Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: CaocY2M8ZLLy/bwS6wc/G8SDYFIIX3uEKkv52NG4JtI=
Subject key identifier: 4E:7F:25:93:D7:9B:BC:E5:5B:94:CB:E9:1D:E4:32:05:C3:1F:C0:74
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 0197504681E6C050BB040BD38F02B6B286AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 08F3
Signing time: Sun 08 Jun 2025 16:01:27 +0000
Manifest this update: Sun 08 Jun 2025 16:01:27 +0000
Manifest next update: Mon 09 Jun 2025 16:01:27 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: TYlASLW8+yPw/oGydX4VD1iK9lRDp5w6MAxuE2q9mVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:81:e6:c0:50:bb:04:0b:d3:8f:02:b6:b2:86:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Jun 8 16:01:27 2025 GMT
Not After : Jun 9 16:01:27 2025 GMT
Subject: CN=4e7f2593d79bbce55b94cbe91de43205c31fc074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:ba:56:8c:0f:fe:8c:84:c5:64:84:24:f1:
21:39:07:fd:0b:c9:2c:34:3b:59:60:3f:f0:72:07:
2f:17:0d:3d:bb:68:e2:b8:c4:08:dd:b0:af:1a:81:
2d:80:0c:04:bb:46:3d:b3:5f:8d:a4:1b:b7:ee:1f:
b9:29:72:49:2e:29:47:0a:d1:57:cb:f8:05:30:a5:
3f:e0:2a:c4:aa:8c:b0:47:c2:de:fb:dd:4f:71:0a:
84:dc:6f:be:db:9c:85:2f:72:69:bb:73:cb:7b:32:
e3:4d:5d:8e:ed:86:f2:29:94:58:cd:f5:f9:ae:7f:
9f:9e:a5:5a:a3:08:55:a3:66:19:1b:45:27:4f:7d:
34:3d:de:34:27:5b:f5:3e:ae:ae:a9:fb:52:03:78:
3b:f0:b8:f4:d2:e6:ee:c2:e0:b1:45:40:c6:25:72:
30:f2:e9:83:f3:50:0a:c2:27:a4:bf:45:a7:ba:73:
49:a4:98:6e:6f:19:d7:18:0a:b3:7c:6f:43:9d:5e:
04:be:aa:66:af:56:70:3e:f8:2c:a8:51:f9:fc:16:
fa:c1:c5:32:c5:02:f5:ab:ec:63:3b:14:a2:35:ea:
50:39:4e:5b:e2:d4:af:dc:5e:da:5c:2e:7d:fa:57:
a9:df:07:fe:a7:99:9e:36:d5:91:5d:13:99:9d:27:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:25:93:D7:9B:BC:E5:5B:94:CB:E9:1D:E4:32:05:C3:1F:C0:74
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:c3:b1:80:d7:a3:c3:af:95:87:90:7f:d6:73:ee:ce:91:
e7:8a:ac:e6:9f:b6:fb:50:4f:5e:cb:58:19:9f:7a:3c:c0:f3:
12:06:ed:e7:ec:f8:cb:3c:17:b4:eb:fc:ec:ab:33:8f:d4:b6:
9d:0c:b8:6e:b1:17:49:34:37:0a:e8:95:40:2d:9f:46:b6:3c:
bf:ca:4f:5f:9f:fd:02:09:5a:09:67:ba:cd:95:55:75:5b:6f:
84:4d:a9:b4:5a:d3:d6:9c:4d:50:4b:0a:15:76:4e:1a:8e:a4:
62:b3:5c:b2:25:af:cb:cd:16:f6:30:b8:82:91:eb:0c:ea:ac:
a8:33:5f:75:ad:95:79:6b:d3:9a:44:86:a0:31:f7:c1:8f:ea:
57:15:d7:d2:cd:af:14:6c:8d:7f:d0:00:15:6f:d2:17:9a:5d:
cb:96:aa:71:8b:0c:2c:53:79:58:c8:21:af:fa:cc:19:a0:8f:
0f:ff:f8:ad:02:05:f2:a0:5c:18:e3:f1:a7:cc:f3:46:e4:69:
30:49:f6:1e:49:7d:40:de:9f:45:0a:d9:a3:6a:f8:9f:12:16:
ce:98:81:51:c3:47:9d:fa:8a:d3:5a:93:5c:c9:09:f4:40:ca:
fb:27:99:09:9e:96:70:21:4c:2b:5d:63:ae:ba:2f:6f:aa:ff:
41:45:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:34 2025 by rpki-client