
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: j/fC8rmHvE9Y6xEtZrpAPNvthGL/XLSqtGkSw5cylf4=
Subject key identifier: AA:31:93:96:32:89:51:9E:0D:3D:01:BA:17:ED:92:8F:9C:92:7D:48
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 0197741B9C616ADF16466577F66BD8A32E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 15:00:55 +0000
Manifest this update: Sun 15 Jun 2025 15:00:55 +0000
Manifest next update: Mon 16 Jun 2025 15:00:55 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: lT5TKFQJCRAzV3InQb/W8eNdO47jps/GpGJ32Ulo2Vw=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:9c:61:6a:df:16:46:65:77:f6:6b:d8:a3:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jun 15 15:00:55 2025 GMT
Not After : Jun 16 15:00:55 2025 GMT
Subject: CN=aa3193963289519e0d3d01ba17ed928f9c927d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:43:d9:e3:a6:c5:0f:35:8d:2b:cd:cb:6c:
45:45:86:dd:b4:c8:74:aa:c9:f7:86:c0:d1:6f:97:
95:f2:a3:20:e5:84:3f:ff:4c:83:b6:7e:04:1a:3b:
c6:a7:7d:03:ef:03:e3:46:62:26:60:03:ce:f7:9e:
04:b2:6b:5d:c6:4b:98:a7:42:0f:9a:aa:01:f6:3e:
2f:17:55:d9:c4:81:f3:55:9f:38:3b:1d:a7:6c:c1:
23:10:9b:fd:86:12:12:0b:3e:f6:d9:39:68:a3:73:
a9:45:f2:a9:b2:b4:42:06:3b:5f:92:84:8d:b4:de:
73:d3:d2:49:b3:18:47:3a:35:5c:d1:0b:08:2f:7d:
20:43:70:81:27:f2:e5:d2:87:9a:e7:f0:bd:99:5f:
10:5e:20:18:5b:52:2b:3c:1a:06:6f:84:8a:ab:4b:
03:75:5a:d9:5d:81:6d:e0:35:da:d0:5a:3d:d2:d5:
7b:6a:e5:cb:8e:d6:68:66:55:b5:54:6e:30:af:80:
95:a4:49:51:d2:73:f4:07:28:38:4b:9f:1c:8a:16:
9d:07:3c:51:4e:cf:84:34:6b:65:83:c7:33:3e:39:
29:54:52:c9:d8:76:2e:37:bb:03:f0:10:2c:fb:eb:
9a:65:01:fd:14:19:60:09:ca:ca:2a:d2:6a:65:05:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:93:96:32:89:51:9E:0D:3D:01:BA:17:ED:92:8F:9C:92:7D:48
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:04:31:72:0d:43:66:fd:54:42:af:ab:16:bc:6a:3b:84:
b9:81:f7:af:b1:79:e9:af:dc:e7:10:eb:23:eb:fc:3d:54:ca:
b5:9a:bb:1a:cd:02:45:7c:0b:77:53:f3:69:5a:7b:06:09:a4:
39:7b:2f:9a:0a:8b:2c:6b:74:d9:cf:51:c9:7a:c1:6f:f7:1e:
db:b2:cb:95:72:3e:75:a1:cb:9c:ea:08:b8:77:52:c0:0e:7a:
27:b7:5a:3b:b9:f5:df:57:cc:6f:97:ac:ce:e9:83:26:7d:49:
d6:19:88:4a:c5:40:1a:03:67:05:90:77:af:d8:a1:8e:e7:fa:
31:36:d9:f8:01:d6:27:ff:d9:84:7b:0d:9e:a1:13:5c:a6:a1:
df:1e:a8:bf:0d:aa:bc:d6:88:08:29:36:ae:29:c5:53:11:f9:
2e:0e:46:84:37:ab:14:c1:96:af:5b:47:90:64:ff:db:93:3a:
1e:1b:c4:71:41:0b:b6:a9:01:51:a7:1a:ac:b2:7a:38:30:b0:
ec:64:61:38:fe:8b:f7:a0:83:3f:1b:dd:1b:99:14:4b:de:1d:
24:16:56:33:85:3d:b8:49:a9:13:fc:a8:20:f5:8a:f8:c7:48:
24:6d:d2:34:e2:53:7d:7a:92:ff:8f:8f:2e:1a:44:92:22:31:
a2:a7:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:28 2025 by rpki-client