Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: 1kR3SNYX0Y5zhh5O9VxcMirDA2vuI30OR7AyzPHWI04=
Subject key identifier: 2B:11:08:9A:16:6A:6A:8C:8D:EA:D3:0E:97:65:DB:8E:3B:4B:B9:2B
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0198936D33538A30F0A30F748BC99EA68FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 10:01:03 +0000
Manifest this update: Sun 10 Aug 2025 10:01:03 +0000
Manifest next update: Mon 11 Aug 2025 10:01:03 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: BJiBhV21cgxMSZivLerLGtsntgvrU3s5q4Lzgxmai4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:33:53:8a:30:f0:a3:0f:74:8b:c9:9e:a6:8f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Aug 10 10:01:03 2025 GMT
Not After : Aug 11 10:01:03 2025 GMT
Subject: CN=2b11089a166a6a8c8dead30e9765db8e3b4bb92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:f1:99:62:0b:36:60:bb:84:d8:74:c7:3c:
b2:80:55:9d:4c:92:52:ee:04:9c:a8:49:f2:8f:06:
eb:b7:87:90:9b:6c:fa:02:f0:f9:73:69:5b:7b:68:
48:b4:f0:5e:99:7f:95:96:96:32:fa:f2:ed:e1:e8:
cf:b9:98:a8:4b:b9:29:91:81:70:c8:05:4f:d7:ef:
c0:53:8c:cb:08:4b:1f:5e:a5:ee:b4:b6:30:16:35:
20:5a:d1:d2:d3:d2:26:64:05:2a:55:90:bf:7f:2d:
90:cc:56:d5:56:ca:5b:48:95:89:47:cc:ec:c8:70:
90:fe:f0:76:ec:88:8d:7d:49:09:2a:d8:1c:f0:2f:
7d:fb:01:a5:ed:ea:b5:cd:8b:54:3b:2c:80:b9:77:
46:c1:41:8f:8c:90:b8:87:b3:99:31:03:a4:fd:6f:
25:f8:1f:a3:3c:ef:06:6d:33:0a:ab:6c:09:05:5f:
02:ba:32:18:81:71:a8:19:1a:98:25:62:3c:6a:8a:
68:69:ba:73:42:8c:4b:1d:20:8b:db:6e:de:53:20:
55:76:48:e8:70:37:b2:6e:8c:d7:ef:a1:27:a3:c0:
62:1d:5e:04:b0:0b:45:b1:a1:3d:1f:92:07:7c:5b:
c1:04:a8:4c:07:a5:10:54:22:b5:99:4b:14:40:b2:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:08:9A:16:6A:6A:8C:8D:EA:D3:0E:97:65:DB:8E:3B:4B:B9:2B
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:1a:26:95:54:57:3f:8f:8e:df:89:55:41:b7:0a:ed:34:
20:1f:47:cd:59:9d:3c:de:19:fd:79:ac:ce:3e:57:d0:38:18:
26:ae:23:0f:62:3c:08:c8:84:8f:33:b5:72:52:ad:55:62:95:
7c:01:26:78:08:0c:f5:34:62:64:8a:26:72:d6:c4:79:85:9d:
06:2d:64:a1:f5:b2:e6:5b:b7:f3:7c:14:17:d9:39:20:ee:c8:
06:8c:64:da:0c:08:5c:a5:77:1e:95:a7:6b:94:bd:e4:c5:39:
83:99:d8:ae:45:ef:6d:78:fc:90:6a:d4:de:12:e0:aa:a9:9e:
61:df:8a:82:ea:68:78:3c:05:97:5f:40:6b:d3:60:80:db:12:
d6:be:76:09:f4:8e:64:00:75:af:f6:bb:dc:40:32:05:8c:f3:
bc:78:a2:51:5a:28:90:3e:b7:c0:a6:f1:48:27:58:b9:4a:59:
5b:87:28:ee:cd:b6:39:fe:2e:2c:56:01:56:95:c8:43:38:b6:
1d:5e:18:1d:bd:64:ee:f3:41:e9:cb:9b:75:a7:e3:72:de:4b:
a2:58:d3:d8:0a:19:be:85:0a:d8:26:eb:33:84:70:00:ca:2b:
fa:cd:77:ab:6a:3c:2b:51:d4:a1:77:b6:36:2b:de:37:82:37:
ad:7f:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:36 2025 by rpki-client