Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File: chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier: a8XJVa0a9pXdaCcv9ZOrupHdiC1jy3j/AVa2YJUhkrU=
Subject key identifier: 16:9D:CE:E7:57:08:3A:83:9A:D4:EC:79:E1:12:5D:5B:36:29:52:45
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer: /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial: 019510C79022125D3432B67B2639ED850F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number: 0B3B
Signing time: Sun 16 Feb 2025 22:01:08 +0000
Manifest this update: Sun 16 Feb 2025 22:01:08 +0000
Manifest next update: Mon 17 Feb 2025 22:01:08 +0000
Files and hashes: 1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: d/bljt90bwSFzb9MMshoOZ2su63w1KkENoqw46EIopo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:90:22:12:5d:34:32:b6:7b:26:39:ed:85:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Validity
Not Before: Feb 16 22:01:08 2025 GMT
Not After : Feb 17 22:01:08 2025 GMT
Subject: CN=169dcee757083a839ad4ec79e1125d5b36295245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:df:e2:67:2f:58:31:bb:73:4b:32:0d:81:
72:45:72:14:52:f2:c6:ce:5c:50:02:fd:25:c8:97:
91:fb:f7:06:b3:36:d5:f9:2a:e5:27:91:0e:19:53:
ac:41:33:00:4e:21:bd:ec:73:d5:cc:79:12:6d:9e:
7a:71:92:c5:a8:6c:ca:a2:85:cf:47:31:14:10:43:
b8:4e:60:01:42:6e:8c:c5:1c:aa:24:c2:5a:f7:78:
d8:89:83:c5:fc:c4:1a:ba:d1:10:a3:91:1a:9c:98:
15:b6:63:80:89:2f:8c:c4:ba:06:c7:8c:5b:bf:48:
45:a7:a4:e8:e2:5f:ac:1b:68:05:1f:2f:69:c3:af:
10:99:7e:36:79:ba:dd:cb:9d:ac:08:c2:d5:db:d6:
b3:c8:b3:50:0c:17:6e:f7:9d:69:b6:3d:49:e7:40:
25:78:5c:3a:d0:03:b7:27:01:3e:bf:93:a6:52:93:
c6:5d:9b:df:11:0f:a6:67:9e:a6:f2:23:21:1c:30:
60:45:62:d1:89:9f:31:7e:9b:b3:d0:2c:ed:8c:94:
e2:63:19:ce:fd:15:7a:74:cd:49:09:4e:dd:49:f7:
ac:49:43:5c:64:94:0d:4d:2a:c7:f9:9e:77:31:04:
24:f6:9f:ae:af:6e:fc:f5:59:b6:25:45:ab:53:c7:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9D:CE:E7:57:08:3A:83:9A:D4:EC:79:E1:12:5D:5B:36:29:52:45
X509v3 Authority Key Identifier:
keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:c9:17:f6:0e:b8:75:2e:2f:a2:e8:05:00:89:15:ad:2c:
9a:b8:17:40:ed:9f:3f:07:f4:46:ef:72:a2:2f:47:e3:7c:c8:
3e:da:14:74:e3:b5:ef:1d:26:2e:66:c3:c7:ba:58:c6:71:62:
58:7b:c4:4f:b4:3a:58:26:bd:f3:cd:65:68:61:9e:e9:64:73:
a4:c8:d1:eb:42:67:ae:c4:46:76:ca:25:69:73:6a:07:9f:6b:
70:96:09:00:c4:a1:13:57:00:c6:0b:95:9a:9a:41:3e:fc:1e:
0c:bf:04:8e:0a:5c:cf:2f:cd:36:0a:ff:d7:33:e9:6e:73:5c:
08:70:a0:b7:62:a4:c6:4c:ee:a1:74:2e:ca:dd:41:a3:31:07:
38:f7:bb:3e:3d:fd:11:17:5a:37:3b:07:b3:7a:ac:ab:40:ec:
c5:0c:53:fd:62:5d:15:6c:35:45:d1:27:90:35:83:5a:9f:8e:
bd:92:2f:77:e8:42:94:c2:76:43:c2:a1:b7:f6:93:9a:cb:68:
ca:73:66:63:cd:9b:a6:35:43:11:b3:b4:b8:91:01:92:af:2f:
4d:22:0f:f6:68:68:2e:28:03:7c:06:db:1d:e3:8a:19:53:fb:
0d:f2:2b:e6:b0:86:f2:cd:f7:76:97:1f:d5:cb:1f:46:27:51:
34:51:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:42 2025 by rpki-client