Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: CyrA/uUOtTapyQj3ymyFA4BWV43x0kcbVZl5ayc9l9g=
Subject key identifier: 79:CD:EA:50:13:F9:BA:70:D8:12:2F:B8:75:37:14:50:C7:C2:CC:21
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 019A4F9921BFFDBE4A296BDC2AD4C12807AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 1596
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: prlTrxNDmsKqzhy+6fhJBxfrSbLBxZMm5bdt5tf1yFk=)
2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:21:bf:fd:be:4a:29:6b:dc:2a:d4:c1:28:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=79cdea5013f9ba70d8122fb875371450c7c2cc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:a6:44:4a:f9:4b:e3:59:97:2e:37:c7:ed:
10:93:64:a9:13:67:3a:2f:01:b4:36:73:24:97:6b:
d8:c8:75:e9:c8:35:7b:f4:ea:33:35:bc:d5:9f:8b:
cc:80:77:6c:ae:c5:d0:60:84:29:1f:52:8e:d6:75:
13:6f:d9:7c:87:53:3f:5f:cf:64:4a:40:c3:e6:30:
1e:55:3c:48:1a:9e:54:7c:bb:99:74:74:25:da:2d:
73:9f:02:23:10:b3:96:27:6d:dd:ab:e9:ec:9d:73:
aa:db:83:12:a1:64:18:39:d5:4e:7b:62:96:ff:15:
41:61:d2:b3:69:9b:5e:7f:88:be:22:a3:ed:fe:48:
5b:f2:be:4c:5c:c8:0e:87:cf:4a:60:93:3c:71:a0:
eb:a2:4c:a0:4e:12:03:dd:c5:45:e0:17:4b:a7:fe:
66:df:de:cf:28:b1:31:c7:ac:67:55:c6:d7:f6:8e:
f7:8d:99:25:de:cf:5f:69:98:a5:32:4a:74:40:15:
a6:f9:42:55:2c:4b:71:d3:40:4e:8a:e3:4b:47:45:
ef:9a:2d:a7:8c:df:e5:cf:0a:c3:91:d3:87:15:bc:
14:42:50:fa:62:b0:d5:e4:7d:5f:ce:91:f1:fd:8e:
f8:27:fc:cf:4d:97:34:0f:6e:3e:d7:57:9b:a6:38:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:EA:50:13:F9:BA:70:D8:12:2F:B8:75:37:14:50:C7:C2:CC:21
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:74:3d:37:a6:b9:53:d4:4e:ff:bb:e3:42:ac:92:2e:73:
63:00:a7:d7:31:e2:8d:b1:10:66:78:39:a4:06:05:14:6e:01:
0d:cc:c3:74:1d:d6:7a:a1:37:40:89:31:74:16:c0:6a:f1:a9:
23:f5:77:cc:bf:24:26:df:20:e1:d3:df:5b:4e:8a:8b:94:b9:
08:53:5f:bd:56:98:7f:f1:69:67:bb:de:4b:c5:f8:b8:f8:6e:
21:82:81:a3:db:b7:5a:a4:7e:ad:db:78:27:c7:08:0b:24:8f:
30:c1:72:7d:76:20:dd:c9:c8:02:0d:20:f6:60:a6:12:64:88:
47:15:7d:07:90:87:be:77:3e:8d:98:d0:91:a6:32:3e:02:ff:
b8:86:33:f9:b9:62:d7:69:67:88:a6:93:02:11:e6:21:27:01:
74:3c:a8:db:0c:3a:b3:9a:87:16:f0:16:96:20:9c:b3:ce:2c:
fa:aa:25:fe:03:3e:4c:23:a8:19:fc:07:aa:20:93:d1:cd:21:
3c:a8:5a:f8:72:c2:98:7f:7d:31:fd:97:c8:f0:1d:09:c5:7a:
a3:51:7e:4c:32:96:16:12:7d:31:9b:e5:1f:75:38:f9:bd:2f:
32:0c:39:aa:7f:1a:19:bd:3e:12:74:d8:0b:65:fe:bf:62:00:
95:81:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:40 2025 by rpki-client