Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: sOO1tXHTccyfKPsWLgOen7YFndkZvOr/f/bItj8ja+s=
Subject key identifier: 22:79:84:86:39:AA:75:52:DA:18:FB:C6:FD:76:19:8B:2B:27:5B:36
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 019A7149E07ECC95B0A20C28AEA18B850C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0E02
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: v6U3yHkwao5F+8jrd9oM61sgwHlwb4lANuBYLIXT53s=)
2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e0:7e:cc:95:b0:a2:0c:28:ae:a1:8b:85:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=2279848639aa7552da18fbc6fd76198b2b275b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:88:9f:63:87:79:07:e5:1d:7d:c8:3d:af:
80:ad:36:9e:2c:02:b5:63:11:6f:9c:96:e8:e0:c7:
e7:25:4a:ab:d4:89:fb:20:74:b3:e1:cc:fe:3b:08:
4c:13:76:8f:48:9c:cd:c2:1f:db:62:c8:7a:76:b4:
99:1f:00:0f:ff:ef:8d:6d:db:24:27:a9:6b:00:07:
8f:ea:96:4c:bc:03:d0:d5:19:d7:1c:28:f0:16:3e:
76:e6:c6:e7:0f:ab:ed:b5:86:81:37:73:af:ac:f2:
86:08:1b:2b:30:91:70:b4:1e:20:a1:a9:b3:97:d0:
ec:87:c7:43:d0:b4:45:2c:5c:b5:b9:e1:73:22:96:
4e:cd:2f:4b:43:ea:95:52:3e:36:4d:56:2e:56:8a:
56:16:5f:7b:7a:c3:49:f4:22:5e:7e:5e:6c:35:79:
a6:9b:b1:ca:6b:59:cb:3b:e9:d6:98:ef:30:1a:85:
fc:7b:d0:2b:39:f8:4f:85:8e:b9:f4:0c:96:e6:cd:
49:7c:ec:cf:ce:98:1e:9d:a5:78:d0:aa:8b:7e:6d:
f8:20:8e:6d:8d:dd:58:15:af:9b:d1:30:1c:1b:3f:
aa:8a:2d:7a:94:3a:72:c2:3c:e6:25:be:7a:0a:0c:
7e:08:2d:89:48:64:49:e2:b0:45:81:41:59:a3:9d:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:84:86:39:AA:75:52:DA:18:FB:C6:FD:76:19:8B:2B:27:5B:36
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:7e:bc:63:48:44:25:ec:a0:fe:ba:9a:b8:98:d5:b7:02:
99:f7:c1:17:07:2c:b6:02:f8:ae:22:a5:8c:9f:48:f4:46:ee:
69:c4:10:1f:af:10:69:a1:2b:33:e1:93:13:ee:2e:99:98:74:
75:8e:7b:b8:69:67:66:2c:7a:ba:64:56:11:97:51:3d:e0:84:
16:5b:89:89:4d:e9:d8:99:bf:2e:e7:03:8a:25:79:29:6c:2b:
da:02:29:c2:fc:e1:c2:ea:28:cb:96:dd:14:e0:39:51:09:4f:
f4:70:11:2e:e7:eb:f0:1d:80:fc:be:dc:4b:df:43:04:5a:d5:
73:25:5f:47:8c:0a:a9:91:4a:0d:28:1e:b8:33:a5:41:1e:a5:
2e:37:fa:61:1a:be:a8:c8:34:37:00:56:d2:1d:5e:a7:4d:58:
5c:1a:7f:72:c8:66:11:13:e5:4d:0b:16:53:27:2d:c9:45:c2:
5a:c7:6d:fd:df:c3:94:bf:01:75:07:20:aa:fb:5b:0a:11:0e:
37:c8:c7:2a:e2:32:2e:aa:35:0a:70:64:cc:a1:ce:56:9c:6e:
dd:6a:3a:40:7e:1a:6c:02:c0:4d:69:b7:1d:7b:85:60:45:47:
f4:88:e6:db:2c:fe:8b:23:0c:96:dd:cc:58:66:bc:15:bf:dd:
de:15:9a:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSeB+zJWwogworqGLhQw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMWE2YjNmNWVkNWZiNzRkMDM1MTIyMTY1MTNjNGM4MWVm
ZTFlNWMwHhcNMjUxMTExMDUwMDU4WhcNMjUxMTEyMDUwMDU4WjAzMTEwLwYDVQQD
EygyMjc5ODQ4NjM5YWE3NTUyZGExOGZiYzZmZDc2MTk4YjJiMjc1YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRaIn2OHeQflHX3IPa+ArTaeLAK1
YxFvnJbo4MfnJUqr1In7IHSz4cz+OwhME3aPSJzNwh/bYsh6drSZHwAP/++Nbdsk
J6lrAAeP6pZMvAPQ1RnXHCjwFj525sbnD6vttYaBN3OvrPKGCBsrMJFwtB4goamz
l9Dsh8dD0LRFLFy1ueFzIpZOzS9LQ+qVUj42TVYuVopWFl97esNJ9CJefl5sNXmm
m7HKa1nLO+nWmO8wGoX8e9ArOfhPhY659AyW5s1JfOzPzpgenaV40KqLfm34II5t
jd1YFa+b0TAcGz+qii16lDpywjzmJb56Cgx+CC2JSGRJ4rBFgUFZo53SuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ5hIY5qnVS2hj7xv12GYsrJ1s2MB8GA1UdIwQY
MBaAFHIaaz9e1ft00DUSIWUTxMge/h5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQt
ODBjMzFkYjIwYWM1LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQtODBjMzFkYjIwYWM1
LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEh+vGNI
RCXsoP66mriY1bcCmffBFwcstgL4riKljJ9I9EbuacQQH68QaaErM+GTE+4umZh0
dY57uGlnZix6umRWEZdRPeCEFluJiU3p2Jm/LucDiiV5KWwr2gIpwvzhwuooy5bd
FOA5UQlP9HARLufr8B2A/L7cS99DBFrVcyVfR4wKqZFKDSgeuDOlQR6lLjf6YRq+
qMg0NwBW0h1ep01YXBp/cshmERPlTQsWUyctyUXCWsdt/d/DlL8BdQcgqvtbChEO
N8jHKuIyLqo1CnBkzKHOVpxu3Wo6QH4abALATWm3HXuFYEVH9Ijm2yz+iyMMlt3M
WGa8Fb/d3hWaRA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:51 2025 by rpki-client