Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File: chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier: YCBDQecXVmuDy3Ff43O+Zsa8T70qegwe2PGO01asJ4o=
Subject key identifier: A4:69:5D:FE:02:EB:FC:E1:C2:71:A1:3F:34:E5:82:85:5A:24:6F:DC
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer: /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial: 01965725D68FB05E8C30DCC14AFF3480F3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number: 0BE4
Signing time: Mon 21 Apr 2025 07:00:19 +0000
Manifest this update: Mon 21 Apr 2025 07:00:19 +0000
Manifest next update: Tue 22 Apr 2025 07:00:19 +0000
Files and hashes: 1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: 5pmK21qzeQz2/zoTiOP9LtzSBDXC+nvGcAIL3K5L+S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:d6:8f:b0:5e:8c:30:dc:c1:4a:ff:34:80:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Validity
Not Before: Apr 21 07:00:19 2025 GMT
Not After : Apr 22 07:00:19 2025 GMT
Subject: CN=a4695dfe02ebfce1c271a13f34e582855a246fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:89:d8:8b:fe:69:c6:4a:71:d1:aa:1c:b2:
a2:c7:20:a2:9a:b1:22:82:86:a9:30:26:b7:54:9e:
18:5d:dc:81:bc:04:ca:29:0f:3b:66:ab:7e:4f:09:
aa:73:25:31:5d:35:1d:ba:d8:05:62:16:d4:29:9a:
73:0e:7f:03:7a:bc:21:ce:b1:55:d7:20:66:79:51:
46:93:2e:39:39:34:18:94:c1:13:12:f9:65:ed:a8:
da:51:1e:0b:c9:8f:d4:69:31:5b:93:db:26:c0:ad:
51:27:5f:1d:8f:dd:5e:ed:d2:d9:8d:86:b0:8e:8f:
10:bb:b3:bf:3d:8e:39:2f:6d:e1:cb:4a:d9:06:61:
c2:73:f2:4d:00:a0:0a:86:75:e2:18:b4:aa:4a:14:
50:ff:13:5e:3e:aa:b4:5f:fb:44:fa:48:89:11:9c:
05:9e:4e:f5:4c:fb:11:87:e4:28:1b:1d:ee:32:0b:
51:27:7c:b2:b4:58:7c:7d:e8:7e:bf:09:02:32:a1:
f6:b3:e7:d2:36:4d:3c:d6:9e:13:de:80:55:2c:7e:
ff:10:2f:53:91:cf:fe:4e:e3:38:74:96:f7:c0:85:
31:12:02:c0:70:5a:51:fb:d9:46:45:c0:4b:c7:50:
23:04:61:19:ab:fd:ad:e8:e8:c6:a2:5a:54:59:76:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:69:5D:FE:02:EB:FC:E1:C2:71:A1:3F:34:E5:82:85:5A:24:6F:DC
X509v3 Authority Key Identifier:
keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:4c:d0:20:37:cb:35:ec:c8:bf:4e:0f:f5:f6:b7:ff:21:
6b:20:3a:7b:cf:50:ab:78:6d:84:54:5d:f5:78:7b:36:54:dc:
36:20:e2:b6:80:09:1f:62:ce:b2:e4:da:8c:bd:26:d0:f9:49:
d8:5d:b0:c3:cf:67:78:8a:c0:4f:6f:82:98:4d:2d:a7:97:e3:
ed:7f:cc:d6:9b:1f:89:3b:36:bb:5b:33:2b:16:de:a2:07:c6:
9d:ca:df:d2:ad:03:ba:be:da:48:a6:13:a9:de:d2:af:d1:93:
6d:88:d7:08:ee:9b:58:24:88:67:a2:cf:aa:a5:cc:a3:f4:57:
d0:3b:68:4c:19:46:35:0b:98:8c:ed:b4:9b:68:65:61:75:6e:
92:a0:9e:65:d2:29:fe:8b:2f:b0:b5:af:ce:ec:a9:32:65:e2:
06:f8:b7:2b:bd:72:e2:87:e0:80:dc:f2:1d:e9:66:ca:a7:a4:
20:ce:5b:78:23:cc:24:3a:b8:60:c1:6a:15:a7:ae:ca:8f:ff:
e2:e4:5e:4d:d4:ea:58:8f:8c:23:df:48:84:f8:ca:c1:4f:bb:
5e:de:d2:08:e4:ec:7e:76:51:65:b6:25:f6:86:b1:d7:f0:46:
eb:a5:80:6b:25:d5:00:ea:49:39:87:db:3d:a7:95:e4:af:ec:
c0:e4:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:37:28 2025 by rpki-client