Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: 9wGvAtbHq6N1e9hXnKFrjSeybc9aK0OJsDMotDm9UEE=
Subject key identifier: 69:6C:3B:73:19:D5:07:99:73:0C:CC:92:FE:81:27:23:DC:EC:95:4E
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0195903DB35965229C289A0841FA0CA74C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 16:01:57 +0000
Manifest this update: Thu 13 Mar 2025 16:01:57 +0000
Manifest next update: Fri 14 Mar 2025 16:01:57 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: /JSifRCF8PJAqwS9In+6sprlZ4f9GZSdtdMpgvw0Ej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:b3:59:65:22:9c:28:9a:08:41:fa:0c:a7:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Mar 13 16:01:57 2025 GMT
Not After : Mar 14 16:01:57 2025 GMT
Subject: CN=696c3b7319d50799730ccc92fe812723dcec954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:f5:c1:a9:41:53:2f:32:0c:44:c1:3a:da:
cd:62:74:55:e4:ea:7d:80:3d:62:19:46:4e:19:f2:
f7:65:e8:86:99:65:c7:e9:1b:f7:68:c2:25:c5:67:
c1:f0:28:36:05:79:40:75:20:70:9e:d1:fc:c4:71:
2e:8e:1a:86:01:9e:97:1a:d3:54:88:8a:89:f4:23:
43:b6:2a:18:5e:c6:77:c0:f7:88:39:7e:1b:cb:2a:
ce:5a:22:28:d0:fe:e3:43:c3:0a:e0:0a:1e:0a:4d:
21:53:de:64:ac:2a:92:25:ea:4f:52:c5:60:9c:65:
68:2c:9b:e5:37:2c:ab:e5:30:db:f5:b0:f7:b4:27:
c6:58:4f:1e:a8:af:e1:04:6b:c0:20:fb:bd:bd:ca:
00:83:d6:2b:c6:98:ed:ab:32:88:3f:8e:b6:b4:98:
f7:ca:65:63:27:a1:bd:0a:fe:73:36:13:8e:c7:14:
de:23:f2:dc:4b:42:18:58:3f:d7:16:46:6a:ff:02:
3b:dd:55:e2:8d:4f:88:ba:e8:bf:a3:5a:78:5a:97:
3c:8b:2d:6b:6d:2b:4c:77:64:6d:b8:53:1c:eb:5d:
bf:7a:7b:cc:cc:9c:c0:4f:78:30:bb:fa:2d:b5:7b:
a6:be:3b:51:46:3d:81:bf:67:a0:bb:6d:04:21:4e:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:3B:73:19:D5:07:99:73:0C:CC:92:FE:81:27:23:DC:EC:95:4E
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:32:49:e0:75:fa:01:91:70:17:ad:b6:14:38:d9:e1:2c:71:
c5:ac:ae:07:ca:31:e1:73:c9:7c:ce:b8:55:f3:3f:86:ea:c7:
36:20:9f:04:47:97:d4:fd:ee:32:12:7a:fe:58:ab:95:ae:57:
43:5b:de:dc:9a:f3:75:4f:b1:97:04:4a:49:7c:70:b2:40:a3:
d3:1b:75:62:10:31:fe:57:14:d3:a7:a2:35:5b:ab:78:34:8f:
d1:9c:0d:bc:9b:d3:29:80:33:32:51:cb:e0:f4:89:e8:b8:8e:
be:c9:2e:95:ad:d9:6d:1d:bd:93:ce:8f:90:ea:3d:b7:45:70:
de:6b:c3:ad:cf:dd:d0:cd:8d:f2:dd:7e:4d:a1:74:df:4b:eb:
a8:8c:39:b7:b6:af:22:c8:af:d0:45:bb:86:48:1d:a2:d0:98:
79:9e:58:a4:55:4b:77:ad:b2:02:b4:5f:17:c8:21:54:32:8d:
9e:57:ad:97:41:1c:50:c3:07:34:45:9f:f2:32:e1:f6:9a:1d:
60:14:9d:e8:7a:3c:aa:92:23:81:da:bc:15:56:7c:8e:6a:af:
35:fc:f7:0b:b9:80:5d:06:1d:86:e0:a5:f4:e9:59:7d:13:14:
89:f8:0d:4e:79:33:33:dd:3e:ff:80:99:94:33:37:bd:e0:29:
e2:df:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:11 2025 by rpki-client