Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: JQSjgeI1EPhjGs1c4VzbTr9oJcbQ004BHE3XDml0BJo=
Subject key identifier: 9D:86:5C:E5:D0:0D:B6:2F:E8:7D:4A:1B:6C:06:19:E1:19:EF:F2:30
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019680593CB4F5F809F798ABD0EA4524DB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 07:00:53 +0000
Manifest this update: Tue 29 Apr 2025 07:00:53 +0000
Manifest next update: Wed 30 Apr 2025 07:00:53 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: qi+W3s/jyzzeyNg2TMFbL3mDcLyXlE8CCUtvp21hGSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:3c:b4:f5:f8:09:f7:98:ab:d0:ea:45:24:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Apr 29 07:00:53 2025 GMT
Not After : Apr 30 07:00:53 2025 GMT
Subject: CN=9d865ce5d00db62fe87d4a1b6c0619e119eff230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:f6:e4:e6:8a:0d:71:67:d6:64:a3:a7:50:
52:b8:c5:82:59:6d:37:cf:39:c5:3e:a6:46:ff:46:
ed:9f:6e:f1:da:45:c5:64:f3:10:94:3f:9a:2e:a2:
45:6d:3a:df:ba:da:11:10:d6:40:77:bc:9b:3a:83:
db:8c:aa:51:87:87:3a:bc:07:2a:31:5f:df:71:e7:
2a:79:c0:6d:d7:75:6f:c2:4a:c0:8b:c1:f6:fd:f5:
8b:7d:0d:93:cb:1a:70:45:12:b0:36:51:16:62:09:
72:2e:05:ff:50:13:6b:5e:97:89:0a:a7:f4:74:25:
e1:11:eb:13:35:f0:40:e4:8d:c2:4f:28:81:61:9b:
fa:50:38:18:bc:c3:f1:2f:89:2c:3d:7e:2d:f3:b9:
b9:2e:5e:84:98:eb:85:2c:2e:53:c7:ef:2b:e1:05:
0e:5c:b9:c1:62:a2:28:e1:26:d5:85:90:48:de:ae:
bc:e2:5d:6e:94:95:aa:9d:24:1b:62:82:11:b3:30:
99:bf:b9:53:48:f6:46:33:f7:e3:62:4b:d1:ca:79:
f5:aa:ff:4d:de:c8:9d:59:a9:01:50:d0:f5:06:15:
82:7b:a7:fd:9a:bc:d4:56:2f:b8:c1:2f:e4:b5:71:
60:57:56:e2:d2:64:ce:e8:c3:8c:44:06:3f:56:17:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:5C:E5:D0:0D:B6:2F:E8:7D:4A:1B:6C:06:19:E1:19:EF:F2:30
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:db:08:ff:fa:00:0d:52:7f:a7:c6:fe:cc:5f:a2:e1:8b:9c:
7a:2a:e1:8d:d8:e6:ae:5f:0a:da:8c:ae:c0:2d:81:f0:9f:10:
88:2f:6d:89:d8:e2:11:22:28:30:ea:dd:66:05:18:46:c9:4c:
81:e5:31:8b:d0:b0:57:32:85:be:a9:87:99:66:2b:01:9d:18:
93:47:8e:e7:de:1c:d6:ad:1c:a6:f4:4b:0a:90:e5:9c:f3:a8:
c3:e5:cc:29:ab:1b:84:d6:17:91:85:a5:a7:a4:bf:86:ae:86:
20:ae:0c:61:fe:3c:33:9f:5c:98:27:e0:f6:95:6b:39:50:4b:
25:4d:ce:c1:0f:64:cf:46:8b:87:cc:95:a0:33:a4:28:78:c2:
34:2e:2f:88:e0:6c:7c:3e:25:6b:eb:63:4d:1e:ef:af:72:1c:
85:5f:44:6d:c3:c7:ec:21:eb:ae:fc:96:3e:4b:7a:14:9b:ae:
b8:0f:d1:1c:dd:23:92:6b:5c:07:62:b1:0d:ae:87:e5:78:de:
ab:53:82:c9:22:89:86:e2:88:f7:51:04:27:68:19:c0:2e:2b:
9b:da:dd:f6:8c:df:04:c5:6c:21:f9:e4:68:e3:3a:67:e2:8b:
82:70:27:90:68:86:2a:63:bc:d2:15:59:2b:87:fa:c3:54:99:
24:65:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:41 2025 by rpki-client