5c:56:2e:b0:b6:42:57:b3:c4:d7:a4:e5:bb:
b0:f6:3f:2f:08:ab:77:59:63:a7:62:49:0b:29:f6:
38:40:e9:34:7f:7a:b1:a8:39:ac:f8:26:65:ac:d2:
76:f2:95:19:3d:80:44:8b:91:67:4f:44:9c:b2:c2:
16:b8:df:8f:75:49:85:41:52:a4:0a:2f:9c:4e:1f:
c3:bf:d6:b4:84:22:8e:c5:ae:50:e4:2b:48:15:62:
57:6b:99:ef:57:a4:14:61:1a:a5:fe:87:15:d9:d4:
02:8c:6b:c1:f3:33:26:20:35:36:30:d0:fe:75:9f:
8b:97:83:fb:85:5b:b5:cb:5f:fe:b3:6c:2d:6b:2f:
c8:cf:0f:4c:d3:79:6d:d5:90:2c:e2:b0:97:dd:79:
4d:a3:0a:29:cd:80:b6:80:b1:d8:3a:fb:e8:45:d3:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:79:DD:81:DF:DA:3A:B4:69:38:02:29:C9:9D:66:FD:3C:03:08
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:d2:bf:91:0a:91:f2:b6:43:4e:65:eb:24:5a:cf:b4:49:
79:54:c2:a4:69:4d:08:7f:21:11:8f:66:c8:be:ee:05:0c:86:
af:f3:8f:24:e8:7e:9d:14:7c:1a:dc:cf:c9:af:fc:31:47:59:
d6:9a:67:c7:09:3f:fc:87:d9:25:56:14:54:01:e4:f6:0c:0f:
6b:3e:56:53:99:15:09:10:b3:86:bf:58:42:49:1b:82:bf:85:
14:08:ba:3d:47:e6:92:aa:f6:38:7a:af:1b:ac:e1:f3:67:32:
5f:10:95:08:39:4d:2a:12:c4:fd:d1:8d:e2:77:17:af:76:8a:
36:32:a7:df:b6:73:23:3d:39:86:19:d8:ef:7b:4d:a5:68:58:
74:62:b8:ac:e8:23:a7:95:d6:c9:31:d9:70:e5:40:0c:c5:0e:
d6:74:f4:9b:20:ef:3e:4a:0b:bf:39:43:56:09:3b:af:9c:92:
01:6a:c6:1d:25:d9:97:d0:38:14:c0:ef:83:4c:fc:ef:6c:cf:
b8:ab:e0:ef:f5:fd:08:03:fb:fe:a5:95:f7:ec:61:b2:99:f1:
e4:1c:32:59:10:17:05:87:db:94:1f:18:74:22:0e:5e:d6:eb:
98:81:dd:33:cf:21:45:2f:d1:33:1f:76:37:85:ee:bb:e1:ec:
62:d3:a0:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEvTmXGWRkw1SnvzrMhxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTc4YmI1NDkzM2MxM2EzMDAzODcyMGJiNDM0MWY5ZmYy
YmVlM2UwHhcNMjUxMTExMDQwMDU4WhcNMjUxMTEyMDQwMDU4WjAzMTEwLwYDVQQD
Eyg4OGE0NzlkZDgxZGZkYTNhYjQ2OTM4MDIyOWM5OWQ2NmZkM2MwMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlCSMnRfwJru+Hv48Ol8fXob+/2m
rfIoXEvkEAKm+gkICRQ9dyNHG/bB+CenQ/ss3Gg7BFrccM/eKt9DHCAeSlYz0UID
cqmE6tHZGnlo4v28Tf/5sfXzPwgEEFxWLrC2QlezxNek5buw9j8vCKt3WWOnYkkL
KfY4QOk0f3qxqDms+CZlrNJ28pUZPYBEi5FnT0ScssIWuN+PdUmFQVKkCi+cTh/D
v9a0hCKOxa5Q5CtIFWJXa5nvV6QUYRql/ocV2dQCjGvB8zMmIDU2MND+dZ+Ll4P7
hVu1y1/+s2wtay/Izw9M03lt1ZAs4rCX3XlNowopzYC2gLHYOvvoRdOdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiked2B39o6tGk4AinJnWb9PAMIMB8GA1UdIwQY
MBaAFAoXi7VJM8E6MAOHILtDQfn/K+4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84Yjk0NTQtNGNhMS00NjJhLTg0ZTMt
MjkzYzRkODljNDMyLzEvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84Yjk0NTQtNGNhMS00NjJhLTg0ZTMtMjkzYzRkODljNDMy
LzEvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjnSv5EK
kfK2Q05l6yRaz7RJeVTCpGlNCH8hEY9myL7uBQyGr/OPJOh+nRR8GtzPya/8MUdZ
1ppnxwk//IfZJVYUVAHk9gwPaz5WU5kVCRCzhr9YQkkbgr+FFAi6PUfmkqr2OHqv
G6zh82cyXxCVCDlNKhLE/dGN4ncXr3aKNjKn37ZzIz05hhnY73tNpWhYdGK4rOgj
p5XWyTHZcOVADMUO1nT0myDvPkoLvzlDVgk7r5ySAWrGHSXZl9A4FMDvg0z872zP
uKvg7/X9CAP7/qWV9+xhspnx5BwyWRAXBYfblB8YdCIOXtbrmIHdM88hRS/RMx92
N4Xuu+HsYtOgJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:50 2025 by rpki-client