Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: Qc+KDmuH9EOzKPXFVpsY32rdHtj4QtgU8rlbzxMrnAI=
Subject key identifier: 54:74:75:EF:98:FC:AE:65:8E:BF:57:9E:50:99:52:B4:48:9C:ED:DF
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01987298A43686834426AFFDB19448CA92D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:01:02 +0000
Manifest this update: Mon 04 Aug 2025 01:01:02 +0000
Manifest next update: Tue 05 Aug 2025 01:01:02 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=)
3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: Rzr+jdO/7ynaP2ySI3DyJBWCJitphmccsyjArk2obsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a4:36:86:83:44:26:af:fd:b1:94:48:ca:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Aug 4 01:01:02 2025 GMT
Not After : Aug 5 01:01:02 2025 GMT
Subject: CN=547475ef98fcae658ebf579e509952b4489ceddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:b0:98:61:68:05:03:59:7d:9a:29:a7:d3:
fc:1f:96:5d:13:19:8f:0c:72:36:08:b9:e9:aa:1b:
28:53:6a:61:3d:56:dc:33:ea:78:11:78:79:5a:e6:
8e:dc:3b:80:7c:77:47:64:c0:d2:f4:16:7d:9f:9b:
53:20:79:aa:fa:96:e4:2b:71:e1:db:71:1d:a3:a8:
40:47:f7:e1:90:7d:88:4e:21:07:57:3e:92:ac:6a:
57:97:32:67:6a:41:03:66:cc:9b:28:24:e3:7f:cb:
05:02:45:a7:46:36:d8:84:31:07:00:12:ab:a3:c2:
6a:b4:5e:67:9a:40:c5:1c:e3:a0:3c:c9:f1:9d:41:
dd:90:2c:ad:3a:43:7e:68:00:8f:be:ce:5a:81:25:
dd:0e:a3:34:15:56:63:bf:85:28:25:52:99:52:2f:
90:72:47:4c:a1:73:e9:3d:69:82:dc:42:8d:78:91:
30:e1:2e:76:cf:77:53:ed:b0:c8:52:c3:86:15:1b:
6f:12:98:7c:7b:56:77:a6:0d:0b:7e:0a:d9:db:a0:
c0:67:95:32:01:b4:0e:5a:f4:7d:2d:c9:cf:42:1d:
59:5b:63:a5:14:3a:0e:54:a1:7d:01:dc:3b:32:e6:
43:e1:e0:a1:ee:fe:2c:fe:90:1b:0d:3d:8f:e4:4b:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:75:EF:98:FC:AE:65:8E:BF:57:9E:50:99:52:B4:48:9C:ED:DF
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:77:cc:e1:a2:9e:dd:0b:4b:19:8f:d0:0d:c9:c9:bb:f9:f0:
eb:a6:fa:d2:00:43:ec:71:8f:91:39:98:d6:b7:f5:4f:a1:9f:
b0:e5:b2:4c:28:82:68:ee:b8:8e:19:c7:9e:df:03:d9:38:1a:
a7:62:2f:f7:1c:a6:68:52:db:ff:53:a0:55:13:84:c1:19:36:
74:d4:ea:c7:71:1a:c1:8a:25:0c:af:f6:4e:de:17:26:e9:86:
ea:76:80:3d:10:a8:d5:de:61:4e:bc:2b:8d:87:35:d7:2b:b4:
86:ff:5b:a1:9a:14:ae:15:8d:7e:2b:e6:da:e9:d8:29:de:04:
d0:3f:19:3b:08:3d:78:d9:25:5e:63:8f:78:a2:f5:bf:07:69:
39:96:96:fd:f9:6d:76:bd:3c:f6:ad:5e:b2:56:64:86:7c:73:
05:72:59:38:cb:eb:25:55:45:33:0e:c2:c9:5b:46:d1:7d:b3:
63:8c:50:0d:27:58:dc:2b:fd:7d:a5:11:2c:8c:07:f5:cc:1e:
95:ae:53:f9:a5:dc:09:09:6c:16:19:be:0a:86:17:d2:68:5d:
89:cf:66:02:68:a4:b5:94:c8:26:70:ac:fb:97:f9:2f:24:27:
4e:49:07:05:bc:1c:56:9c:2b:8a:4e:f6:91:4d:90:38:7d:97:
24:0f:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:47 2025 by rpki-client