Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: sGikj+FXNLMcHAUStNcytN97d2cU9A5xKoYlHcuA5sA=
Subject key identifier: F5:77:BB:ED:0D:55:43:80:74:D7:6F:3F:12:83:BE:C2:2D:30:40:C2
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 01964820CDB6942FACB973BFEF45B592CB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 09:00:31 +0000
Manifest this update: Fri 18 Apr 2025 09:00:31 +0000
Manifest next update: Sat 19 Apr 2025 09:00:31 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: hii+S73LFf8BRGcPvyolJIjNHBuYNKuvNjr/bzuEK2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:cd:b6:94:2f:ac:b9:73:bf:ef:45:b5:92:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Apr 18 09:00:31 2025 GMT
Not After : Apr 19 09:00:31 2025 GMT
Subject: CN=f577bbed0d55438074d76f3f1283bec22d3040c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:33:19:7c:e5:55:8d:15:c1:38:df:74:38:
d6:94:3e:79:27:59:0b:55:cb:69:28:88:8d:9a:67:
80:a6:81:d2:da:c7:b2:b9:37:c7:3e:c7:32:74:44:
eb:57:99:77:06:a0:ef:ce:ed:fb:24:cf:8c:27:ed:
12:f8:3b:cc:37:34:51:8d:50:72:71:b8:94:46:54:
0c:b2:1e:92:86:b8:28:ed:e3:96:9e:4a:4e:e9:5c:
53:9f:5c:ba:5e:66:23:cd:91:a6:1f:4f:26:b2:42:
6f:8d:ca:6b:58:b8:d4:f8:53:90:b1:a9:c1:25:8d:
97:93:b8:f5:bd:17:eb:a3:99:99:0d:4b:06:39:30:
c7:b0:cd:dc:c8:ff:1f:e1:10:ca:f1:e4:9a:f3:73:
3d:18:c7:4d:63:df:f2:80:4d:81:89:5e:58:e1:d0:
aa:f5:20:76:9d:51:26:fa:79:a8:40:5c:ab:38:84:
35:99:5a:ec:ae:9a:77:fb:1e:d0:1c:67:dd:f3:a9:
7a:e0:5f:37:e7:77:a8:f0:6b:56:14:2b:c3:df:4d:
c6:20:a4:40:db:89:f7:ca:42:28:d5:f5:0f:89:49:
cc:c6:e1:bc:b9:00:b9:da:bf:9f:8f:c9:b8:7e:b3:
57:1a:b9:d3:a9:5b:74:49:c7:54:1d:f0:71:a0:b3:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:BB:ED:0D:55:43:80:74:D7:6F:3F:12:83:BE:C2:2D:30:40:C2
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fd:65:aa:59:d4:e4:16:f0:f9:d1:54:f6:d2:a9:6c:ad:38:
da:6b:00:84:9b:2c:29:22:0a:6d:94:a1:3f:b6:6b:b6:3e:84:
d3:7b:d0:41:97:e1:f5:93:4a:03:c6:2e:ba:36:33:b5:01:65:
74:12:c4:b8:62:8d:18:c0:b4:3c:a7:a4:12:be:56:d4:f5:c6:
95:69:d4:96:0e:a2:8c:02:66:78:38:57:9e:ab:7e:c9:b6:7a:
7b:4b:79:6c:13:dc:8f:ec:2b:c8:a4:94:8b:0a:d5:c8:bb:52:
fb:30:17:c7:d4:13:e9:da:5e:8e:25:23:1b:7d:70:56:87:9d:
75:81:0a:b7:fd:e9:b9:39:61:8e:87:92:8a:78:09:eb:d1:18:
d6:1f:4f:01:10:96:d2:ca:5d:53:11:bf:30:c9:cf:d6:ce:9d:
be:0c:f6:c1:dc:36:82:67:bd:89:97:fd:39:f6:b6:ef:32:23:
d8:5c:60:e0:77:5b:75:fa:f2:c9:1b:eb:a2:0a:61:11:b4:7e:
1d:38:6f:18:4f:bc:d4:fa:81:cd:37:d7:24:00:72:6b:db:2b:
34:71:ba:b7:08:47:46:05:41:be:59:3d:13:04:e1:42:17:d0:
0b:a8:1a:17:62:5d:78:d0:ff:f5:1e:45:43:b7:7d:e6:e3:e4:
e9:22:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:13:25 2025 by rpki-client