Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: 6YvZg4HhGhHQ460k3AEdSfE7DUOAaDARhbq0lpTMiw8=
Subject key identifier: 4D:AA:1B:23:29:38:9C:A5:14:AC:0E:85:AA:BB:88:7A:B9:EA:6F:64
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 019A5375EDD3EFDC68C2B963D4B74CCAC794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 1598
Signing time: Wed 05 Nov 2025 10:00:28 +0000
Manifest this update: Wed 05 Nov 2025 10:00:28 +0000
Manifest next update: Thu 06 Nov 2025 10:00:28 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: 45CpgyiDZuNKgxQ6b+HWvvHW3yInMn2VnsFInnnwMbQ=)
2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ed:d3:ef:dc:68:c2:b9:63:d4:b7:4c:ca:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Nov 5 10:00:28 2025 GMT
Not After : Nov 6 10:00:28 2025 GMT
Subject: CN=4daa1b2329389ca514ac0e85aabb887ab9ea6f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:4a:e7:67:00:57:3a:db:a8:09:00:18:1b:
66:42:a8:a0:17:66:7c:51:56:da:e6:d5:d2:3b:73:
03:a5:4d:de:9e:0e:14:02:82:ba:27:73:ee:39:9d:
25:13:1e:f5:d3:d9:20:31:b5:4e:29:ef:b6:83:80:
27:f6:68:00:c5:63:68:65:bf:44:c5:06:cf:cd:a7:
2a:e6:01:fe:a0:e7:28:b8:39:fb:03:1e:95:c0:b9:
c1:97:50:4b:98:59:75:8b:60:52:e2:08:64:20:e5:
e7:91:74:14:75:4a:ba:f2:e2:35:b9:2b:21:d0:e7:
ee:16:8f:0d:e0:9b:a3:3f:66:60:7d:9b:1d:ff:e5:
5b:8c:63:4f:da:cb:5e:a0:86:98:79:5b:49:31:a9:
cc:03:9b:61:4c:44:d0:7c:b9:5a:9b:ad:c8:75:51:
c9:7b:78:42:b1:99:eb:0a:1b:2f:fd:f6:94:09:c2:
8c:e8:30:1e:15:ea:a9:ef:2c:b4:f5:ae:cf:5c:e5:
4a:31:ed:f3:a6:50:96:db:e8:14:9a:d9:e5:08:cf:
97:78:89:24:7f:39:e1:d9:8d:1f:a9:e2:3e:99:86:
2c:2d:ef:34:d4:e9:31:5d:1e:be:de:fa:5c:cc:e4:
45:4e:0c:77:5f:c6:e6:ff:ed:e6:03:2b:06:d6:46:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:1B:23:29:38:9C:A5:14:AC:0E:85:AA:BB:88:7A:B9:EA:6F:64
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:aa:25:a3:a5:d4:08:93:86:8f:f7:05:44:89:48:e3:5d:
31:eb:24:0d:7e:0a:fd:64:4b:a4:88:ef:0e:2a:53:06:8e:bc:
c3:94:9e:39:a0:b2:b1:d2:12:2b:0c:44:ce:59:da:77:17:fb:
2b:82:26:42:e3:77:89:42:56:32:3a:79:17:f2:bc:48:0c:86:
f6:ae:87:77:b7:3d:9c:8b:9d:6d:54:4a:5c:72:1e:fa:fe:88:
cc:a4:75:47:20:5c:8a:67:c8:86:c0:38:70:b2:66:9a:ba:65:
09:10:f0:1d:63:95:a9:a6:97:c5:73:7b:6e:2d:aa:ea:e5:08:
52:88:87:ed:9c:a1:70:8b:f8:e1:38:3c:df:61:5a:11:26:e3:
45:5e:7b:63:2b:f3:09:9f:17:90:12:59:a0:62:0f:60:63:3f:
00:31:00:1e:0f:54:49:44:86:da:74:af:0b:9a:37:5c:a0:14:
f5:2d:8b:1a:a8:bb:dd:ca:13:f3:1f:71:37:02:0c:3b:d5:83:
2d:7c:96:f6:6d:2f:40:c2:59:ac:54:ab:50:ff:d6:69:74:73:
88:91:0b:fc:86:da:6d:00:59:78:68:1f:9c:72:d5:8c:8f:a4:
d9:f5:5e:f9:1e:b6:b3:88:54:be:01:a6:bd:0f:e7:27:7b:a3:
c5:ea:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:06 2025 by rpki-client