Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: 5/KHDJGAUW6YtNhGPHNMmWX1zYYSClzI20Aq4BRAJlA=
Subject key identifier: C2:F7:AE:34:27:D4:1B:26:13:77:1B:D1:27:34:67:21:BF:27:A7:FF
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 019510C76DA2915BF6A7CFB95E3E3EF47ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 07C9
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: +NlioiO4/JGStE3NjVewrzcz3IZeAn7yGNIzukEmqCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6d:a2:91:5b:f6:a7:cf:b9:5e:3e:3e:f4:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=c2f7ae3427d41b2613771bd127346721bf27a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:f5:06:e8:fe:18:b9:26:ef:fa:e0:58:93:
07:01:2e:cb:b6:54:f8:e2:be:07:14:07:2b:7b:f3:
ef:ca:66:8b:e1:31:e3:b9:f2:f1:39:39:2c:81:ca:
89:43:59:c2:3d:06:06:5b:74:98:48:79:dd:8f:ba:
a3:d6:5f:27:2b:9b:e5:c3:1c:67:e2:d9:5d:12:fe:
8a:b8:b6:82:cd:4e:8f:e3:e9:8d:2d:9d:e7:95:0d:
44:5f:2e:cf:9a:c8:84:be:d9:11:ae:99:ab:5e:8f:
68:e2:1c:ef:0e:68:ff:4b:55:c9:43:56:f6:5b:9d:
8a:40:21:98:43:36:3d:1a:55:4a:90:a5:5b:31:d7:
6a:cf:ea:38:04:48:4e:53:99:88:42:7d:de:2f:6f:
b2:aa:58:5c:c2:2e:db:07:26:a3:c1:a7:d8:45:3f:
24:eb:63:d4:61:4c:4f:78:b4:02:25:1a:da:6b:28:
d5:c1:24:d2:75:5a:7a:dc:6a:7b:d8:8d:f4:c8:f6:
cc:16:a5:30:29:54:91:93:f2:82:b1:83:22:11:c0:
fb:80:4a:71:7d:e0:f9:1c:84:08:25:82:1e:9c:34:
5b:77:cb:bd:32:6c:2e:fd:39:9c:df:6e:95:2e:8e:
71:dc:b6:f8:b0:dd:48:11:d8:d3:61:b2:39:20:57:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:AE:34:27:D4:1B:26:13:77:1B:D1:27:34:67:21:BF:27:A7:FF
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:18:e6:39:d3:c0:c4:85:2e:05:d4:f7:83:a4:c4:a3:6f:08:
3d:92:95:35:56:ed:56:ae:b9:ec:d3:45:4d:74:06:b6:a3:c4:
89:b3:f5:d7:cf:46:fa:d7:a2:bf:c9:01:59:47:05:71:90:8e:
6d:61:b7:ca:1d:92:59:7c:8c:94:1e:54:d7:bb:e6:9d:27:db:
d0:50:a3:9f:5d:bc:98:b4:84:1b:b5:fc:53:c7:ed:55:fc:e4:
40:e9:05:7e:bb:7d:9f:ed:28:1c:34:f3:c6:f8:21:b6:36:05:
bb:71:a7:59:27:15:10:97:9a:7d:f5:7c:21:6e:f7:20:4b:43:
39:93:cc:24:0c:48:74:49:07:db:0f:16:95:34:e1:c3:9c:1d:
6e:c3:94:9d:ed:e4:e1:c3:2e:84:b2:b0:70:8b:ed:c6:2d:1d:
82:72:47:2d:54:eb:70:9e:98:b0:15:45:af:e7:61:7a:6b:da:
4c:50:d3:67:36:52:31:e3:6a:22:62:35:8b:dd:0b:d7:be:af:
b3:e7:b6:ad:8c:b6:93:4a:64:2b:40:37:4d:2e:08:c9:3e:18:
ce:4b:bb:8a:cc:b0:d2:94:90:5b:b8:eb:8e:91:93:58:c7:88:
96:fc:13:f2:15:76:a3:cf:d6:5d:1e:48:d1:6b:f6:85:e6:27:
ff:5a:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:56 2025 by rpki-client