Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File: chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier: VWYA9OPrHAucJBq38GtP8ufk0N8xYOE/B9FZhEvRLJk=
Subject key identifier: 0A:5A:89:D1:F6:67:D9:7A:98:14:36:49:ED:3B:F3:25:75:C1:74:BE
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer: /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial: 01988EED2F03B8FBF55B680C2B59EC291912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number: 0D0A
Signing time: Sat 09 Aug 2025 13:02:45 +0000
Manifest this update: Sat 09 Aug 2025 13:02:45 +0000
Manifest next update: Sun 10 Aug 2025 13:02:45 +0000
Files and hashes: 1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: OUNL8TaHVyD3y8fzqqfCi3vjXUecmgRwqXARomz246M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:2f:03:b8:fb:f5:5b:68:0c:2b:59:ec:29:19:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Validity
Not Before: Aug 9 13:02:45 2025 GMT
Not After : Aug 10 13:02:45 2025 GMT
Subject: CN=0a5a89d1f667d97a98143649ed3bf32575c174be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:83:f1:e3:8b:c6:90:b7:4f:e7:09:5f:c2:
d5:77:e8:86:11:45:90:d6:19:68:d8:51:25:c0:79:
99:a2:24:c8:dc:d2:2c:86:64:f9:af:40:95:f6:8d:
3a:e8:5e:2a:55:18:fd:4a:3b:f9:9b:8b:fe:4c:f3:
df:60:d8:4e:ca:f0:d6:23:a1:fe:0c:c4:f7:20:5e:
f4:1e:70:b1:e1:44:e1:03:59:f8:1b:5c:3a:15:95:
a3:12:31:02:3e:6f:4e:70:58:61:13:de:fa:97:b0:
c4:c9:0f:13:60:a2:dc:bc:16:5f:35:e7:da:f4:85:
5e:1a:9a:e7:6c:54:ba:e1:2f:a9:9d:cf:87:15:05:
7e:1e:0b:bf:0e:2c:3c:dc:6a:76:f5:4e:3d:41:bf:
77:95:b8:c8:29:fb:d4:2b:2d:cd:e5:70:d2:90:6f:
84:da:59:86:ac:50:a7:73:9a:cd:f8:0f:a3:72:df:
10:34:ca:f2:5d:52:f5:65:3b:1d:ce:35:c3:ff:fd:
55:da:ec:dd:d5:e7:8d:0c:9a:cc:87:cc:de:61:61:
09:70:e3:24:0a:3b:58:ca:96:00:33:5e:85:12:05:
0f:d4:d6:35:3b:8a:6b:9e:d5:7b:cd:04:16:19:01:
6f:3a:99:36:be:7e:58:2d:84:fd:5f:ec:7c:90:93:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:89:D1:F6:67:D9:7A:98:14:36:49:ED:3B:F3:25:75:C1:74:BE
X509v3 Authority Key Identifier:
keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:76:6e:01:00:4f:3e:28:87:d1:d8:94:d9:2d:e5:60:a3:9c:
e3:01:a6:1c:ea:b4:9a:d3:43:a3:a3:52:15:37:c3:2f:7e:9e:
cb:ab:e7:92:47:ba:dc:b4:f4:7c:fe:1a:8b:41:cc:10:70:6d:
35:c4:fc:8b:5b:17:98:c7:8e:15:cc:ae:10:0c:44:47:ae:d9:
4c:99:ad:d4:dc:cd:10:3b:0f:f7:28:f0:6f:c2:48:25:62:77:
22:94:1e:05:ea:4d:ab:85:35:d3:e8:84:8a:4a:e2:a3:3e:d6:
51:1c:9c:a0:d1:de:fb:ba:d8:70:b1:87:58:13:25:95:65:e7:
60:68:7a:00:19:1a:92:89:ae:f1:21:e8:3b:db:f9:6a:58:3e:
8c:c4:ed:83:05:f4:0a:81:a2:5c:4d:ca:26:04:e4:a0:8f:47:
a6:6d:e7:0c:02:3e:56:86:29:62:01:e9:ea:64:a5:1b:aa:db:
54:e8:ca:e4:a1:5c:09:50:43:77:aa:a0:04:78:16:bb:82:76:
bf:c7:30:21:41:d9:68:c6:1f:f4:25:b3:79:7e:e7:a1:97:52:
d0:a7:04:57:e3:d2:d1:05:a8:b8:3e:89:21:31:f7:89:8e:b0:
c2:07:e9:4e:1c:95:3f:7e:91:ce:4b:d3:8c:f4:73:95:92:07:
1e:05:ee:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7S8DuPv1W2gMK1nsKRkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTgxMjVlY2ZiYjIxMWVkZmMyZGUwNDcyZjk2NGFhODZj
YmU5OWUwHhcNMjUwODA5MTMwMjQ1WhcNMjUwODEwMTMwMjQ1WjAzMTEwLwYDVQQD
EygwYTVhODlkMWY2NjdkOTdhOTgxNDM2NDllZDNiZjMyNTc1YzE3NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTaD8eOLxpC3T+cJX8LVd+iGEUWQ
1hlo2FElwHmZoiTI3NIshmT5r0CV9o066F4qVRj9Sjv5m4v+TPPfYNhOyvDWI6H+
DMT3IF70HnCx4UThA1n4G1w6FZWjEjECPm9OcFhhE976l7DEyQ8TYKLcvBZfNefa
9IVeGprnbFS64S+pnc+HFQV+Hgu/Diw83Gp29U49Qb93lbjIKfvUKy3N5XDSkG+E
2lmGrFCnc5rN+A+jct8QNMryXVL1ZTsdzjXD//1V2uzd1eeNDJrMh8zeYWEJcOMk
CjtYypYAM16FEgUP1NY1O4prntV7zQQWGQFvOpk2vn5YLYT9X+x8kJNfbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApaidH2Z9l6mBQ2Se078yV1wXS+MB8GA1UdIwQY
MBaAFHIYEl7PuyEe38LeBHL5ZKqGy+meMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zN2U1Y2ItZDllZS00NWQzLTk1YWIt
MGRiMGZkNzRkYjMyLzEvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zN2U1Y2ItZDllZS00NWQzLTk1YWItMGRiMGZkNzRkYjMy
LzEvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHZuAQBP
PiiH0diU2S3lYKOc4wGmHOq0mtNDo6NSFTfDL36ey6vnkke63LT0fP4ai0HMEHBt
NcT8i1sXmMeOFcyuEAxER67ZTJmt1NzNEDsP9yjwb8JIJWJ3IpQeBepNq4U10+iE
ikrioz7WURycoNHe+7rYcLGHWBMllWXnYGh6ABkakomu8SHoO9v5alg+jMTtgwX0
CoGiXE3KJgTkoI9Hpm3nDAI+VoYpYgHp6mSlG6rbVOjK5KFcCVBDd6qgBHgWu4J2
v8cwIUHZaMYf9CWzeX7noZdS0KcEV+PS0QWouD6JITH3iY6wwgfpThyVP36RzkvT
jPRzlZIHHgXusw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:45 2025 by rpki-client