Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: 60++UXdyynVJ9yvq1ps7HqRMDENyQ2avGOuYAfzoQnU=
Subject key identifier: 02:53:44:9D:A6:D7:23:7D:FB:D9:25:24:3A:A3:C4:6E:57:BF:8B:C5
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 01967EA1C273B4E053A8BB854F0ED1674691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 139C
Signing time: Mon 28 Apr 2025 23:00:52 +0000
Manifest this update: Mon 28 Apr 2025 23:00:52 +0000
Manifest next update: Tue 29 Apr 2025 23:00:52 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: dy6w4LJykfCl5q6JaY+dKA0uHEn+vv/fUsPFbR6PfB8=)
2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:c2:73:b4:e0:53:a8:bb:85:4f:0e:d1:67:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Apr 28 23:00:52 2025 GMT
Not After : Apr 29 23:00:52 2025 GMT
Subject: CN=0253449da6d7237dfbd925243aa3c46e57bf8bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:83:08:09:17:3d:83:50:cc:ce:d9:fb:a8:
78:37:f6:6c:4f:49:89:b6:a6:2b:ca:61:56:63:f6:
a2:5c:be:01:09:e1:54:97:7b:05:d9:5c:3c:44:92:
e7:14:63:8a:40:d4:fe:b3:a3:33:bb:95:1a:80:ff:
fc:c7:74:99:2d:bb:b9:74:e4:ee:93:e0:5e:81:10:
b9:cb:a5:ff:5c:ab:78:06:3f:84:be:73:56:d5:c4:
93:1e:ac:c1:9a:d6:aa:62:b7:ac:3b:26:18:3e:84:
ce:3f:c8:41:8e:4e:87:7b:0e:cd:8e:cd:e0:51:3b:
ea:2d:25:dd:df:34:52:c3:04:38:2a:88:22:db:fe:
cf:65:7e:fa:36:8d:12:01:c4:e6:f2:38:21:58:88:
ea:ee:e2:91:ee:fd:c8:45:6f:a3:e6:40:72:7a:28:
a8:d0:e2:02:68:c2:15:33:de:fb:c9:4b:94:0f:c2:
02:fe:05:73:1f:42:b6:8c:0e:76:1e:63:bf:9a:e4:
8e:da:e5:51:ed:1d:7d:82:a4:e5:2f:b4:67:33:26:
ac:b8:16:31:e9:b9:c5:c3:7c:87:f1:69:37:6f:ee:
1a:96:a9:11:a4:5f:e7:d2:5b:64:83:50:55:b2:7e:
9f:3b:20:d2:7b:97:d6:a6:24:15:39:9a:24:40:5e:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:44:9D:A6:D7:23:7D:FB:D9:25:24:3A:A3:C4:6E:57:BF:8B:C5
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:46:23:6c:5a:59:01:00:8a:57:66:37:6d:b7:9c:42:8d:a2:
6b:5a:70:b6:d0:67:70:5c:9c:d9:23:12:ea:92:56:69:f3:48:
eb:a1:d5:ef:47:90:2a:28:72:01:12:52:e1:db:ea:f6:ce:d0:
05:df:bd:fb:39:e4:7d:82:b0:e2:ea:bd:e4:5e:1b:e5:e7:f7:
53:d1:7e:39:d2:4b:b0:56:a1:03:61:fa:37:46:7b:1b:1a:f0:
34:4b:d8:01:0b:fa:fb:b6:e1:a3:24:a0:14:49:23:1b:e8:cb:
92:31:02:73:70:63:3b:4a:56:f6:61:f5:b4:b6:c5:69:fd:f0:
d4:7a:6e:83:0a:2d:d7:33:70:71:3c:ab:01:29:86:71:c7:03:
28:af:58:b3:e5:9d:12:1c:3d:c0:0d:c6:48:3a:8c:d9:e2:ed:
45:99:a2:a3:40:c4:82:ac:10:c6:e2:ca:b1:19:42:07:bb:71:
b4:42:01:5f:53:c0:80:47:a0:dc:7f:72:0d:f0:41:db:da:3f:
ba:09:6b:d2:00:e6:bf:6a:81:26:85:dc:20:5b:71:53:41:f7:
5d:53:b4:92:63:c3:cd:10:fd:2b:9f:ab:0e:1d:d2:7c:ed:66:
7b:45:ce:d1:c1:3f:c5:15:07:92:c4:fc:5b:10:9b:1d:2e:d3:
09:87:72:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+ocJztOBTqLuFTw7RZ0aRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWZkYjgwZWZmNWJjZTE2NTRhYzhjNmI5MjJlNzgxZmQy
ZDM2YTUwHhcNMjUwNDI4MjMwMDUyWhcNMjUwNDI5MjMwMDUyWjAzMTEwLwYDVQQD
EygwMjUzNDQ5ZGE2ZDcyMzdkZmJkOTI1MjQzYWEzYzQ2ZTU3YmY4YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyDCAkXPYNQzM7Z+6h4N/ZsT0mJ
tqYrymFWY/aiXL4BCeFUl3sF2Vw8RJLnFGOKQNT+s6Mzu5UagP/8x3SZLbu5dOTu
k+BegRC5y6X/XKt4Bj+EvnNW1cSTHqzBmtaqYresOyYYPoTOP8hBjk6Hew7Njs3g
UTvqLSXd3zRSwwQ4Kogi2/7PZX76No0SAcTm8jghWIjq7uKR7v3IRW+j5kByeiio
0OICaMIVM977yUuUD8IC/gVzH0K2jA52HmO/muSO2uVR7R19gqTlL7RnMyasuBYx
6bnFw3yH8Wk3b+4alqkRpF/n0ltkg1BVsn6fOyDSe5fWpiQVOZokQF5FqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJTRJ2m1yN9+9klJDqjxG5Xv4vFMB8GA1UdIwQY
MBaAFAof24Dv9bzhZUrIxrki54H9LTalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgt
MDRiYzg3YTI5ZTRkLzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDU1ZTQtYzBjOS00MzE5LThiZDgtMDRiYzg3YTI5ZTRk
LzEvQ2hfYmdPXzF2T0ZsU3NqR3VTTG5nZjB0TnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkYjbFpZ
AQCKV2Y3bbecQo2ia1pwttBncFyc2SMS6pJWafNI66HV70eQKihyARJS4dvq9s7Q
Bd+9+znkfYKw4uq95F4b5ef3U9F+OdJLsFahA2H6N0Z7GxrwNEvYAQv6+7bhoySg
FEkjG+jLkjECc3BjO0pW9mH1tLbFaf3w1Hpugwot1zNwcTyrASmGcccDKK9Ys+Wd
Ehw9wA3GSDqM2eLtRZmio0DEgqwQxuLKsRlCB7txtEIBX1PAgEeg3H9yDfBB29o/
uglr0gDmv2qBJoXcIFtxU0H3XVO0kmPDzRD9K5+rDh3SfO1me0XO0cE/xRUHksT8
WxCbHS7TCYdylg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:15:07 2025 by rpki-client