Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: NcsPc50t1GVH4cPqSGRCvyGH5/GwpZq+YeV68DajrlA=
Subject key identifier: 03:85:7F:DC:15:81:3D:23:2B:3E:97:8A:67:B8:C5:B4:23:85:AC:A2
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 01977978523D3353153DB82B088876B22F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 12C3
Signing time: Mon 16 Jun 2025 16:00:17 +0000
Manifest this update: Mon 16 Jun 2025 16:00:17 +0000
Manifest next update: Tue 17 Jun 2025 16:00:17 +0000
Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: ttHv8t7DhtDGTKm8dRj8sXnKotS6Q9ux53rKlirlsHQ=)
3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:52:3d:33:53:15:3d:b8:2b:08:88:76:b2:2f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jun 16 16:00:17 2025 GMT
Not After : Jun 17 16:00:17 2025 GMT
Subject: CN=03857fdc15813d232b3e978a67b8c5b42385aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:73:ea:aa:7f:ea:06:7c:b6:1d:2f:07:60:
f0:98:80:00:92:db:71:40:f2:35:8e:cf:83:7b:c0:
5e:d6:e1:9f:4d:bb:f1:76:ef:f0:e7:9f:69:6c:7d:
2b:14:c0:e6:37:27:89:77:fa:9e:7e:20:43:11:c5:
3b:07:be:cf:d3:65:36:e0:b0:7d:0e:6c:ec:75:db:
29:a7:ac:81:a0:f2:63:9b:4d:54:97:55:c9:46:3c:
5e:c1:9a:d7:3d:e9:98:79:6e:d3:29:7c:e2:6a:2b:
ba:00:ff:5f:1f:07:14:d5:9a:0f:ab:56:08:04:eb:
ec:ef:cb:31:4f:ed:65:de:73:4f:33:7b:ab:f4:2e:
0a:82:68:e8:64:a1:71:07:c4:74:b1:f7:4c:a8:b7:
1c:35:01:92:37:19:aa:72:c1:60:b7:ab:a8:d9:8c:
93:4b:9d:b2:3f:e8:67:9f:8f:6b:79:14:99:9b:16:
e1:b4:eb:81:1f:97:8e:13:a5:c1:ee:b9:0c:0b:ab:
39:7c:35:d6:00:d2:09:69:9d:fb:e9:07:9d:44:8a:
ea:b4:44:5d:02:7a:e2:5d:f9:f4:c5:f3:93:91:58:
6e:8f:d2:df:28:6e:90:73:ec:2e:b7:10:79:4f:92:
de:83:7c:87:b6:50:c8:69:1d:4a:d0:34:a2:c3:ae:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:7F:DC:15:81:3D:23:2B:3E:97:8A:67:B8:C5:B4:23:85:AC:A2
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:ea:b7:71:16:e8:5f:61:08:8a:d6:43:49:58:8b:c2:25:
36:af:ad:a1:fd:db:36:49:d2:cf:36:52:74:30:73:78:8d:2e:
5a:60:a8:79:86:dd:46:d3:67:9e:38:0b:5e:49:d8:db:5b:3f:
94:1d:bf:ca:f5:9e:29:03:78:75:a2:9c:89:6b:9e:38:31:6d:
50:c9:23:da:2f:a4:4b:7d:bb:e2:2e:70:b6:76:9c:73:91:05:
9b:fd:57:5a:29:2c:2d:7f:64:f5:50:af:a0:3e:38:26:7e:16:
a7:93:e0:94:2e:04:cd:cd:37:7a:2a:0b:c0:58:57:9b:85:4a:
37:25:e9:e1:6e:02:32:5f:29:be:a9:d5:ae:07:db:68:d5:e1:
db:d0:cb:2c:3c:d9:62:86:58:fc:c1:f0:d9:cb:01:ae:19:38:
e4:ca:c2:07:73:ad:b6:58:dd:0c:3a:97:62:e0:dd:09:73:4f:
81:27:6f:ad:ba:13:fa:b9:52:ef:2c:80:48:cd:99:09:37:7d:
cf:02:fc:9d:a8:73:ee:7f:bf:76:ad:41:90:21:3c:c5:51:85:
f7:a0:af:70:0f:2d:a2:4d:7d:b0:ad:48:ff:fe:9a:aa:62:c9:
94:9e:8e:75:1e:ea:b0:92:b7:e4:1a:eb:26:02:7b:e9:24:10:
8c:6c:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:55:02 2025 by rpki-client