Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: dukO/jO8EOxsjolEX1z3V/VY5b40IwvWp0EuKOwGp+I=
Subject key identifier: 69:F1:93:33:A3:8C:FF:E1:57:7E:D4:82:47:CC:72:47:02:9D:7B:6D
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 01967679F2E42A5261BE91EB5A2D63E06516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1092
Signing time: Sun 27 Apr 2025 09:00:25 +0000
Manifest this update: Sun 27 Apr 2025 09:00:25 +0000
Manifest next update: Mon 28 Apr 2025 09:00:25 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: 1rnQ7oKJb1S5kLZ48haZotzyZ0Yapx/NYFHqz7bg5vw=)
2: NvT_wFcOabTSwHjdknxz6JGnZ8I.roa (hash: lFyxpUYtcwCIZ5XiQs0m/x98qO3BgNwNjJtNUFhds8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f2:e4:2a:52:61:be:91:eb:5a:2d:63:e0:65:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Apr 27 09:00:25 2025 GMT
Not After : Apr 28 09:00:25 2025 GMT
Subject: CN=69f19333a38cffe1577ed48247cc7247029d7b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:72:08:ec:57:97:b4:ae:d3:03:be:a3:ce:
d5:be:85:24:58:6e:a8:26:bc:8d:83:eb:23:df:85:
e7:fc:07:ff:67:ba:ac:31:79:a2:82:f5:fe:b0:c9:
7d:ca:f0:b9:56:78:6b:7f:a8:29:e0:0a:75:6a:6d:
e0:a9:5b:35:17:83:fb:a6:ee:6b:ef:30:12:b6:28:
bf:00:16:43:0d:c2:68:43:6a:b7:5f:99:02:d1:e7:
8e:42:68:be:6c:fa:82:27:12:86:37:4b:4e:06:05:
23:a9:7c:e5:a7:7c:c0:32:b9:3b:cf:e3:dd:a3:69:
6e:09:a7:6b:0d:33:25:00:6c:c0:8a:15:90:79:e2:
f6:52:f0:d7:83:06:05:e5:18:ae:6f:40:5a:63:1b:
44:d6:d3:6e:e5:4e:97:46:e2:a6:b0:af:31:e8:09:
f7:22:3f:93:df:d4:6c:67:e3:f9:3e:01:f1:ce:b1:
28:24:51:e9:3f:22:cf:db:d8:9e:17:7c:61:2e:68:
d7:c0:a0:b2:99:62:78:2a:e7:49:4b:8c:a8:27:7f:
02:a4:0b:07:06:10:43:b7:ef:0c:a9:8d:6c:58:9f:
08:fa:14:9a:9f:5f:ed:32:3b:03:2c:51:ab:6d:d8:
b2:fc:42:3b:92:f1:a1:ee:0a:5a:59:10:5f:66:d2:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:93:33:A3:8C:FF:E1:57:7E:D4:82:47:CC:72:47:02:9D:7B:6D
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:86:ea:81:4a:a7:c8:b2:74:27:c7:ad:64:77:31:fd:9b:de:
83:3d:c8:33:96:63:20:d2:d9:b1:02:26:30:be:64:53:9c:60:
ac:c4:49:6c:01:85:c8:91:3e:61:80:68:90:c3:85:f7:c6:d8:
56:7f:ab:2f:98:c0:e3:57:10:65:61:28:3a:39:6a:7f:ee:16:
a9:b4:39:40:4e:ab:5e:b0:7e:28:cb:c3:50:0b:27:08:19:58:
b2:59:3c:80:7b:d0:35:27:67:83:dd:f0:57:31:89:29:58:6a:
17:b4:18:0a:06:65:aa:95:eb:85:c3:69:44:21:7e:57:a4:81:
93:c7:79:64:e8:32:5c:cb:ec:7c:0b:5e:8b:e3:44:d2:7e:9a:
46:8a:da:46:3e:b9:f3:6a:7a:a3:99:74:e8:d0:fa:e8:82:0d:
54:04:82:fc:0d:86:f1:65:cc:c0:4d:62:94:2b:06:b7:10:dc:
18:d2:68:2b:0e:8a:33:72:df:27:cd:d3:53:01:a7:d3:ba:0f:
ae:64:d0:20:c2:93:8c:96:67:f4:8e:c5:20:ec:8f:88:53:99:
cf:69:18:75:dd:ed:f3:bc:f9:4e:88:e5:e8:6c:ea:7b:9f:34:
d7:e0:da:c5:84:0b:37:04:16:83:50:0f:11:b6:e0:b8:e7:07:
3b:70:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:39:30 2025 by rpki-client