Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: j/sp5peE4RTkuh22b2ag1TlKe805a9gP1plTDJpPM1M=
Subject key identifier: 84:5C:00:B8:F8:18:72:76:8B:EA:D7:E7:30:51:8C:BD:72:5B:DD:FC
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019769CE9C8FED95A0EB77D802DE3D5844BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1110
Signing time: Fri 13 Jun 2025 15:00:37 +0000
Manifest this update: Fri 13 Jun 2025 15:00:37 +0000
Manifest next update: Sat 14 Jun 2025 15:00:37 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: +2JIXIJhnhULV8a//ypW+gTYqm5jMKJpTeO4AffyMpo=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:9c:8f:ed:95:a0:eb:77:d8:02:de:3d:58:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Jun 13 15:00:37 2025 GMT
Not After : Jun 14 15:00:37 2025 GMT
Subject: CN=845c00b8f81872768bead7e730518cbd725bddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:a7:28:58:55:bd:a2:5e:d2:48:38:8e:0e:
81:79:15:a6:b5:e2:ed:57:c5:60:ca:b9:06:67:c5:
a9:68:3c:06:60:b1:6f:b4:16:22:88:f7:eb:2f:2c:
c6:01:0c:d9:36:78:55:a2:fb:54:f1:68:4c:8e:f2:
3a:be:18:4a:f3:eb:1e:28:04:5b:fb:23:9c:2c:58:
f7:f1:eb:31:2f:17:33:a2:bf:62:36:82:09:26:ea:
e1:87:f8:39:9b:4f:99:40:f0:8b:7d:9d:66:db:9d:
53:fc:74:20:0b:bb:e9:44:88:6c:2f:dd:a4:ce:3c:
f1:d0:b5:83:e9:f5:5e:3b:15:4f:3f:26:3a:10:38:
64:d0:ec:f2:6b:1a:39:a5:b6:9e:5a:67:b2:a6:2f:
57:64:fb:cf:e3:7d:eb:4e:4b:d4:76:b2:2a:ab:31:
9e:24:c9:47:10:8b:ba:6c:f1:37:2d:30:66:b6:1b:
7c:3f:fe:22:67:47:d5:1a:1f:50:21:01:60:d6:f6:
c6:d9:d6:c1:c5:5f:1a:ef:41:2d:b8:27:55:2f:13:
8c:c7:9a:39:5a:2b:48:a2:85:9f:c7:6a:b7:ac:88:
48:4a:68:2f:f4:3f:e4:11:2a:65:78:e9:8e:c4:f2:
38:7d:20:fb:05:b5:21:8e:15:98:fc:64:c0:9a:ae:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:00:B8:F8:18:72:76:8B:EA:D7:E7:30:51:8C:BD:72:5B:DD:FC
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:22:98:0a:b2:c5:c8:2a:da:3f:47:e0:bf:5c:d3:c2:c6:ea:
74:eb:40:82:75:41:f4:ad:0f:83:31:a6:e8:08:5d:a4:f1:0b:
b9:89:22:4d:d4:43:32:68:92:e1:0b:06:5d:02:31:68:9e:4f:
45:d3:8d:ac:85:5a:62:69:c2:ca:b2:aa:a0:8e:62:ea:79:93:
a8:5a:31:40:47:76:18:a7:d6:da:7d:61:9d:c9:d7:7c:c6:68:
0d:c3:14:16:73:f2:69:85:e0:6d:db:08:57:1b:0d:66:19:69:
f2:96:f5:08:52:b2:a8:9f:27:59:98:95:57:a7:de:ec:c3:28:
83:36:9a:d5:62:6c:80:50:28:29:33:f8:e1:9e:e4:ea:32:87:
f2:2d:b5:91:80:47:38:09:58:39:bf:32:fa:fb:66:d8:79:2d:
7e:e6:84:4b:95:12:c2:25:c8:2e:10:2c:da:0d:b5:e9:4b:bc:
b1:df:10:ab:8d:5a:cb:96:59:fc:8c:2f:79:41:72:f2:9f:ca:
5e:89:d1:34:08:76:5d:8b:fb:a2:c2:2b:56:00:49:62:80:47:
a3:a5:ad:41:b1:c4:cb:e6:51:34:c6:d4:99:02:50:98:95:8b:
cd:99:02:53:6f:4d:20:6d:72:40:75:a5:0a:32:c6:6c:44:b8:
1b:b6:d9:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzpyP7ZWg63fYAt49WES7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjUwNjEzMTUwMDM3WhcNMjUwNjE0MTUwMDM3WjAzMTEwLwYDVQQD
Eyg4NDVjMDBiOGY4MTg3Mjc2OGJlYWQ3ZTczMDUxOGNiZDcyNWJkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWynKFhVvaJe0kg4jg6BeRWmteLt
V8VgyrkGZ8WpaDwGYLFvtBYiiPfrLyzGAQzZNnhVovtU8WhMjvI6vhhK8+seKARb
+yOcLFj38esxLxczor9iNoIJJurhh/g5m0+ZQPCLfZ1m251T/HQgC7vpRIhsL92k
zjzx0LWD6fVeOxVPPyY6EDhk0Ozyaxo5pbaeWmeypi9XZPvP433rTkvUdrIqqzGe
JMlHEIu6bPE3LTBmtht8P/4iZ0fVGh9QIQFg1vbG2dbBxV8a70EtuCdVLxOMx5o5
WitIooWfx2q3rIhISmgv9D/kESpleOmOxPI4fSD7BbUhjhWY/GTAmq6BuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRcALj4GHJ2i+rX5zBRjL1yW938MB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSKYCrLF
yCraP0fgv1zTwsbqdOtAgnVB9K0PgzGm6AhdpPELuYkiTdRDMmiS4QsGXQIxaJ5P
RdONrIVaYmnCyrKqoI5i6nmTqFoxQEd2GKfW2n1hncnXfMZoDcMUFnPyaYXgbdsI
VxsNZhlp8pb1CFKyqJ8nWZiVV6fe7MMogzaa1WJsgFAoKTP44Z7k6jKH8i21kYBH
OAlYOb8y+vtm2HktfuaES5USwiXILhAs2g216Uu8sd8Qq41ay5ZZ/IwveUFy8p/K
XonRNAh2XYv7osIrVgBJYoBHo6WtQbHEy+ZRNMbUmQJQmJWLzZkCU29NIG1yQHWl
CjLGbES4G7bZXg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:28 2025 by rpki-client