Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: fDdqiY9gD6oVYLDOhB9+AVCtDLaQrBKoz4f1LHabvkk=
Subject key identifier: C9:F0:A0:37:A3:08:D1:F6:33:B4:D0:68:BA:01:4F:A8:0E:51:B8:C3
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 019A4E865B6624DFE9550AD2093FDA685F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0DF0
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: NABDiflKSm4owbKKit7slR5XicSHXuYj3HOdjzHLabA=)
2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5b:66:24:df:e9:55:0a:d2:09:3f:da:68:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=c9f0a037a308d1f633b4d068ba014fa80e51b8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:d1:53:18:85:db:ff:e8:bb:ef:3e:50:81:
0b:a2:88:85:12:b3:c0:6e:04:59:2b:05:b9:4e:ad:
6d:ae:13:a0:a6:31:71:af:85:a9:96:59:69:31:9b:
40:f9:ba:70:6e:3e:8b:4c:0f:a8:54:6e:e0:f3:3b:
fe:2d:74:ae:95:f3:50:b7:51:28:fd:d0:65:5d:37:
73:fc:9a:43:02:dc:28:19:b5:d9:fe:92:8e:f1:14:
6b:a1:48:65:c1:38:9c:eb:bf:ca:31:13:e3:39:69:
dd:98:54:c8:a3:e5:6e:bf:39:1a:fd:46:6f:e1:f0:
8b:c6:b1:33:d1:23:cb:b6:67:71:d7:16:78:2c:c4:
e7:20:c5:51:fe:40:b8:ee:c6:ec:2f:79:1e:bf:06:
db:b9:8c:fa:0f:19:04:14:25:1e:67:4e:de:ad:7f:
dc:0a:46:d9:87:53:17:09:f1:51:d8:96:6f:51:4d:
09:e3:e5:62:2d:33:e0:11:af:ad:16:e3:e7:dc:64:
5c:6e:99:f0:50:7b:3e:0d:3e:c2:bb:6d:76:82:0e:
97:18:0d:ae:6d:e0:97:0a:4e:1a:07:0b:a9:9f:22:
85:ba:11:7a:4f:ce:fe:7e:42:be:d5:fc:bf:0d:72:
27:7a:0c:fc:04:e3:ec:75:16:3f:91:ae:a6:e0:83:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:A0:37:A3:08:D1:F6:33:B4:D0:68:BA:01:4F:A8:0E:51:B8:C3
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:6e:aa:87:c8:75:ee:7a:5b:ab:f4:c0:1f:36:f5:c7:5a:
fb:9c:73:ed:0b:b3:e8:b7:96:83:6e:5f:47:24:b5:7e:df:9d:
a8:f8:41:3e:7e:c1:4a:72:3d:1b:e4:19:19:a3:df:7d:55:94:
c8:da:09:de:10:c7:67:25:21:9b:6c:78:01:90:30:09:cc:26:
4c:ae:de:64:79:d2:36:2c:ad:60:1f:e1:1c:5b:ee:31:21:c4:
41:7d:86:81:d9:af:3d:61:f3:b4:e7:ea:aa:e9:14:23:12:da:
1b:46:a2:8e:3e:e3:24:6f:fb:e9:eb:4f:3f:1d:92:a6:d2:24:
f6:75:b5:71:54:bc:73:17:31:10:2b:b6:83:eb:c4:87:2a:91:
81:4c:25:59:d1:2f:a3:2d:0a:71:c7:c1:58:b0:77:67:7c:64:
ce:5e:df:8a:3e:23:0e:21:37:ca:47:ca:30:67:6b:4c:c6:d9:
a4:9f:6c:82:3d:96:66:eb:67:88:47:00:a3:93:02:f8:ea:47:
3f:3d:21:25:22:0e:99:c0:98:43:76:e6:47:d0:f4:30:07:ba:
94:72:6f:09:9b:f3:26:a0:8e:b3:a7:d7:11:b9:77:2f:33:a7:
9e:42:13:21:63:b1:87:38:0b:0b:56:e0:89:ec:ec:7b:0f:b7:
ec:80:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:28 2025 by rpki-client