Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: mbD2P4I6TYZPcliCt5IoIMiJSPodd39Kz5cPVrm0cf0=
Subject key identifier: 1E:89:4A:92:54:CF:A7:BA:0F:43:F0:C8:ED:29:B1:A8:FA:C5:34:2C
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0196515B1477D6C569A1D43C388E65428B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 04:00:45 +0000
Manifest this update: Sun 20 Apr 2025 04:00:45 +0000
Manifest next update: Mon 21 Apr 2025 04:00:45 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: iVpqDAZ0dubW1Hk25mOUdZgNlhoao8ur7BMt7SD6VB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:14:77:d6:c5:69:a1:d4:3c:38:8e:65:42:8b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Apr 20 04:00:45 2025 GMT
Not After : Apr 21 04:00:45 2025 GMT
Subject: CN=1e894a9254cfa7ba0f43f0c8ed29b1a8fac5342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:74:83:62:b7:45:8f:94:a0:3a:16:d4:4c:
a5:9d:e3:bc:fd:e1:b0:e7:1f:08:52:db:a8:89:34:
be:84:d2:8c:dd:d9:9d:fd:b1:ff:18:31:5e:a0:4e:
bb:91:4d:83:45:2c:16:11:99:99:08:1d:e2:94:6d:
b9:9a:c1:ef:e1:3f:a2:c8:b1:8e:a5:ee:53:9d:36:
95:0d:15:69:2d:01:60:48:43:65:58:5d:77:0b:a8:
d9:f3:c9:a5:87:ff:6a:70:6e:3a:cf:94:76:6f:17:
d4:bf:30:09:17:c6:23:0b:8e:ae:42:f2:c0:4f:0f:
10:76:36:ca:20:71:39:4d:b0:f9:29:b2:15:57:bb:
1b:65:dd:cc:fc:2a:26:72:d8:8b:ac:0e:5c:e1:2f:
07:e0:83:e2:e9:df:c6:d1:30:bb:81:4f:c9:19:17:
4b:a0:ee:69:b4:a9:60:2d:fb:d1:1a:71:7f:e1:93:
0b:ad:82:b2:8d:a5:03:91:5a:1f:21:31:68:c0:ba:
a2:0e:41:7b:b1:74:7e:32:36:0c:e6:95:8c:53:cf:
16:3e:14:90:4a:f8:46:62:42:f0:c0:40:05:52:08:
79:15:ae:8a:8f:8f:66:4c:52:53:de:f9:c7:96:30:
fa:9a:06:49:91:f5:e3:48:3b:0d:42:a1:d4:ae:8b:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:4A:92:54:CF:A7:BA:0F:43:F0:C8:ED:29:B1:A8:FA:C5:34:2C
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:74:fd:64:27:63:14:7a:fd:19:64:9c:60:2a:9c:6c:ba:
1a:15:a1:97:a5:ec:7b:aa:df:a4:fd:93:b8:d2:6b:25:de:05:
f6:fb:75:65:f7:7f:16:1b:67:09:56:83:6d:d0:d1:48:87:23:
79:02:e2:02:bd:4e:01:ae:fa:5d:95:4e:bc:6d:51:f7:39:d5:
32:e1:c2:6b:35:9b:cc:45:b0:b2:33:42:0c:c7:b6:3c:54:c0:
13:dc:ef:89:57:8f:8a:08:08:59:97:99:53:1b:8c:23:b7:e0:
0e:6e:a8:81:46:80:ac:9c:19:48:86:f3:71:14:c1:1b:a4:a4:
8d:74:ac:4b:02:67:65:31:f3:8d:0a:78:ce:95:0e:1b:dc:23:
60:bc:6a:47:7a:76:f5:18:53:dd:c1:b8:01:08:99:66:10:cb:
42:a3:8f:2e:ea:ce:ab:9a:cb:8f:98:c0:fa:1b:b4:49:70:96:
8d:96:8f:6f:a5:d1:b9:3d:b5:d8:0a:e7:e0:4f:df:29:05:6b:
e1:e7:a5:c0:7a:60:e7:10:12:8c:5e:1a:72:4c:33:2f:61:f5:
9c:27:07:28:71:d2:74:d4:e6:56:88:60:d0:2e:80:6c:68:7e:
65:30:aa:82:23:1f:1a:3d:33:93:e9:16:4b:62:20:63:98:f4:
f0:93:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:15 2025 by rpki-client