Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: aQG1TjQ1MjTziwQPtK94GPilf8gdArlSH8rMWYwWqN8=
Subject key identifier: 67:43:39:05:FE:16:4F:BC:81:55:C7:5F:1E:C3:29:51:96:42:DA:30
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 018F3C9D6FF16910D7426C2E7A087ECF8196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 1153
Signing time: Fri 03 May 2024 04:01:41 +0000
Manifest this update: Fri 03 May 2024 04:01:41 +0000
Manifest next update: Sat 04 May 2024 04:01:41 +0000
Files and hashes: 1: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: w3BZoGwyU3BVFpoa4Nmh61p/rH6HCAzEcv0g3xN+V+s=)
2: Ra35fN89xO6EKwQI75XhIPetkUE.roa (hash: CAm2P9qRgO2UtCTg/xDcz6AYRB8/y+KSQKsn5QvN8DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9d:6f:f1:69:10:d7:42:6c:2e:7a:08:7e:cf:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: May 3 04:01:41 2024 GMT
Not After : May 4 04:01:41 2024 GMT
Subject: CN=67433905fe164fbc8155c75f1ec329519642da30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:d9:28:92:cb:f5:ca:52:60:ad:4b:81:fe:
40:33:f2:c6:7c:a4:95:2a:ea:51:8c:95:d8:80:24:
b2:43:d0:48:34:91:39:05:42:f5:cd:23:60:a9:d9:
51:47:7b:86:88:a1:ff:04:22:94:15:87:0f:ec:4e:
5e:a9:37:c0:f0:c2:a1:f4:42:73:39:11:ff:0a:31:
d9:d4:93:59:0a:0b:9e:b9:7b:bb:15:2d:46:dc:39:
24:25:62:9e:c2:fd:80:38:47:bf:09:e2:ac:e7:c8:
5b:ad:d9:4e:97:cc:a8:76:94:07:2b:23:80:1c:0b:
83:8f:2e:6d:03:8e:2f:ee:26:33:6b:23:1e:cd:ba:
a8:a0:b1:51:1c:11:5f:ed:65:c5:1c:81:af:2d:06:
a5:25:79:58:a3:60:bd:d4:e1:07:d8:26:ef:cd:91:
22:40:cd:1a:18:de:cf:78:cb:3f:f1:2a:ee:53:20:
b5:f7:1c:b5:72:7e:bd:1c:b7:24:0a:95:5e:4e:52:
41:f2:d5:aa:f1:e8:61:c7:3c:6f:c3:b5:ac:8c:5b:
3a:c4:54:d6:44:8d:b7:69:40:73:83:74:f0:43:6d:
3a:ea:6b:82:8a:4c:13:c4:09:7a:50:f3:13:19:b3:
af:b2:ed:a9:77:a1:6d:1d:3a:e9:00:99:af:7e:b5:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:39:05:FE:16:4F:BC:81:55:C7:5F:1E:C3:29:51:96:42:DA:30
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:86:e1:88:cc:c8:f1:6c:20:4a:1f:8d:fb:b4:2c:8f:b3:00:
63:f2:8d:f8:5e:00:12:1e:16:64:bd:98:eb:be:78:ae:10:af:
2d:1c:d8:cf:57:76:f6:c3:00:d6:29:b1:df:fa:ab:48:28:fb:
c3:da:e0:24:e6:12:21:e7:e5:12:ea:11:66:6e:d0:13:a0:03:
fa:bd:bc:52:55:d8:a4:d6:c0:3b:15:84:07:f6:ee:9b:d6:49:
ea:c1:94:69:d7:94:43:62:34:96:c6:9c:92:8c:7d:c9:7c:e4:
95:8f:f4:2a:f3:44:aa:f4:f5:16:16:af:76:01:48:fc:84:b4:
0b:20:d9:a8:01:85:07:17:8c:81:7c:b7:7f:21:d5:bc:8e:23:
35:5e:b1:bf:4f:cd:53:65:ae:02:2c:94:b0:25:3a:e0:74:34:
9c:fe:ed:9b:d9:cb:5d:7d:00:82:84:90:33:ff:1a:d8:99:f2:
71:08:fe:19:0f:77:0a:d8:24:96:26:70:b4:6e:79:f9:52:66:
cd:d8:1c:2f:5a:8d:9e:ff:ce:55:30:a5:01:8d:2a:43:6d:f9:
57:34:18:d2:cf:fa:a7:77:ec:7d:de:d5:28:64:8b:bd:4b:ef:
12:e1:58:11:30:f0:cc:f1:a5:58:0f:53:cd:87:c1:a1:04:82:
e5:8e:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:18:17 2024 by rpki-client on console-fra.rpki-client.org