Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: 1nFp/lp7UhRvZ+VPO9/EWgb40XYv0EKkk3G9Jk4PVhQ=
Subject key identifier: 86:0D:10:B6:B7:82:F2:99:A3:91:F4:98:E4:66:6E:95:9E:32:4A:53
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 019674F9EC6E7BD93B1D5633B239BE76C034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 1107
Signing time: Sun 27 Apr 2025 02:00:58 +0000
Manifest this update: Sun 27 Apr 2025 02:00:58 +0000
Manifest next update: Mon 28 Apr 2025 02:00:58 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: NRaqR3iJ4PZQou95L/eDuK8GK7hcAf+BxU3iiGynsZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ec:6e:7b:d9:3b:1d:56:33:b2:39:be:76:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Apr 27 02:00:58 2025 GMT
Not After : Apr 28 02:00:58 2025 GMT
Subject: CN=860d10b6b782f299a391f498e4666e959e324a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:49:3b:ce:1b:5b:42:d9:f1:94:e1:b4:8d:
33:0c:d9:cc:8f:75:9d:52:d3:9a:40:e1:ce:81:08:
35:f5:85:e2:24:be:cd:da:25:04:ec:df:c9:a4:32:
4a:65:b9:07:a0:72:ac:4d:b5:14:ac:b4:90:06:9e:
44:9f:b7:f0:35:f2:3f:e0:65:f5:07:84:12:9f:ff:
62:75:51:d8:db:9d:26:d3:f9:c7:3f:a6:97:95:01:
8c:77:a8:ad:ce:3c:99:9c:9b:66:67:b1:2f:5c:c8:
1f:e0:57:97:bf:22:21:00:32:66:b2:a8:7f:43:a8:
69:5e:1b:3a:36:31:7f:a3:ee:80:4e:90:1e:da:ae:
1b:f1:dc:84:77:11:71:3c:08:5a:2f:70:c5:7e:cd:
dd:f0:3c:22:b3:e6:31:a0:7e:67:14:ab:86:68:c0:
67:00:60:9a:93:47:a3:5f:8b:31:0e:2f:eb:4f:ca:
9f:81:5a:d3:42:69:a1:81:f2:b7:a1:56:62:0c:b9:
52:26:96:13:a7:2a:7c:1c:98:2f:52:49:27:f5:58:
f4:f6:82:75:9e:62:3a:1e:b9:fa:6f:77:3d:bd:3b:
96:0d:9a:3a:4d:10:ec:58:3d:be:c8:30:37:cd:25:
08:9a:91:b0:7e:de:d1:20:d1:c9:9d:89:17:78:4f:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:10:B6:B7:82:F2:99:A3:91:F4:98:E4:66:6E:95:9E:32:4A:53
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8d:88:41:06:fe:78:f8:4e:33:ca:6b:a8:e2:44:5a:af:a9:
49:e8:92:30:ae:3b:db:bf:40:68:1e:0c:da:cc:20:fc:aa:35:
17:dd:cf:72:ef:48:5f:aa:8f:ff:fb:d3:b1:36:d2:61:86:75:
da:ab:33:6c:ca:3e:cc:c8:b0:06:c1:ae:9f:cc:25:21:ea:a0:
90:52:70:7d:59:57:ec:d2:56:0a:cf:77:16:c5:ab:ae:fb:93:
c2:52:29:5a:33:85:5e:0e:5c:1e:f6:ad:87:5c:68:0f:5f:eb:
69:55:00:f7:84:1e:88:72:e0:58:9e:99:27:bc:5a:be:b3:39:
57:5d:c8:8e:f3:39:51:24:60:11:14:e6:f7:c8:13:8e:62:6b:
41:cd:5e:f1:4d:c2:37:d7:68:78:42:ac:4e:8d:ff:42:08:98:
21:0b:21:23:a4:fd:a6:34:73:1c:4d:00:62:ce:47:c9:62:be:
05:82:ae:cc:7f:0d:9a:6e:40:c1:84:ba:a6:ed:35:15:12:12:
32:d9:0c:4d:c8:d4:6d:b5:05:2c:72:27:5d:c6:37:f6:97:89:
66:90:10:b5:05:75:dd:71:e7:be:76:59:03:46:f1:62:27:05:
c3:fc:ad:c4:d5:7d:89:15:f3:1a:c2:b2:ed:48:eb:a9:bd:cd:
5c:f8:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:21 2025 by rpki-client