Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: BbaB1DVD/RYgxsVgZADvXc9vmg85Rfhh4NofHZBm6CU=
Subject key identifier: AF:AE:90:D8:05:8E:22:06:30:21:F3:C1:36:41:27:60:29:0E:0B:CC
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01976E876D5B8232352DA3B67F30C02D7B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0FC5
Signing time: Sat 14 Jun 2025 13:00:58 +0000
Manifest this update: Sat 14 Jun 2025 13:00:58 +0000
Manifest next update: Sun 15 Jun 2025 13:00:58 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: mOlkHviVwTx8UOTximG26UN4yAEJhKj5NS70ZDsVRO0=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:6d:5b:82:32:35:2d:a3:b6:7f:30:c0:2d:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jun 14 13:00:58 2025 GMT
Not After : Jun 15 13:00:58 2025 GMT
Subject: CN=afae90d8058e22063021f3c136412760290e0bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:13:42:10:1d:04:9c:1f:a5:da:28:4e:54:
58:b7:eb:07:fa:c5:5f:e6:74:34:ab:6d:23:4d:42:
19:94:29:1b:1f:9a:2c:d3:bf:0e:00:0a:f0:fe:ee:
cb:32:86:36:a7:94:97:ed:10:66:6e:07:70:68:34:
33:bc:cd:1b:b0:cb:a4:83:bb:b1:70:30:e3:7e:ee:
dc:88:18:90:05:81:6e:6c:5f:fb:c0:8a:ea:ab:f4:
19:5d:c2:95:d9:89:e3:5b:7e:f5:22:f3:67:1a:87:
1e:f4:23:23:cd:37:37:1e:9b:61:5f:31:05:80:92:
b4:20:34:89:1b:a9:e0:a2:94:f7:ea:07:7c:a8:ea:
16:23:d5:ea:e6:f4:35:4e:be:ff:61:66:80:09:be:
bc:96:91:e2:84:b4:44:3a:ee:0c:0b:9b:ca:ae:cb:
cf:56:1f:c5:e3:a6:a7:33:92:15:6b:09:33:38:92:
47:99:90:d0:66:2c:59:57:71:2c:41:61:8d:25:eb:
06:f9:4c:ad:68:04:be:5c:71:60:c4:eb:b5:79:a4:
a2:e6:fb:7f:c7:c7:0b:68:bd:13:61:5d:d2:27:d8:
0c:2c:5a:82:f7:77:ab:90:4b:bf:3a:8f:47:f5:ae:
43:81:b7:1f:8d:88:7a:e4:a5:59:1a:62:ca:1c:46:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:90:D8:05:8E:22:06:30:21:F3:C1:36:41:27:60:29:0E:0B:CC
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cb:a4:ba:a5:fd:7e:df:ab:98:64:ff:15:97:d4:7e:8c:68:
94:a7:8a:d6:39:c7:75:cf:1f:c0:1f:93:90:6b:58:e6:2b:31:
fb:e3:64:b3:b3:48:1d:14:53:89:f0:55:a8:a5:4b:fd:01:48:
ce:de:28:45:9e:3e:42:34:87:d6:a3:69:63:28:91:19:89:5a:
e4:6f:0c:c7:36:87:f6:71:2d:71:f7:21:ed:37:1d:09:0e:8a:
ef:c1:ea:c9:b6:ba:70:06:c1:52:48:9f:69:dd:ab:bc:13:57:
10:f5:5d:94:f0:1c:1d:e1:ec:7f:86:5d:79:eb:dd:46:6f:53:
37:41:2d:28:6d:3a:dc:07:b4:27:78:c6:2f:59:26:86:6a:90:
a3:34:a9:b4:ef:00:6f:de:30:9e:26:13:be:9f:42:aa:ee:55:
dc:e7:12:a0:38:1f:d0:0b:84:c3:54:6c:6c:84:1b:34:02:01:
10:09:9d:0a:2c:b7:40:9a:af:b3:76:7a:56:ba:86:e8:ab:53:
d1:6b:c2:fa:ce:5d:b8:1b:40:47:4b:08:ba:65:b6:32:97:2f:
e7:cf:fb:98:8e:5d:47:b3:a3:60:5b:15:59:47:25:f1:d0:e1:
25:3c:77:2e:87:65:05:78:3c:e9:b1:8c:5e:be:e5:b6:38:fa:
36:19:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:18 2025 by rpki-client