Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: 1TE2iiNa0w/70OpF8pntMIq/sNvDLekhuAvrDK7vHLY=
Subject key identifier: 67:57:13:98:50:DE:2F:94:45:A0:B9:54:A4:93:DD:3B:86:17:E6:81
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01976BF3EFD4B8B84D94329216CDDF7D5245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 5pFczT3r4SMz9L5oetLWqfCfuyL5byM1Rgbn9clPqm0=)
3: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (hash: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ef:d4:b8:b8:4d:94:32:92:16:cd:df:7d:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=6757139850de2f9445a0b954a493dd3b8617e681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:a7:ec:03:df:ec:6c:2a:7c:2e:d3:1f:1c:
81:17:47:2f:1c:db:e4:34:5b:f6:c4:15:40:7f:11:
aa:8a:4b:2d:d3:ef:8d:70:ad:26:8c:07:39:94:64:
ca:29:f0:10:69:8d:bc:a8:fc:22:a3:93:e9:79:43:
87:d9:56:ed:da:db:e9:dd:8a:cc:3c:d9:4c:6e:eb:
7b:32:3c:4a:fc:bc:80:22:a5:4f:78:a0:8c:cd:63:
d7:48:7c:7a:3e:26:b7:60:5b:c8:99:1b:bb:1a:60:
e9:2c:54:fd:a2:47:4d:8d:17:24:60:3d:02:76:f6:
2b:7d:bc:53:18:bc:6d:39:89:25:a9:1e:69:ec:68:
c1:d6:ee:a2:ff:5b:81:61:a5:dd:a5:40:ac:74:61:
a2:75:83:58:da:e3:e1:b2:ec:51:a1:92:8e:7d:10:
8b:1a:1e:b2:7a:3b:0b:59:0a:a8:5a:f4:e9:4d:63:
f6:5c:de:5c:77:e7:2b:ef:87:87:1b:77:c0:f7:47:
8c:41:06:41:d4:9c:3a:ea:5a:97:e9:10:32:97:a8:
ec:9d:06:49:5c:d2:0d:78:5e:5a:a2:5e:4a:6a:c2:
07:9a:e8:85:fc:b7:c7:b5:a3:f6:b8:d9:f6:9e:33:
a0:42:c4:f7:5a:78:d8:1b:3e:7a:22:eb:5d:13:96:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:57:13:98:50:DE:2F:94:45:A0:B9:54:A4:93:DD:3B:86:17:E6:81
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:86:4c:af:7f:14:3c:06:c8:d5:4d:b8:60:53:c8:01:29:8e:
5e:d4:32:7c:c5:56:40:c7:f2:2a:d9:c3:da:ae:f2:0a:59:68:
24:67:ac:a0:1a:30:91:37:a4:12:2c:21:16:4d:b0:3c:66:41:
aa:76:6e:73:ad:08:92:8a:7d:4f:94:fd:71:d9:d7:37:e3:b9:
69:60:16:b6:43:c2:a3:17:8e:02:aa:5f:57:a5:38:69:9b:89:
7b:55:3b:59:86:6c:9b:5c:ee:08:44:66:c6:53:4b:42:71:34:
16:9f:75:a3:d6:a3:4f:1c:96:c1:c3:b7:70:9a:00:5e:85:59:
fb:b0:d1:5d:8c:db:ea:c2:11:2a:3a:49:83:48:57:4e:b7:ad:
7a:be:91:b8:7a:01:8c:92:fd:36:7e:b9:2c:b0:79:38:ab:be:
90:b0:36:5b:7c:4d:e8:dd:1b:78:d1:c8:96:41:ce:39:3e:e2:
f5:64:5c:6d:97:46:42:d5:e3:53:0e:6c:61:b2:de:4f:9f:d8:
90:7a:b7:c8:09:15:a6:04:ed:3e:8e:da:8d:09:53:c9:c0:14:
8f:dc:1e:01:d1:9c:a9:04:f4:ce:1c:eb:cb:3f:d0:6c:c1:7d:
7e:9a:54:b7:57:03:c8:bf:ff:84:31:d7:19:e4:ca:d2:23:1e:
41:2f:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:10 2025 by rpki-client