Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: F693QSnVflGgeOCbsoIsSCasbfbLX0o5bFinemHnkfw=
Subject key identifier: FB:77:AB:68:37:58:B2:F5:66:35:AF:14:1E:D4:D6:80:5D:AD:03:BB
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019749310DEB85C46B55ABFAABDA87AF470C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 12AA
Signing time: Sat 07 Jun 2025 07:00:40 +0000
Manifest this update: Sat 07 Jun 2025 07:00:40 +0000
Manifest next update: Sun 08 Jun 2025 07:00:40 +0000
Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: yeLItX5BWYDCjG2VRpC58sLS9PSPUIuzhJQIn6zaNH4=)
3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:0d:eb:85:c4:6b:55:ab:fa:ab:da:87:af:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jun 7 07:00:40 2025 GMT
Not After : Jun 8 07:00:40 2025 GMT
Subject: CN=fb77ab683758b2f56635af141ed4d6805dad03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:af:4d:2e:9d:f6:db:fd:3f:5c:6f:e3:3c:
03:98:96:07:b2:9e:5a:92:2e:27:a2:18:08:d3:8c:
e9:40:1a:4a:c5:e9:6e:71:03:83:4c:71:7f:ab:12:
86:64:ed:17:52:5f:2e:ca:ac:11:d8:ee:5b:b1:d8:
f3:4f:d9:16:8d:2a:e0:23:c6:47:2e:a4:18:80:65:
b2:d2:50:a3:2e:a0:6d:98:5e:c3:7c:98:42:55:1e:
36:2c:09:76:2a:38:41:12:db:5b:ea:77:31:ee:2f:
2b:dd:3d:ee:0f:3e:1f:6a:99:3a:b6:d3:d7:67:89:
c3:ba:51:a1:c7:3b:cd:c9:b1:05:81:d5:e2:9c:60:
d6:c5:bf:28:ef:13:32:56:2f:24:af:37:20:ea:d4:
35:f6:12:ea:62:63:2e:7b:22:79:3f:88:3e:26:a9:
9f:33:53:ea:e6:f8:9d:64:2f:fe:d5:7a:17:3b:c9:
9e:ff:74:da:cc:d9:e5:d0:61:21:63:14:42:8b:ac:
ef:89:ce:70:43:f8:06:3f:bb:e7:1c:35:b9:94:94:
10:5b:3f:e2:ac:c4:7a:a4:ce:aa:3e:0f:42:de:b2:
86:a4:b9:79:f8:f8:82:74:b1:76:db:45:e9:4c:4d:
e0:1a:84:d2:3f:37:ab:f1:67:8c:ac:fe:3c:69:b5:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:AB:68:37:58:B2:F5:66:35:AF:14:1E:D4:D6:80:5D:AD:03:BB
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:5e:45:b7:b7:5a:77:dc:4f:e7:b7:c2:78:57:8b:3a:b4:
b2:5a:8d:63:bc:01:92:56:f6:53:79:81:9b:1a:d1:93:12:b2:
c1:e6:ee:6f:68:f9:68:1e:24:79:af:bf:87:0c:26:9c:bf:3a:
e0:cb:3a:02:7e:95:4a:5a:d4:3c:79:80:30:f6:d1:a5:e7:41:
39:7e:31:5b:c9:c4:db:d9:35:f6:f8:32:54:e2:92:3a:9d:ae:
3f:44:b6:5b:8b:01:30:4b:4d:8e:47:f2:b1:33:66:e3:df:0c:
aa:5c:7e:01:89:ba:29:2f:86:71:6e:1c:cf:dd:91:71:ab:a1:
c6:64:6f:50:63:1a:35:eb:ae:0b:4c:e5:65:92:40:aa:a0:c5:
e1:c3:c6:7f:cc:04:34:0f:7c:0f:f2:38:17:60:6e:5e:e4:a3:
75:a1:b9:76:43:fb:6a:24:31:42:0c:0e:23:d3:6d:12:f9:2e:
1e:9b:f2:36:ec:2b:37:7a:a9:f3:e8:b7:70:fa:57:ed:07:5f:
6f:8b:de:81:58:af:71:d3:7e:d0:cd:0a:1b:d5:aa:da:7a:cd:
00:55:c5:0b:a8:ce:50:ad:88:4d:3e:ce:ee:6f:89:39:80:f3:
f7:88:c2:ed:1b:02:04:c8:c6:21:ba:24:57:9b:98:4c:b7:ae:
33:80:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:13 2025 by rpki-client