Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: GmPNgOR7g/0PhpoaaLuUZ5fdnF24u/9tm16gNJlicQs=
Subject key identifier: EC:04:E2:6E:5C:C3:1D:0A:99:A9:55:5C:3C:9C:B6:CF:D1:B5:BA:F3
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019A71B7B46EF51592BDB631DBFAF8DFA5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 38
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: h44NV/8XTnDBo+2fgoM+US97zPLoLvgjjVZwZH8LMRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b4:6e:f5:15:92:bd:b6:31:db:fa:f8:df:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=ec04e26e5cc31d0a99a9555c3c9cb6cfd1b5baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:a7:e4:b7:01:81:e1:6b:49:93:02:a2:60:
56:3d:b7:ff:4d:6a:1e:71:fd:51:47:bc:c2:c3:b4:
82:db:30:16:89:a0:37:19:ba:dc:f8:7a:63:84:2e:
49:19:a6:ec:c3:46:21:12:91:f0:ed:08:84:58:90:
b3:26:15:e6:ec:17:36:42:4c:b6:a4:5c:dd:74:1d:
7d:8c:80:f0:52:42:f6:11:1f:af:a2:e7:66:bf:1a:
47:60:a9:90:a3:b5:63:b0:2f:75:b3:b7:32:f5:93:
cf:a1:55:7d:35:e0:56:46:55:9e:28:92:06:48:99:
bd:be:1f:84:f4:07:d5:51:c8:18:be:48:1c:5b:f6:
69:59:9b:84:12:10:6a:64:55:ae:fd:11:de:d8:2d:
7e:07:ac:d4:ba:a7:75:4f:f2:ff:44:dd:7c:27:0f:
84:19:ad:1d:6f:ba:e8:52:9d:be:54:aa:67:df:22:
1b:74:2b:cf:a9:6d:26:ef:86:61:39:8d:68:1e:e3:
f9:29:91:78:b6:8f:0e:50:b0:c0:ea:41:35:b4:50:
6d:dc:2d:e3:42:47:06:4b:25:3d:f2:44:99:96:c8:
8b:fe:07:41:ab:23:d2:34:46:6b:b7:7d:45:e3:24:
71:a6:18:de:66:69:24:bb:a3:79:16:43:19:0b:86:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:E2:6E:5C:C3:1D:0A:99:A9:55:5C:3C:9C:B6:CF:D1:B5:BA:F3
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8e:b6:76:65:53:f1:90:75:61:c5:2e:68:69:c6:14:75:48:
36:00:76:1c:a3:ec:0b:f2:65:f5:95:95:56:22:b4:3f:b1:7e:
cd:49:68:d9:e3:c2:c3:b9:5f:84:7a:02:64:1d:43:3e:b2:08:
25:74:f5:c4:65:30:a6:35:b0:5a:97:f0:90:dc:aa:44:19:79:
6d:41:c5:05:0b:69:08:e5:df:32:ad:1d:56:55:7d:71:81:93:
e7:e0:2e:45:02:9d:be:a0:bc:18:b0:5b:f5:ef:9b:fb:eb:53:
33:85:9b:12:93:c9:43:f2:6b:ac:2b:0a:13:16:58:70:ac:a8:
44:bd:95:99:62:9d:62:20:9d:54:a1:6e:e0:81:13:56:35:e9:
e2:eb:40:22:64:5f:3c:a4:f5:13:b3:47:98:21:1f:90:ea:70:
4b:ca:21:73:21:eb:34:09:90:08:50:2a:6d:86:b4:4e:98:4e:
04:29:f1:9b:bf:90:c8:e1:e8:1e:10:76:a4:75:4b:41:b9:96:
83:30:0d:26:b2:48:b0:b8:f5:de:07:1e:67:87:e0:13:1d:8a:
8d:b4:95:4c:1c:90:d5:e8:8f:ea:4f:09:03:ee:8b:80:e3:27:
78:1c:84:ae:d1:17:f1:c7:ef:87:2c:c8:73:37:53:7b:0a:4f:
f5:4d:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:57 2025 by rpki-client