Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: QvQcruHXFbMOLa18OmGfEW7gMNpckGEuZE7oqMDnwLg=
Subject key identifier: 8C:E8:B9:C1:D5:7F:94:C0:19:E4:47:70:5F:D4:F0:52:4F:05:79:6E
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 01976C62011114BEDB6460A69EAE104C483F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0788
Signing time: Sat 14 Jun 2025 03:00:51 +0000
Manifest this update: Sat 14 Jun 2025 03:00:51 +0000
Manifest next update: Sun 15 Jun 2025 03:00:51 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: pELjHE/eiU+zRng+1nNtJI0GoynLTznaZsOFI8n9BK0=)
2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:01:11:14:be:db:64:60:a6:9e:ae:10:4c:48:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Jun 14 03:00:51 2025 GMT
Not After : Jun 15 03:00:51 2025 GMT
Subject: CN=8ce8b9c1d57f94c019e447705fd4f0524f05796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:9a:2c:ae:97:f6:ee:5b:00:53:f1:fa:07:
76:99:e7:54:5c:d0:f3:9d:5d:12:fa:6a:48:da:87:
84:23:cd:f9:c1:e0:ac:54:fe:74:ed:47:f6:9d:ba:
4c:8e:69:5f:90:69:a1:3b:99:5a:21:73:75:a8:09:
1c:ac:ba:80:98:5c:df:9e:99:c4:ac:20:c1:57:ee:
ac:bf:85:9f:c4:45:13:0e:81:34:3a:4c:20:3a:ac:
be:3d:f2:75:c2:ad:71:c7:9a:bd:9b:ad:aa:2e:58:
cb:7f:51:b3:94:87:69:6a:57:c6:17:fd:15:f2:90:
34:59:32:e3:94:aa:8a:8c:f3:b9:6c:71:8a:7e:2b:
b5:fd:ca:d2:79:9b:28:63:d9:67:2e:35:a0:76:16:
46:06:a8:19:73:f7:04:c9:64:64:9b:bf:07:ca:83:
83:6e:d8:70:e1:5a:85:f9:2d:08:a0:c4:bc:6a:2d:
fa:f8:38:9b:d0:ff:e1:b3:d6:9d:eb:12:d8:2b:ed:
e0:3f:56:cf:b6:59:13:ab:9c:a9:04:4f:6e:5d:5b:
18:c9:37:f6:2c:59:69:3c:75:e1:da:63:ca:b1:f8:
3b:30:46:b2:46:a4:3d:3a:22:17:e2:80:a8:f8:12:
69:ec:76:f3:1c:a2:8b:42:31:b2:8b:f6:ab:5e:87:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:B9:C1:D5:7F:94:C0:19:E4:47:70:5F:D4:F0:52:4F:05:79:6E
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:ec:a0:d7:fe:22:49:2b:11:a7:62:cd:7a:8d:04:35:6f:
08:cb:69:c0:86:6d:78:95:1c:df:7d:dc:5a:d1:3c:09:45:80:
3c:80:f1:65:8f:7b:cc:e2:ed:d4:f3:25:b8:a4:88:f6:60:4f:
16:1c:10:e5:58:b2:54:d0:86:1a:b1:cf:db:91:31:2d:a4:68:
4a:3e:0c:7b:c2:97:fe:b1:c5:f7:21:7f:f1:1c:97:52:a3:03:
2b:98:b0:56:b9:d9:03:50:91:69:bb:03:28:eb:75:f3:e1:5e:
30:7e:45:8c:b3:18:f2:9e:de:ea:a3:d7:b2:25:1e:c3:98:9f:
dd:4a:68:a8:16:5c:2d:22:c5:4a:51:df:4d:1d:e9:62:f3:fc:
23:cb:90:e0:c0:d1:8b:f5:a3:5b:21:78:e6:39:48:e8:d1:fb:
c8:ff:17:f9:ad:ff:95:fe:54:5e:a9:11:19:9c:0d:48:bd:e5:
23:45:54:83:78:eb:6e:af:87:d0:f5:0c:fa:dd:58:9f:ef:ae:
d8:57:e1:d9:7a:4f:5a:67:c6:ce:7c:85:aa:c7:30:12:b9:8a:
d1:6d:85:87:8f:b1:01:a0:3b:dc:3a:36:b0:5f:4c:b0:f1:01:
36:e4:af:22:2e:6e:93:a5:07:3c:2a:92:ce:df:d5:03:68:5f:
05:33:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:58 2025 by rpki-client