Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: 1bGnDiiDq3JrEF6XnAd/CILQnAzhqvorvLXO1ig9mPI=
Subject key identifier: D3:3E:B7:0B:FB:A4:AA:FF:98:AD:D1:1E:D3:D9:E7:F2:34:99:37:7D
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 01987E9CFFB120F120F14E2A8F2426D62282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 09:01:14 +0000
Manifest this update: Wed 06 Aug 2025 09:01:14 +0000
Manifest next update: Thu 07 Aug 2025 09:01:14 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: 41aa/BlQXRzu/Eo+rEnTh3I3vCA61AJ87tukIEHxELY=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:ff:b1:20:f1:20:f1:4e:2a:8f:24:26:d6:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Aug 6 09:01:14 2025 GMT
Not After : Aug 7 09:01:14 2025 GMT
Subject: CN=d33eb70bfba4aaff98add11ed3d9e7f23499377d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:c3:67:bd:c0:9e:c4:4d:5b:68:d2:ce:18:
6c:a3:78:25:82:98:5e:80:58:4c:8b:2e:db:0d:7b:
7c:37:dd:f9:16:fa:51:87:92:17:0c:27:3d:3b:21:
34:67:56:85:68:cf:83:50:46:9c:44:57:bc:4e:d5:
99:56:9c:5d:e5:cf:37:3a:d4:e8:ca:6a:55:1b:18:
ba:51:dc:cf:fe:c2:9b:73:aa:4d:34:af:27:e8:fb:
61:77:07:e9:dc:41:a2:8b:7a:ce:e6:f1:2f:94:13:
b4:63:77:2a:e6:9b:5e:c1:01:29:65:9d:82:ab:58:
e1:a3:83:ea:d3:f8:69:92:f2:8b:42:f6:cf:16:28:
ca:df:d0:27:4f:26:e8:d4:4f:e5:79:57:b3:ec:78:
38:36:6d:6e:da:47:6b:01:f9:65:9b:7f:e2:f5:5d:
b3:3a:2d:72:84:52:51:7e:b7:54:c4:bc:09:27:8d:
92:61:a0:a3:bb:dd:4c:1f:1b:40:e6:45:6a:51:72:
fb:6a:eb:92:be:3d:15:9c:4c:dd:00:d6:50:51:6f:
a1:2a:07:93:1c:ba:b9:4d:a8:e0:e9:10:9d:eb:77:
ad:08:34:50:d5:62:b1:40:6f:f7:67:b8:36:62:63:
2c:ab:95:ee:df:08:95:52:fe:48:16:7e:5e:e2:ad:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:B7:0B:FB:A4:AA:FF:98:AD:D1:1E:D3:D9:E7:F2:34:99:37:7D
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:ef:b1:bd:c3:9d:36:2a:d9:72:07:12:43:20:63:fe:f2:
c3:c9:f8:1d:20:af:96:ec:e6:17:eb:a8:af:2b:5d:6d:c1:9f:
3b:b2:8d:53:c1:2c:48:65:8b:62:50:da:dd:b9:f6:d2:0c:d8:
77:54:e4:d2:da:e4:39:ca:54:45:3e:3a:db:db:9a:5e:76:47:
f1:51:54:9d:52:e5:c8:b5:5c:a1:e3:d9:7b:38:37:89:95:03:
b2:c1:64:f1:a2:db:92:7b:17:4b:e5:54:b2:73:17:bc:da:cb:
a0:d3:38:b5:4b:63:a4:3b:21:47:3b:ab:78:82:4b:f3:b1:c1:
c7:6a:d1:b6:41:6b:9e:f2:08:6d:05:6c:b7:17:bb:a3:54:49:
81:42:b0:7f:fc:60:9b:31:df:5b:b2:12:84:f6:d5:de:8e:96:
d1:ad:e5:d0:5b:2e:db:f1:93:f1:8f:28:90:0a:7e:7a:ed:1f:
2f:ee:33:42:32:49:2f:2a:91:ce:24:31:ce:8f:c4:a1:71:de:
01:14:48:e5:19:92:ad:01:9f:14:f5:14:d6:cc:15:40:2a:05:
f0:69:09:df:6c:5a:b0:23:f1:63:eb:83:8c:d8:b7:af:c0:61:
c3:39:a7:6e:4d:3a:7c:f0:f3:a1:14:fe:ab:f1:0a:da:5d:ab:
bc:56:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:35:12 2025 by rpki-client