Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: RkFgZyBS/FltBUDAOEwN5VHXXPGa1uBdY6l86PdfPIc=
Subject key identifier: F8:E5:6D:50:67:5F:6D:D1:89:73:BD:47:A0:26:D3:7C:22:98:08:C5
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 0199179ABDE7B9D1608AB96740E87E2B1797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0D4F
Signing time: Fri 05 Sep 2025 02:00:41 +0000
Manifest this update: Fri 05 Sep 2025 02:00:41 +0000
Manifest next update: Sat 06 Sep 2025 02:00:41 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: k3kGZ0FvfU8djUG3BCYHllH9wx169D7YT1M9r9Ib/hM=)
2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:bd:e7:b9:d1:60:8a:b9:67:40:e8:7e:2b:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Sep 5 02:00:41 2025 GMT
Not After : Sep 6 02:00:41 2025 GMT
Subject: CN=f8e56d50675f6dd18973bd47a026d37c229808c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:b3:1f:c8:4d:77:3d:1d:97:70:2d:a6:8a:
e8:e6:51:21:a4:41:de:e7:2e:10:b3:0c:26:37:52:
d3:92:ee:00:53:b2:90:48:62:51:11:27:e1:aa:19:
a0:a8:6f:fe:55:66:0e:34:e4:c6:b7:84:ac:0f:9d:
9d:44:cc:2c:68:0d:ec:11:35:75:8e:9d:46:35:70:
0c:bc:c6:aa:8e:0d:e1:82:fe:ab:fa:81:50:3e:58:
16:b9:ae:a3:7d:ef:da:2a:36:8e:35:ec:63:d8:6a:
27:a1:73:76:a3:80:8c:27:30:25:1c:96:5a:e2:91:
89:e0:82:be:7d:44:47:33:b9:1f:65:46:f7:55:84:
d1:1d:6d:24:50:9c:bf:65:87:b6:f3:be:a3:c9:8b:
a7:f0:e4:14:5e:fa:d4:a5:bc:34:45:45:37:4f:5e:
6b:af:a0:55:36:90:9c:44:43:ca:33:35:90:79:44:
1a:e8:e1:2b:06:1a:4e:57:17:33:6a:7f:77:fe:17:
82:12:78:c7:4c:56:b4:1c:93:e1:17:ea:a2:c7:8f:
1e:5b:21:15:2e:41:87:ca:3c:f5:82:c0:5c:9e:b0:
4c:f9:60:7d:87:cb:0c:3d:92:42:78:10:62:ef:e6:
98:60:b3:45:e3:5f:c1:ca:77:65:2f:78:be:fe:1e:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:6D:50:67:5F:6D:D1:89:73:BD:47:A0:26:D3:7C:22:98:08:C5
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:85:df:2b:b8:2b:9f:91:c3:ee:98:8e:9e:05:3a:43:4f:
9b:b1:30:4e:3b:0f:fa:bc:95:ab:3e:d6:ab:61:b3:36:55:33:
bc:88:15:b4:63:9c:3e:83:10:b4:e1:fc:8f:62:72:c0:32:26:
83:6c:a2:38:e1:ca:54:30:56:2f:f6:f5:c5:af:04:6a:2b:92:
e0:fe:73:61:2f:70:d9:22:c3:69:12:18:fa:c2:46:42:36:b0:
45:90:8d:49:b5:e1:ec:43:74:08:37:ad:b9:7a:42:c6:b4:d1:
63:65:ee:03:20:ef:7d:7a:a6:86:32:34:42:d9:9c:27:cc:48:
ff:e5:46:1a:90:f7:5e:90:fd:7b:e0:be:16:e9:63:1a:ed:fc:
fb:79:bf:56:ff:ef:60:c1:0f:f6:fe:9d:f4:85:6d:d9:3e:89:
bd:7a:f0:42:17:3a:a8:5d:4b:9f:20:5a:7d:42:3b:08:ef:0c:
93:d4:b5:a8:a9:90:d3:a3:70:2a:54:e4:67:c9:69:72:38:a2:
a8:9d:c1:da:e0:0f:c6:bc:c6:dc:fd:a2:33:c7:0b:38:69:1e:
e3:1e:9d:9e:a3:9f:2a:7e:fc:8e:dd:49:e9:9b:96:89:51:e7:
85:a1:98:d9:f6:db:b4:47:a4:2d:1f:2d:8d:b2:86:29:79:59:
af:6c:d4:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmr3nudFgirlnQOh+KxeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMWE2YjNmNWVkNWZiNzRkMDM1MTIyMTY1MTNjNGM4MWVm
ZTFlNWMwHhcNMjUwOTA1MDIwMDQxWhcNMjUwOTA2MDIwMDQxWjAzMTEwLwYDVQQD
EyhmOGU1NmQ1MDY3NWY2ZGQxODk3M2JkNDdhMDI2ZDM3YzIyOTgwOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfmzH8hNdz0dl3Atporo5lEhpEHe
5y4QswwmN1LTku4AU7KQSGJRESfhqhmgqG/+VWYONOTGt4SsD52dRMwsaA3sETV1
jp1GNXAMvMaqjg3hgv6r+oFQPlgWua6jfe/aKjaONexj2GonoXN2o4CMJzAlHJZa
4pGJ4IK+fURHM7kfZUb3VYTRHW0kUJy/ZYe2876jyYun8OQUXvrUpbw0RUU3T15r
r6BVNpCcREPKMzWQeUQa6OErBhpOVxczan93/heCEnjHTFa0HJPhF+qix48eWyEV
LkGHyjz1gsBcnrBM+WB9h8sMPZJCeBBi7+aYYLNF41/ByndlL3i+/h6TbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjlbVBnX23RiXO9R6Am03wimAjFMB8GA1UdIwQY
MBaAFHIaaz9e1ft00DUSIWUTxMge/h5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQt
ODBjMzFkYjIwYWM1LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQtODBjMzFkYjIwYWM1
LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkWF3yu4
K5+Rw+6Yjp4FOkNPm7EwTjsP+ryVqz7Wq2GzNlUzvIgVtGOcPoMQtOH8j2JywDIm
g2yiOOHKVDBWL/b1xa8EaiuS4P5zYS9w2SLDaRIY+sJGQjawRZCNSbXh7EN0CDet
uXpCxrTRY2XuAyDvfXqmhjI0QtmcJ8xI/+VGGpD3XpD9e+C+FuljGu38+3m/Vv/v
YMEP9v6d9IVt2T6JvXrwQhc6qF1LnyBafUI7CO8Mk9S1qKmQ06NwKlTkZ8lpcjii
qJ3B2uAPxrzG3P2iM8cLOGke4x6dnqOfKn78jt1J6ZuWiVHnhaGY2fbbtEekLR8t
jbKGKXlZr2zUKg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:09 2025 by rpki-client