Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: 4mlD5EgUPVI/U8EKgKfgeJaYwib6nJ1azzqDaXT1o4k=
Subject key identifier: 1A:87:F2:25:6C:E2:F9:0D:28:7C:FF:B8:A3:38:1D:AA:C3:9B:99:49
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 01965EDF5F053663789F8C0609B5E48CCCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 0876
Signing time: Tue 22 Apr 2025 19:00:19 +0000
Manifest this update: Tue 22 Apr 2025 19:00:19 +0000
Manifest next update: Wed 23 Apr 2025 19:00:19 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: dsl8fUU5vQIdYk8NdsYGvvWInCwa36ozt9j2fycETTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:5f:05:36:63:78:9f:8c:06:09:b5:e4:8c:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Apr 22 19:00:19 2025 GMT
Not After : Apr 23 19:00:19 2025 GMT
Subject: CN=1a87f2256ce2f90d287cffb8a3381daac39b9949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:b7:42:80:df:74:e2:f1:0a:51:cd:2a:1d:
13:cf:a9:ab:05:ad:5f:d3:3e:90:3c:70:3a:33:a4:
39:58:5a:d1:03:42:fa:88:a8:83:bf:db:9c:96:d7:
5f:f1:68:d6:39:90:ba:00:a3:77:2f:fd:dc:03:fe:
6e:a2:9a:aa:11:3f:ce:32:3b:87:a4:3e:7e:c7:56:
74:43:65:78:d2:bf:b8:a2:02:e6:52:86:1d:0f:19:
84:7a:17:21:46:de:86:1d:0e:a4:63:49:2d:b0:2b:
dd:88:4d:84:6e:bc:6f:3c:4d:09:70:ab:f4:f9:5b:
c7:67:89:3d:58:13:c9:fd:d4:ac:e4:21:c4:b9:d0:
d4:29:75:e4:7e:6e:21:05:06:37:cb:28:40:f3:fd:
37:9b:36:91:6d:b9:6a:b5:f9:25:6c:f0:ca:5d:cd:
ef:8e:16:20:d8:de:3d:45:40:55:6f:a3:43:3b:ff:
86:e0:79:16:aa:87:25:d7:6b:a4:3d:ff:5c:1a:8c:
b0:69:45:34:df:9c:5b:78:25:d3:4d:33:15:c1:5c:
66:1a:e4:dc:05:23:80:dc:d4:7d:93:b0:16:e9:e2:
b1:31:21:19:6a:64:4c:d6:6d:97:f1:a4:b5:d7:f9:
8e:5c:2d:72:a7:8c:34:a5:a7:ce:b9:7b:31:22:3c:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:F2:25:6C:E2:F9:0D:28:7C:FF:B8:A3:38:1D:AA:C3:9B:99:49
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:b2:22:ac:9f:e5:e9:93:b7:3c:53:40:17:5d:bc:fa:e6:
9c:52:31:28:7b:bc:28:02:69:f0:61:11:dc:fa:08:57:07:41:
2c:a6:09:32:23:dd:7d:85:da:16:ab:41:ac:2b:79:ff:01:59:
9f:ee:df:10:05:dc:34:59:fb:be:b6:74:7c:d3:d2:1a:bb:34:
eb:c0:50:dc:4f:3c:d5:bf:98:28:bf:e4:5f:ac:45:60:8b:1e:
cb:27:70:3b:34:7b:1b:90:93:7a:d0:e0:2e:7a:a6:91:b1:80:
6e:ba:82:78:2f:80:fc:87:f3:13:70:ec:e6:ac:29:39:2c:f7:
af:1b:19:47:30:5c:aa:bb:ab:ee:09:70:69:b6:61:d9:1d:dc:
2f:f3:a2:3b:19:0b:4d:10:21:2c:1a:70:9b:60:c0:29:0e:6c:
80:8b:41:ef:45:85:55:40:1c:39:b7:6d:96:7b:be:e1:23:0b:
58:07:7c:07:98:65:68:88:5b:81:9c:48:9b:02:37:1b:bc:91:
27:90:7c:c6:be:96:d8:de:be:86:83:c4:2f:0c:e9:98:03:e0:
34:3f:db:c4:6e:c0:d6:76:29:aa:26:4d:e3:bc:f2:be:0a:bf:
84:6b:32:e4:a9:9d:7b:54:57:68:d4:2b:2f:36:9c:bc:74:da:
84:4b:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:57:26 2025 by rpki-client