
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: DiQ1U2Fi2VAUHOUmWUBGp1KSZkdID312PGmQffBw1lU=
Subject key identifier: 1C:1A:A8:51:75:61:59:60:C4:52:FC:54:5E:8F:F8:64:30:D3:7F:6D
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 0198745099368CAEEE6716D2E626A1AD3549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 0E16
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: OlOBPUWAqpEgYHcgoZNbxRB7+2KZBFydE5wiHSiLiY4=)
2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:99:36:8c:ae:ee:67:16:d2:e6:26:a1:ad:35:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=1c1aa85175615960c452fc545e8ff86430d37f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:af:76:9a:61:17:57:84:10:4d:82:11:23:
40:d2:a7:a3:01:ce:d7:84:4e:b3:54:3a:33:e6:ef:
29:b9:9c:4f:38:3f:fb:53:63:04:1c:7e:0c:0b:91:
88:1f:0a:db:a0:34:70:fd:69:22:f9:3d:43:f3:07:
f2:6f:6e:35:5c:b0:95:d9:64:6a:a2:9d:e5:22:30:
6e:a5:61:89:9f:6a:29:f2:21:68:08:94:0d:81:53:
05:3f:c1:0b:80:ce:46:55:39:1c:ee:6c:42:f6:5c:
72:09:bd:36:4e:3e:3c:88:35:f3:1e:a8:aa:78:fb:
89:6a:74:cc:63:a2:a9:93:f4:3f:9d:5c:02:16:01:
e3:a1:5f:59:67:cc:12:79:1c:29:ee:ce:ec:93:d3:
11:f6:22:80:de:45:35:bc:da:46:eb:f5:c2:4c:d3:
31:3b:f4:07:30:9c:c5:e2:38:72:0c:a1:cb:e0:5b:
08:22:5f:d2:dd:be:40:7a:d4:b0:43:86:bc:54:2f:
78:bb:ce:47:8b:2d:ee:e6:6c:82:51:b5:38:d4:be:
e3:4f:2d:35:ef:c6:70:be:e9:23:44:3c:18:2d:a1:
d5:7e:b9:d5:1d:2c:90:fd:f2:26:6d:98:27:fa:58:
6f:05:0e:59:af:e1:2f:eb:70:aa:80:c2:3a:39:73:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:A8:51:75:61:59:60:C4:52:FC:54:5E:8F:F8:64:30:D3:7F:6D
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:68:b3:36:81:8b:0e:7c:b5:f3:0b:24:64:0c:53:16:bf:40:
1d:84:06:30:96:90:60:95:20:ee:51:38:52:71:12:73:e9:ff:
b2:fd:cd:6a:ae:53:13:87:ab:33:6c:a7:2a:c8:3a:15:bc:c4:
62:fb:93:cb:5f:10:8f:3d:00:a6:2b:eb:00:c8:03:2f:f7:70:
2a:41:9f:ed:7b:30:40:b0:c1:3a:c2:c1:c0:82:92:a3:b9:97:
ad:29:a9:fa:08:05:e4:20:38:92:2d:40:af:9f:71:f3:38:c1:
e8:38:7f:a6:4b:6e:92:2f:40:4b:54:7c:72:cc:b7:ca:b1:3c:
28:89:a8:fe:a9:a8:8b:63:89:42:32:95:ce:1e:26:9e:d3:3a:
16:72:6c:32:bc:46:40:db:c9:3b:c7:dd:45:e6:45:c7:2e:e7:
70:b1:3b:77:f7:98:06:9e:5e:80:d1:8e:9b:6e:20:03:13:30:
bf:4a:f3:f6:18:6d:c1:f2:aa:a4:dd:c0:a1:aa:7c:4f:13:13:
8e:b8:20:6c:af:2a:fa:33:38:ab:f3:20:50:37:44:dc:af:26:
73:75:8f:b8:1d:3d:8e:eb:15:7b:e1:b4:fd:a9:76:5c:2d:a2:
3a:9a:9e:58:6b:63:15:0b:66:ae:3e:77:76:55:dc:23:ef:b6:
28:73:2d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJk2jK7uZxbS5iahrTVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjUwODA0MDkwMTM1WhcNMjUwODA1MDkwMTM1WjAzMTEwLwYDVQQD
EygxYzFhYTg1MTc1NjE1OTYwYzQ1MmZjNTQ1ZThmZjg2NDMwZDM3ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kavdpphF1eEEE2CESNA0qejAc7X
hE6zVDoz5u8puZxPOD/7U2MEHH4MC5GIHwrboDRw/Wki+T1D8wfyb241XLCV2WRq
op3lIjBupWGJn2op8iFoCJQNgVMFP8ELgM5GVTkc7mxC9lxyCb02Tj48iDXzHqiq
ePuJanTMY6Kpk/Q/nVwCFgHjoV9ZZ8wSeRwp7s7sk9MR9iKA3kU1vNpG6/XCTNMx
O/QHMJzF4jhyDKHL4FsIIl/S3b5AetSwQ4a8VC94u85Hiy3u5myCUbU41L7jTy01
78ZwvukjRDwYLaHVfrnVHSyQ/fImbZgn+lhvBQ5Zr+Ev63CqgMI6OXNB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwaqFF1YVlgxFL8VF6P+GQw039tMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGizNoGL
Dny18wskZAxTFr9AHYQGMJaQYJUg7lE4UnESc+n/sv3Naq5TE4erM2ynKsg6FbzE
YvuTy18Qjz0ApivrAMgDL/dwKkGf7XswQLDBOsLBwIKSo7mXrSmp+ggF5CA4ki1A
r59x8zjB6Dh/pktuki9AS1R8csy3yrE8KImo/qmoi2OJQjKVzh4mntM6FnJsMrxG
QNvJO8fdReZFxy7ncLE7d/eYBp5egNGOm24gAxMwv0rz9hhtwfKqpN3Aoap8TxMT
jrggbK8q+jM4q/MgUDdE3K8mc3WPuB09jusVe+G0/al2XC2iOpqeWGtjFQtmrj53
dlXcI++2KHMtSQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:17 2025 by rpki-client