Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: aC/tthmIeKyKWkciiyINGI1g1pdomgHG3OfREAR3hs8=
Subject key identifier: 86:6E:1A:03:63:C5:DD:39:8B:2D:C4:61:B7:9B:A9:04:6B:2F:30:47
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 019A4E1917A6C461755761A174EE092A8D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0906
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: YXQndpAMBSbtVWEQ49j+69YEL6cXuVwx6Dt653qJ044=)
2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:17:a6:c4:61:75:57:61:a1:74:ee:09:2a:8d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=866e1a0363c5dd398b2dc461b79ba9046b2f3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:3e:b0:36:15:a9:a2:9c:d7:f3:0c:6e:91:
c0:e8:e8:15:7d:c0:67:af:47:80:e1:6e:89:9b:2c:
ce:14:ea:99:55:b5:cc:cc:e7:aa:34:80:d0:25:f7:
bc:c3:b2:5e:05:ca:31:54:f1:d0:b0:29:cb:a0:82:
39:f3:24:30:2d:c2:6a:b6:19:c0:d3:91:33:80:e8:
b1:a7:eb:df:c1:80:0e:7c:a6:f3:f4:3b:62:a7:d3:
08:69:21:8d:fa:d1:bf:5f:34:60:4a:ee:0b:7b:f8:
8c:f9:86:fd:0a:b7:bf:c3:31:62:cc:51:e7:35:3a:
6e:b3:b9:11:ce:50:46:07:68:5b:ac:82:69:fa:e3:
e1:76:b8:ec:f9:67:9f:20:2a:c1:49:cc:bd:92:f2:
9f:4f:6f:ab:e8:5a:f6:b1:13:a8:a3:56:33:a0:da:
b6:dd:a8:c1:e3:61:63:18:95:40:bd:8e:d2:1d:43:
66:ec:ff:0b:74:37:e8:37:de:57:a8:e6:1a:bb:bc:
ba:81:b8:23:4b:09:11:30:93:55:71:1b:76:7a:d0:
83:57:37:95:cd:0d:04:c5:56:2c:d7:8c:34:12:e9:
ff:82:e6:e2:3b:0f:f7:36:26:9f:f8:df:e3:ca:2f:
b1:14:06:b9:bc:6b:0f:f5:4a:21:6d:5a:4f:6c:31:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:1A:03:63:C5:DD:39:8B:2D:C4:61:B7:9B:A9:04:6B:2F:30:47
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:4a:c3:3d:b3:96:30:29:e6:3a:11:90:a6:a7:89:79:5d:
98:34:4c:22:89:1d:8b:e4:33:12:21:72:10:3e:34:5e:9b:8c:
3a:06:86:39:d4:75:38:b6:d0:f3:5b:dd:be:db:ac:6b:09:8e:
6b:80:88:b6:27:3f:83:f3:8e:c2:e6:2d:f8:41:d9:90:19:63:
98:ba:87:55:ad:ac:41:60:3b:22:c1:f1:0b:d0:13:f0:3f:73:
3a:19:ee:48:9e:43:66:96:05:21:68:ce:a0:8f:d1:39:a2:09:
87:8d:4d:3c:27:31:a4:9e:49:e6:c6:1c:41:50:a9:d9:b3:75:
5a:23:11:db:fd:64:be:fe:7d:bd:29:07:ff:fd:50:f2:86:e8:
7e:9f:6e:e5:fd:37:b1:31:f4:c7:49:4a:f1:76:5d:2d:31:3f:
0a:9d:98:c3:c5:5b:fa:cd:a0:50:be:1f:2c:11:ad:7c:63:d2:
d3:41:1e:0a:47:5f:20:b6:48:78:7b:7c:ce:11:5d:4f:36:6f:
f1:d3:4b:88:50:8e:24:b1:8e:66:95:1a:3a:e8:16:dd:e5:ad:
10:42:14:23:05:16:d5:22:af:51:bb:df:ac:d1:94:da:a4:6e:
45:e9:b9:bd:af:95:0d:03:92:e1:2c:47:37:fb:d6:8d:36:ab:
00:24:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:22 2025 by rpki-client