Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: 0BuYHRNrItfagjea1JOIkK1j/+M9l2qkSmsC6ANntf8=
Subject key identifier: BF:C4:BE:7A:8F:C1:11:D4:1E:37:21:94:CF:7C:54:63:D8:80:C0:DB
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019A4DE16D8AB985A4E857D43B75C5FCFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 06B8
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: lbumGnGQ89rn5+i2EKxiCmBBM9m5uXChZ5kyZiBz+mA=)
3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6d:8a:b9:85:a4:e8:57:d4:3b:75:c5:fc:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=bfc4be7a8fc111d41e372194cf7c5463d880c0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:e5:16:1b:d7:65:49:b0:64:ac:c8:aa:bc:
50:f7:61:1d:fa:f2:b8:98:39:b3:3e:60:da:a0:d8:
28:bd:ec:d5:28:9e:53:87:ac:05:1a:f5:1c:98:d5:
4a:e7:28:93:e6:47:dd:cf:b5:57:14:b7:85:e2:64:
47:f5:c4:56:f7:4f:ec:ff:38:13:61:b1:e4:55:33:
5b:26:45:51:f8:86:e9:cc:43:c1:45:8f:e9:4d:46:
ee:f0:67:86:59:51:06:08:d8:2e:da:2a:96:93:cd:
77:c5:07:81:a4:8f:bb:1f:2c:1a:45:f2:23:80:ff:
ab:36:6a:71:76:79:87:fc:48:48:78:41:da:e5:ee:
1f:61:c1:b9:a8:bc:74:4d:2c:16:ae:0a:42:4c:27:
81:b7:5d:f6:f1:38:8c:96:9e:60:3f:f2:12:04:a8:
d8:1d:f3:37:b6:39:4c:ea:40:2f:ae:30:38:b5:d9:
82:7b:a6:3a:5d:ba:52:d6:6f:24:07:e3:3b:da:50:
88:a8:94:c4:a1:0a:bf:cd:76:96:39:5b:d7:8c:04:
fb:0e:7c:5b:09:eb:0d:5f:cd:4e:b8:89:69:d8:16:
b2:d2:40:49:de:cd:47:78:a6:81:8f:a9:0e:b2:f3:
79:3b:5b:0e:7b:af:c3:51:64:b8:38:04:6a:77:46:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:BE:7A:8F:C1:11:D4:1E:37:21:94:CF:7C:54:63:D8:80:C0:DB
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:58:c6:3d:d3:ac:9b:5b:fa:bf:c7:94:47:b6:4d:2a:d0:d5:
b8:55:50:ed:5e:e2:3a:31:ed:81:06:c9:40:1e:9f:fc:20:4d:
42:0b:74:6e:1e:34:80:70:89:a9:6e:71:55:32:04:2b:41:45:
6b:2f:57:85:91:65:d5:22:a3:12:83:fd:bf:3d:bf:2c:17:c6:
be:af:83:ff:7e:2e:c2:60:cf:ea:e5:3b:f4:6c:b9:06:cd:37:
e1:01:e1:89:20:42:35:a5:f1:46:0d:84:9c:6b:c5:e1:e4:ab:
25:7a:bb:c5:7e:8e:50:ea:29:88:53:23:7a:97:b7:40:cc:ac:
d3:ce:1b:2e:04:ec:6e:8e:01:76:54:5c:66:7d:b1:75:a1:81:
aa:36:f0:01:d5:52:54:03:b2:32:34:92:1d:5d:d5:3c:3f:c1:
26:f3:48:a9:9d:ce:05:81:63:3e:30:17:e9:ef:19:b4:a3:75:
90:00:4a:34:ff:2f:da:11:b4:f0:d2:f7:40:f1:95:d9:35:ae:
41:3c:32:9f:d0:ef:09:75:5d:21:80:24:16:81:da:ab:54:32:
e0:c9:04:bf:ac:92:11:48:c3:87:cf:e3:03:cb:01:52:69:39:
db:6f:dc:3b:5b:15:46:52:54:2f:d8:1e:18:27:1a:74:ab:88:
2c:6a:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:34 2025 by rpki-client