Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: JWxhXIRd9ApurPACkXHV8KtG1iP2OXYsP7rVYvK63E4=
Subject key identifier: 68:8C:80:4F:32:6E:AF:58:19:BD:DA:BF:AA:D8:D0:CB:4E:84:11:ED
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019A5376130102D71326E4CDE385A11ACB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:38 +0000
Manifest this update: Wed 05 Nov 2025 10:00:38 +0000
Manifest next update: Thu 06 Nov 2025 10:00:38 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: odNGoznlcWN88051E6feUhFEfmIawNKl01Ae4VBJkWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:13:01:02:d7:13:26:e4:cd:e3:85:a1:1a:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Nov 5 10:00:38 2025 GMT
Not After : Nov 6 10:00:38 2025 GMT
Subject: CN=688c804f326eaf5819bddabfaad8d0cb4e8411ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:65:11:e9:12:7d:d5:91:69:e1:b8:76:47:
bb:da:12:0c:ea:38:5d:90:87:b1:fa:f3:fb:1d:61:
a5:ee:6d:ed:da:47:7d:04:00:65:c6:c0:9a:4d:45:
19:aa:3e:17:22:46:98:47:3d:f7:42:73:1a:e7:93:
db:73:c1:a6:dc:79:bb:b8:25:d7:3f:b4:8f:1a:48:
b0:f0:53:5d:32:74:4b:5e:a8:b3:fe:c4:4e:f2:9f:
79:0b:2f:64:d4:14:1f:e9:66:af:1e:fe:8e:fd:52:
3c:0e:f8:e5:59:44:c3:3a:7e:49:5c:c0:b7:a2:4f:
72:eb:fc:33:54:04:2c:03:87:04:31:7c:bd:66:e0:
97:12:8d:ba:3d:50:61:f2:87:bc:74:a2:f5:7f:09:
e5:28:04:6f:33:c4:dc:ae:da:c0:2f:d9:86:47:81:
ac:3b:71:b1:84:be:0d:55:f5:a2:ea:87:bf:7b:21:
17:15:16:8a:9e:a2:f1:67:9b:fc:c0:c6:57:c6:68:
f1:d7:d7:93:cb:34:cd:79:1e:fc:8b:ae:d0:46:ca:
be:d5:11:9d:db:73:0d:b7:0f:81:e0:c7:77:76:67:
be:97:b2:74:2e:0c:ab:9a:3f:f3:a6:21:62:cb:6b:
dd:ab:c8:e3:87:66:9c:9a:9d:7e:5a:cd:56:38:50:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:80:4F:32:6E:AF:58:19:BD:DA:BF:AA:D8:D0:CB:4E:84:11:ED
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c9:ee:53:a7:99:37:62:43:16:e5:c5:81:64:16:fa:b9:00:
1e:82:46:bf:93:0f:6f:e1:b5:b7:61:a7:d8:aa:30:34:0b:10:
e1:26:fe:bf:9a:9f:dd:db:e2:f5:c2:90:66:b5:58:5a:e8:e9:
b6:fa:d2:9d:05:7f:c1:58:f9:68:f5:33:3b:64:e4:07:ff:a9:
b2:fa:1d:84:51:a0:4e:b4:80:37:bc:fd:18:9d:b3:1b:1a:a4:
88:bd:66:3c:2b:aa:16:0a:dd:09:6e:74:f0:b4:bb:49:89:30:
e2:fb:f1:20:1e:6d:ac:1b:bb:9a:08:21:54:68:28:8e:b0:42:
a0:ac:f2:76:bd:ae:55:87:0b:c8:3f:a5:0a:19:63:92:9d:2c:
a8:12:10:15:ce:81:d0:98:b7:7a:3a:f4:f2:3e:66:a9:b1:b6:
36:3e:9b:d6:30:9a:04:b4:59:17:ac:91:8e:86:48:c5:6b:a2:
e8:29:b0:10:14:6c:af:48:9a:ef:cf:a5:fd:29:56:24:8a:e1:
84:fa:f5:1b:dc:68:19:96:89:c5:c7:bd:38:e9:c7:79:2e:3c:
58:bb:89:ec:ed:3f:1d:71:74:3c:cf:30:4d:da:a2:69:03:36:
c4:da:aa:2d:a4:c5:66:02:5c:5c:da:09:f7:ca:55:8c:a3:27:
63:cc:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:11 2025 by rpki-client