
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File: chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier: Bg/wVKJTaNAkmB/6yUgFJArrPajxRO0hQJZ/xcgkvsE=
Subject key identifier: 75:F9:C9:E6:7E:4E:54:8F:53:72:EA:0E:FA:B1:64:06:0A:C3:1D:D0
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer: /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial: 01975045AB14054AA362615F534A768B74B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number: 0C65
Signing time: Sun 08 Jun 2025 16:00:32 +0000
Manifest this update: Sun 08 Jun 2025 16:00:32 +0000
Manifest next update: Mon 09 Jun 2025 16:00:32 +0000
Files and hashes: 1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: nnJRD5pEvstL9dZnmr3LDSuY2v1dVmAGGkdRHBJhf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:ab:14:05:4a:a3:62:61:5f:53:4a:76:8b:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Validity
Not Before: Jun 8 16:00:32 2025 GMT
Not After : Jun 9 16:00:32 2025 GMT
Subject: CN=75f9c9e67e4e548f5372ea0efab164060ac31dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:97:93:11:b4:db:b2:5a:63:6a:c5:79:be:
7f:3b:c4:df:65:11:84:99:88:df:ac:c7:47:bf:df:
75:ac:3a:1d:38:61:b8:8c:3f:80:b2:aa:6d:18:e8:
5a:0a:20:d7:4b:11:0e:80:af:a8:bd:4c:d5:30:26:
04:1e:58:bc:ec:49:58:72:26:14:57:f7:bc:e2:7c:
0f:d3:59:a7:58:78:71:96:f5:cf:53:fe:33:8f:9e:
11:db:d1:ad:71:19:93:3c:64:d2:8f:6f:61:66:f0:
61:8a:4e:5b:4a:b5:67:9d:ac:70:c2:03:5a:19:3e:
25:e6:d2:49:96:00:7a:c7:df:76:dd:8a:bb:52:17:
20:19:cd:d4:14:c8:96:1a:ef:69:16:c1:30:fe:1c:
19:6e:ae:ee:8e:0a:18:60:56:c8:71:e4:2b:7f:29:
0e:02:77:1b:28:36:cc:db:00:3c:b6:50:1b:36:38:
a5:15:90:f3:2b:7d:b5:31:15:88:5a:ee:0c:5b:ba:
09:58:de:13:e3:0e:52:d5:b3:d6:ff:a1:21:58:0b:
03:c4:90:a0:05:6e:cc:82:58:b3:c0:7d:6d:d6:91:
d7:d8:cf:f8:29:a5:5d:79:c7:c6:2b:69:53:26:ff:
08:3a:3e:3a:b7:9a:fa:c6:2f:30:99:8e:59:ce:ce:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:C9:E6:7E:4E:54:8F:53:72:EA:0E:FA:B1:64:06:0A:C3:1D:D0
X509v3 Authority Key Identifier:
keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6c:ba:ac:7a:02:9e:64:f5:e1:d2:5a:04:4c:57:ea:14:e2:
ec:43:c8:4c:35:04:5e:03:12:b5:fc:ad:19:d6:47:05:5f:f3:
23:75:4a:69:20:61:56:7d:e5:86:9a:76:e9:23:dc:ff:3a:62:
1d:b9:f7:27:60:63:76:ba:3e:63:51:10:4a:aa:fa:47:c3:43:
28:b5:f7:d3:a0:1a:b1:14:05:27:fc:ec:59:6d:ea:e5:eb:48:
15:69:40:c7:ca:ee:35:ca:db:ac:02:d1:df:52:08:29:0b:8d:
b3:6b:fd:4a:7f:3c:eb:dc:91:bb:11:04:37:01:28:8f:d1:56:
a7:64:dc:b6:bf:04:25:c5:32:2b:38:40:c1:05:22:8a:6b:a8:
85:fe:ac:ab:cd:29:9b:ed:e6:19:ba:b5:bc:6a:0f:9b:d0:c0:
05:d5:ca:51:78:14:e2:a6:9d:50:51:d1:4a:a3:2e:9d:84:96:
48:3c:76:27:7b:0f:99:62:f6:71:34:cf:8d:00:41:5a:a8:ec:
aa:91:e0:62:0b:20:3e:4e:02:69:3c:6d:cf:2b:d5:51:87:2b:
8a:29:17:d3:39:b7:9e:3c:a7:6f:9a:c3:53:dd:97:93:fe:36:
6d:82:bf:09:8e:73:5c:36:51:6c:26:39:6a:9d:77:45:8e:22:
b5:24:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:52:51 2025 by rpki-client