Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: qgRAl6rWzKjkWGEIpBO7e4S0HdYbQiNOfKQHVrOdh5g=
Subject key identifier: 2D:5A:41:6B:89:6D:60:C8:99:5B:5A:CF:5F:C4:9F:FD:4C:0C:77:C3
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019937953578BD7371B28A0AFB1F0B5FE596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 13AA
Signing time: Thu 11 Sep 2025 07:02:29 +0000
Manifest this update: Thu 11 Sep 2025 07:02:29 +0000
Manifest next update: Fri 12 Sep 2025 07:02:29 +0000
Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: qhtxHnFCygNOg+xCkeCNAwKHoXnAU8rlE+e3OnpGE7A=)
3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:95:35:78:bd:73:71:b2:8a:0a:fb:1f:0b:5f:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Sep 11 07:02:29 2025 GMT
Not After : Sep 12 07:02:29 2025 GMT
Subject: CN=2d5a416b896d60c8995b5acf5fc49ffd4c0c77c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:e5:44:f6:d7:3d:17:22:7e:8b:69:da:ae:
e5:12:f5:bd:57:09:24:4a:40:72:fd:d8:0c:14:ef:
1f:fe:15:c4:7b:3a:34:d7:2d:3c:d0:46:22:66:b2:
c2:4d:fd:5d:a4:90:4b:3d:5a:0b:0d:09:5b:a1:5f:
54:d7:d9:8c:72:db:db:49:38:d3:c8:45:77:22:ed:
18:39:e7:92:2e:af:5c:e6:06:93:df:36:b0:82:ee:
39:da:f6:99:f3:d0:29:93:bf:fb:41:a2:65:55:1e:
29:57:ff:42:72:95:f9:77:d4:07:9d:73:93:8f:0b:
cc:5e:17:53:73:45:34:ab:e2:86:9a:00:36:e0:35:
8b:0d:ab:30:c3:c2:c2:09:03:00:d8:b1:b2:03:dc:
f0:ae:93:43:6a:17:bc:40:aa:de:19:0c:13:b6:44:
28:52:d7:ca:5f:d9:ae:e6:16:75:45:b1:fe:92:da:
c8:36:64:74:55:8f:2e:2f:6c:6a:51:a8:07:d0:7b:
29:18:ef:7e:80:1c:f4:80:81:43:6c:1f:7f:3e:7a:
53:36:29:ee:5e:6c:15:b6:ed:5c:90:4f:8b:22:7d:
9b:75:41:5a:95:80:d9:d5:54:50:22:d2:af:cc:ea:
35:fe:7e:15:4d:b3:2c:3a:6e:77:c0:2a:7b:25:d0:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:41:6B:89:6D:60:C8:99:5B:5A:CF:5F:C4:9F:FD:4C:0C:77:C3
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5f:7d:36:48:6a:a7:3f:b3:5f:2d:07:58:6d:63:a5:11:3c:
6c:30:fc:0c:e6:ab:bf:dd:db:52:2d:f4:07:c7:d1:42:dd:77:
f6:f7:c9:49:e2:13:e2:8c:92:25:4f:54:b9:8f:56:dd:51:e3:
9e:2b:9d:9b:8d:f1:08:92:b7:72:75:cc:3e:60:7f:3f:1b:b5:
5f:cc:9c:80:5e:b2:76:94:f2:61:6c:37:98:0c:68:9b:12:54:
cb:81:0e:7d:49:55:cb:fd:1f:a5:7e:3e:07:a7:7d:f1:65:64:
3b:0c:e8:1b:c0:cd:be:23:97:00:db:60:e9:40:db:47:07:52:
7d:fe:0c:46:31:6a:48:57:8e:b0:fd:1f:b8:4a:b9:ed:cf:cc:
1e:40:d7:6e:64:d0:ff:63:3e:3e:78:a8:6c:64:38:98:dd:1b:
7b:e6:1c:d4:6c:c8:d6:91:18:17:8a:50:bb:f2:68:7f:16:5a:
3b:9c:8c:7e:d4:44:43:38:41:1d:e0:06:07:f0:5b:dc:70:08:
19:9d:b3:d8:bc:c2:ee:86:a1:2b:0f:10:29:5d:25:6f:ab:5a:
c8:0c:65:6b:90:2e:61:92:8e:7f:8a:a2:95:15:98:07:f6:8c:
5e:0a:b7:a8:f0:66:14:23:ee:84:08:b7:9b:20:24:f4:c6:28:
1c:b2:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:23:31 2025 by rpki-client