Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: hS2xuKCiYv10+BVid8tgnhMcfVWuC/olElphVw4Udxk=
Subject key identifier: CF:0A:63:A2:84:92:77:92:68:98:C6:BA:6F:88:18:AA:1E:0F:E7:03
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 0198756266908CCAF45CC91B697B6396C851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0CFB
Signing time: Mon 04 Aug 2025 14:00:39 +0000
Manifest this update: Mon 04 Aug 2025 14:00:39 +0000
Manifest next update: Tue 05 Aug 2025 14:00:39 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: hPvqthevcm1pjE6VbKDl6tUhA5+zz373D0tW8X/jlpo=)
2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:66:90:8c:ca:f4:5c:c9:1b:69:7b:63:96:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Aug 4 14:00:39 2025 GMT
Not After : Aug 5 14:00:39 2025 GMT
Subject: CN=cf0a63a2849277926898c6ba6f8818aa1e0fe703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:49:6b:6e:1c:c7:20:7c:29:24:37:ce:22:
00:ff:d3:5a:e9:bf:c3:21:41:ed:c7:e2:30:35:48:
e1:f3:25:f3:f2:bf:75:3f:13:85:35:81:a5:38:28:
4c:2b:63:fe:da:b1:5a:d8:c4:67:ac:4f:83:87:d7:
c7:02:e0:94:d6:06:1c:83:8a:23:17:5c:07:79:d1:
26:61:8e:90:66:49:a9:17:82:14:5c:72:28:9d:d8:
c9:17:fd:eb:b2:05:79:c5:9f:11:b4:66:93:6b:4a:
68:05:fa:d1:40:e6:7d:74:cc:d3:1f:b9:94:b2:06:
d3:26:3f:a2:3b:ea:81:a7:14:1d:45:ec:cf:b7:3e:
50:30:47:97:a8:87:21:11:2f:a6:c4:d3:1f:e0:8c:
75:9f:54:34:69:4c:0f:66:91:ba:e5:4c:00:cc:a9:
53:9d:c6:78:a8:37:ad:fc:b7:be:b3:ab:2e:65:43:
d5:f0:25:98:40:7e:3b:34:01:6c:a8:ba:31:1f:b4:
8a:d5:08:fd:7b:5a:5a:63:b9:96:37:54:bb:38:d8:
00:a1:77:22:46:98:9e:23:0a:ec:9d:16:92:d1:3e:
5b:e9:c3:96:1f:a3:ca:0d:80:c0:19:63:3a:f3:46:
ea:b8:88:93:43:03:c4:89:44:ff:1f:56:d3:a4:71:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:63:A2:84:92:77:92:68:98:C6:BA:6F:88:18:AA:1E:0F:E7:03
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:26:be:6b:8f:93:a1:dc:ef:3b:5a:c0:ff:a1:fc:8b:4d:
55:71:ed:1d:e1:cd:0f:f8:b7:2b:07:34:66:e5:84:89:d7:7b:
d5:58:a4:9e:6a:c7:71:44:ea:35:6b:29:65:06:8f:32:e5:fa:
76:77:81:37:45:31:31:af:f9:0f:3e:9c:91:25:09:94:4d:6f:
4f:89:cf:59:24:1c:6a:1c:8c:e8:77:c1:41:20:86:a0:a2:26:
50:cd:87:87:38:aa:20:5e:60:03:04:fc:2e:e6:2b:21:1d:07:
ba:e1:dd:91:ed:ba:ca:87:b8:f6:5b:e0:10:a9:d5:90:ec:e9:
3d:ca:81:da:8a:e1:e7:66:dd:b5:33:d4:60:b8:86:80:ed:ef:
fa:1c:80:39:c2:e4:31:f6:bd:ef:62:9c:df:88:06:7b:fd:41:
9b:ca:05:e9:b5:d8:50:48:77:6c:1e:2d:37:f7:a9:ce:4a:84:
64:ae:16:b6:71:28:fe:e6:62:0e:a7:4f:2c:1e:be:f1:42:91:
6d:80:61:f3:11:89:c0:80:5f:bb:a6:9b:2a:40:ca:2b:ad:12:
17:56:9a:ca:ec:3a:c9:f0:c5:6b:8d:18:35:35:fc:5a:41:c0:
10:33:6d:30:bd:12:53:88:84:e5:ad:8e:e4:2f:dd:e4:fb:14:
11:a8:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:35 2025 by rpki-client