Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: IINLQxOic1z4edlCkD2+D5pY3uxi7Kv0zYgIXa/uDP8=
Subject key identifier: 02:1E:B2:2A:B6:0E:DD:31:9A:26:42:6F:06:9E:8E:EE:9E:F0:2F:4E
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 0198744FEBF09557313104FE88EFD3683745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 119A
Signing time: Mon 04 Aug 2025 09:00:51 +0000
Manifest this update: Mon 04 Aug 2025 09:00:51 +0000
Manifest next update: Tue 05 Aug 2025 09:00:51 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: nQdmemjlEqNjoUlL1ZQDWi5VNtAF7FSl/kOLUEl/VJc=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:eb:f0:95:57:31:31:04:fe:88:ef:d3:68:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Aug 4 09:00:51 2025 GMT
Not After : Aug 5 09:00:51 2025 GMT
Subject: CN=021eb22ab60edd319a26426f069e8eee9ef02f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:92:c3:ec:ad:97:4f:6a:74:e9:61:6c:31:
37:0a:0e:aa:b6:92:2b:f7:71:36:c6:1e:0b:e9:2e:
f9:22:af:1f:4c:b4:b2:97:0f:93:c9:cb:75:30:67:
83:ba:10:cf:6d:59:92:73:43:e9:89:9f:64:c1:53:
41:3d:4d:64:a4:6c:1e:80:07:43:f1:50:66:0a:a8:
2b:90:c2:9e:6c:b4:c2:8f:36:27:9b:61:31:f8:45:
6c:ae:3e:72:40:16:05:de:17:0f:ba:13:dd:43:74:
36:96:7a:c9:8f:d0:62:f3:8a:d1:6e:77:76:d3:17:
f8:df:96:6f:23:a4:36:d8:64:9b:11:32:ee:5d:75:
3c:3f:43:9b:90:7f:3b:32:8b:40:9c:e6:16:10:a9:
79:a8:9b:b8:f7:06:2a:13:ec:c4:65:c1:50:e3:b8:
9e:4a:c8:ad:07:fa:3c:69:41:9e:6d:ac:ad:1b:84:
cc:be:b3:d8:fd:d7:3e:28:57:5e:9b:7e:90:c2:1e:
8d:b7:9a:0c:22:6a:5a:b1:0e:8b:dd:d4:3b:1a:6f:
5b:4f:b6:a6:a1:14:d6:2e:41:3a:c8:d8:3f:91:35:
9a:c6:b6:75:7e:48:66:bc:99:c7:b8:1c:29:36:8d:
c3:c9:c5:1b:23:69:3e:9b:06:0f:d6:ed:b9:5d:0e:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:B2:2A:B6:0E:DD:31:9A:26:42:6F:06:9E:8E:EE:9E:F0:2F:4E
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:79:cf:9b:e8:42:d2:3d:4f:8c:75:61:13:53:ad:a4:97:
50:68:1b:d0:ee:b9:21:fb:3a:ac:3f:f0:bf:75:30:29:df:d3:
a1:40:a4:12:13:38:63:7e:20:87:34:3d:3c:8f:bf:de:0e:2d:
73:62:47:04:05:58:30:90:a4:91:9c:86:97:27:f2:17:ce:08:
67:5d:54:7d:47:c0:2a:2a:67:1f:38:b6:b2:e0:b2:d6:d3:0f:
dd:04:07:bc:dc:6d:a8:54:c5:82:fb:fd:37:0c:d0:8d:c4:93:
5b:01:d6:0b:b5:91:80:a7:d2:3d:e7:2a:2c:9d:ba:c6:34:0a:
7e:d7:69:13:1f:5d:16:ce:11:3d:4e:87:b9:26:26:6e:9c:f3:
f3:cd:45:d0:e9:c3:6a:d9:c6:f2:f5:30:5b:eb:cc:87:b3:3b:
7f:b9:ea:f8:0c:ee:24:7c:30:44:c2:a5:c4:69:e7:a5:8f:5a:
6b:86:bb:56:63:b3:d5:5b:3f:67:83:4c:2f:78:a7:2e:24:4c:
3f:97:48:55:d5:0f:c7:c4:53:64:dd:21:bb:0a:9c:a4:94:32:
84:4d:9e:86:8f:e7:d4:ec:e5:c4:92:f8:a6:a9:9f:f0:5a:f8:
e3:1f:43:72:15:2c:46:2e:b6:6c:28:a2:8f:74:d7:37:b6:d7:
32:8d:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:54 2025 by rpki-client