Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: r6TU0NKVaZ+GYDUrhy6Tx288+PN5QtLSsQpy8/FPdMc=
Subject key identifier: A4:08:A4:2F:4B:04:27:A5:68:04:1F:60:64:F2:17:84:B0:5B:34:82
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019881D58679D8C83583F53AF4375BFFC3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 00:01:50 +0000
Manifest this update: Thu 07 Aug 2025 00:01:50 +0000
Manifest next update: Fri 08 Aug 2025 00:01:50 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: pcHjCKiWUO7zSAjvXQfRL62yjwr/HlBKSvZHEl/3GIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:86:79:d8:c8:35:83:f5:3a:f4:37:5b:ff:c3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Aug 7 00:01:50 2025 GMT
Not After : Aug 8 00:01:50 2025 GMT
Subject: CN=a408a42f4b0427a568041f6064f21784b05b3482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:35:2f:76:89:94:7f:55:fb:fc:26:b0:2d:
eb:b0:6b:e1:0a:f8:84:97:e0:6f:8f:c8:2d:d4:c5:
e8:20:aa:8b:f8:a9:26:ae:6a:18:04:d6:59:cc:d7:
af:ec:1b:c0:31:d1:d2:b5:42:08:ac:05:11:66:63:
98:bb:76:7b:33:2d:f6:ef:bf:19:74:2d:cd:f4:52:
21:c7:f3:8a:ee:84:0e:16:5a:60:e8:4d:fa:6a:a2:
e6:e9:19:37:c3:06:7a:47:61:f4:b3:f1:5d:89:f2:
30:fe:98:f9:79:2a:18:cf:07:ff:5b:04:74:fa:b5:
32:4f:e9:9e:02:43:e1:f1:82:54:74:4a:8c:44:ef:
21:9e:01:53:aa:1a:f9:04:41:26:88:a9:4b:7f:f7:
76:ba:11:76:9b:3b:54:10:e0:b9:10:ee:55:e3:2e:
43:49:8b:83:c4:b0:c1:3d:68:5a:82:b2:b0:f7:49:
f7:83:46:ce:6c:47:56:32:78:62:f4:b5:a3:d7:a3:
0e:ee:97:5f:02:8b:a0:f2:c5:c6:f7:c5:47:a8:18:
5e:d1:24:af:39:08:43:f5:0c:e7:9b:65:72:f5:49:
07:89:2d:da:cb:79:46:70:d2:b7:c6:2a:80:2a:54:
15:43:4e:4a:25:9c:61:e1:fd:20:38:41:88:4f:96:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:A4:2F:4B:04:27:A5:68:04:1F:60:64:F2:17:84:B0:5B:34:82
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:79:0e:57:63:99:56:4a:97:31:be:b3:f7:6b:a6:8d:a9:5d:
1c:72:fd:9b:a0:ae:4c:3b:88:d6:0a:b9:6b:40:fe:2a:be:64:
dd:22:24:01:43:8e:93:33:c0:92:7c:7b:c6:80:f1:58:25:47:
bd:88:54:16:20:dd:b1:da:c9:59:5e:69:2a:87:5e:9d:2d:ca:
be:f6:f1:d8:c2:df:16:3b:56:a4:be:7a:18:91:46:b2:28:d3:
2a:f0:52:91:43:cd:86:50:03:fd:10:59:0d:97:18:ed:27:78:
93:4b:18:a8:70:9a:32:52:2d:78:62:57:94:aa:f4:35:2d:2c:
9e:b7:05:5c:30:cc:b6:1f:bc:69:eb:cc:10:7a:84:9b:22:75:
55:5f:25:f5:bb:d3:32:1e:df:ea:fd:a4:9a:45:76:66:a6:d4:
6e:2c:a6:09:03:98:23:79:70:5e:ee:b3:93:48:11:dd:09:ed:
ce:c9:49:9f:6a:8a:59:8e:9b:d7:29:66:83:26:da:16:fc:08:
84:d4:24:1d:ac:69:bc:bc:ef:fd:f6:74:bd:9f:0e:e0:82:fd:
bf:ff:4a:e8:ed:4b:3f:02:94:90:63:5b:cc:b9:ea:fa:26:bf:
a8:ab:18:b2:72:84:6e:ee:42:7e:48:4a:6a:f2:a9:32:28:11:
dd:df:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:55 2025 by rpki-client