Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: /NUcsMfdWJuIxQTRqNyUgA0EO5H+HfwNrMibQX9YlxM=
Subject key identifier: D4:43:38:78:0A:C3:3C:DA:60:A9:FD:5E:5F:4D:4B:38:7E:FD:C2:53
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01974B1F326A2F8016F5A38E548F85A35EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 16:00:25 +0000
Manifest this update: Sat 07 Jun 2025 16:00:25 +0000
Manifest next update: Sun 08 Jun 2025 16:00:25 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 1JfozFs3fB5LHYWC3yvBS/i+O7BPRof9RvjKJdfE4P8=)
3: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (hash: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:32:6a:2f:80:16:f5:a3:8e:54:8f:85:a3:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jun 7 16:00:25 2025 GMT
Not After : Jun 8 16:00:25 2025 GMT
Subject: CN=d44338780ac33cda60a9fd5e5f4d4b387efdc253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:a0:ee:26:c2:26:d0:f1:55:0b:61:b4:24:
b4:f7:9e:8e:3e:b4:81:ae:0f:f0:70:4f:bf:2e:7f:
71:42:d0:19:31:e1:41:38:9b:83:ce:35:27:a2:ef:
e3:31:46:f1:31:3d:f1:67:46:07:f8:21:6e:98:d4:
b0:98:9b:0c:92:6d:a9:ea:a7:10:14:74:51:7f:f6:
4a:66:58:88:18:4d:48:e4:62:f2:6a:54:4c:59:3b:
f8:ff:5b:db:1d:af:59:da:ba:80:dc:e0:23:ae:43:
ad:64:97:82:8d:02:1b:0a:73:01:82:a2:85:33:23:
b2:fc:37:0f:92:dc:89:b2:f6:15:ed:bf:9f:14:55:
e8:54:67:3f:e6:97:f1:6f:ae:bd:15:25:e7:7f:8a:
1e:25:ab:1e:9c:1b:96:99:c2:1b:34:36:83:83:ce:
cf:0b:98:c0:a0:2b:38:f8:8d:f9:74:7f:af:dc:26:
6e:18:b7:59:85:ea:7c:36:7a:37:5b:68:73:26:69:
61:d0:89:fd:fa:31:52:d6:60:ee:de:9e:42:8b:5e:
fe:c5:99:93:a2:95:de:d5:1d:36:47:95:30:41:bc:
38:86:ac:91:00:b5:24:b8:c6:ea:ef:f3:ba:58:1e:
f6:15:13:34:8f:0e:9b:41:f1:ad:01:b7:97:9d:af:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:38:78:0A:C3:3C:DA:60:A9:FD:5E:5F:4D:4B:38:7E:FD:C2:53
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:14:52:27:1b:41:30:d5:c8:64:de:af:1a:5f:3b:fa:fc:
c0:c8:f4:06:eb:ee:80:74:a8:bf:89:4c:9f:05:fc:9a:5d:d2:
ec:8d:22:87:ec:bb:e7:2b:dd:d6:97:a0:cb:01:dd:d2:8b:78:
15:35:4b:db:6a:d5:67:cc:cc:86:fc:dc:22:1d:96:89:f4:85:
99:99:90:6d:02:29:1b:b7:43:5a:b2:2b:1e:54:a7:3b:e1:b3:
6d:f3:ea:f5:d6:44:3c:1b:da:28:c3:00:f3:59:9b:18:61:fc:
58:78:10:0a:21:7f:71:3a:62:65:07:e7:cc:cf:b7:4d:68:f5:
90:5b:4d:a1:01:f8:6d:88:2f:00:37:9b:20:d8:4b:5d:a6:7f:
09:3d:49:bf:9c:74:38:28:39:b2:ce:91:48:ab:fd:8c:b9:91:
53:38:44:75:2f:01:31:9d:17:0e:a2:4c:34:2c:ae:74:ff:41:
62:2f:a6:e3:3e:48:39:ca:7f:73:70:42:3b:e4:64:32:03:17:
a1:70:10:57:2b:70:c3:01:7e:a2:0d:78:c5:b8:61:2a:9c:ac:
ae:a5:ca:d9:22:25:da:58:ba:98:59:19:5e:8c:45:62:23:76:
f9:2e:c2:65:05:6b:7a:e9:d7:10:47:ee:89:60:50:28:6d:ce:
d4:e9:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:05 2025 by rpki-client