Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: 5e/2v2eYa0T/ByrCx1kOLkqBntDT/8rb+Fw7Vvxgk40=
Subject key identifier: 53:DB:B8:80:72:6C:DC:1D:B0:AB:FF:A0:D5:CF:47:2F:52:F3:0F:DC
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019675D55CA1EC59BA131263CBCD5E796321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 091C
Signing time: Sun 27 Apr 2025 06:00:39 +0000
Manifest this update: Sun 27 Apr 2025 06:00:39 +0000
Manifest next update: Mon 28 Apr 2025 06:00:39 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: YrSUbPMyJ6XWuYe7zed4YQDBqA8suY8HVZLMnFzENfw=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:5c:a1:ec:59:ba:13:12:63:cb:cd:5e:79:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Apr 27 06:00:39 2025 GMT
Not After : Apr 28 06:00:39 2025 GMT
Subject: CN=53dbb880726cdc1db0abffa0d5cf472f52f30fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:fa:e5:38:35:b5:eb:13:13:29:ea:e9:2a:
2e:6b:dd:4f:61:02:d2:73:f5:ae:53:33:d6:18:65:
21:84:f2:70:9c:8e:20:e5:90:9b:6f:19:ce:c4:d7:
f9:69:17:f2:97:cc:6f:4d:d8:5c:d6:d2:ac:2b:3f:
54:d5:81:c4:2e:cd:f7:1f:73:3b:b8:3b:db:cf:53:
de:15:04:eb:87:cb:8c:8f:b5:73:ae:39:3e:14:94:
5b:0b:0e:2b:83:07:af:1b:71:ef:45:8d:b4:b6:b4:
12:9c:8e:3e:cc:18:3e:26:f9:3b:cf:4a:b3:f5:59:
8d:36:a7:6d:31:6a:60:8d:2b:18:55:e7:cc:03:2a:
24:bb:35:7e:ee:6f:ce:2a:42:d7:2e:22:05:c5:84:
30:46:68:9d:1c:7b:3d:10:8f:6a:7b:72:9f:e2:97:
e0:ff:f9:e2:06:04:43:b0:d4:2c:96:d1:b7:92:56:
53:82:40:27:64:ea:3c:ed:fe:e3:d7:a7:75:90:c1:
03:80:b2:38:86:bb:0f:b4:27:81:e9:83:8d:3b:b0:
e5:8b:51:c6:2b:bc:f0:e0:8e:b5:25:ca:ec:0a:9a:
7a:e6:1d:53:75:1c:f1:f9:63:7d:0a:93:31:c8:f4:
73:3f:90:8a:58:11:ae:a8:bc:23:a3:8b:61:89:a2:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:B8:80:72:6C:DC:1D:B0:AB:FF:A0:D5:CF:47:2F:52:F3:0F:DC
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3d:2b:fb:0b:22:f1:1a:a8:7f:94:bc:43:f4:c2:5d:4d:ff:
8c:ba:48:67:f6:a1:ca:fb:64:16:7a:77:a8:49:5c:4a:b6:26:
9f:a3:46:b6:a0:7f:73:f1:97:37:76:d9:9e:2b:37:0e:4b:48:
3e:b1:97:44:61:af:56:23:0c:fc:c9:39:b8:c8:12:b9:4f:0c:
76:35:38:24:10:27:43:b0:a8:cc:ac:9c:24:a7:63:07:07:e3:
aa:be:ff:98:a7:43:3b:41:6a:26:13:f7:ae:17:dc:96:ef:81:
c6:23:44:02:bc:3e:40:9a:31:79:17:0f:89:d5:91:4c:7b:d5:
79:03:9f:b1:1d:a0:e7:ae:2c:db:62:12:e3:b3:dd:e0:05:e0:
24:25:fa:51:37:05:bc:dd:27:ec:82:34:86:53:86:2c:82:90:
c3:e5:e4:da:ea:ea:48:c3:f1:bb:76:1c:25:a4:be:a0:6c:6c:
3b:9a:ec:77:18:2a:90:cd:25:2d:15:dc:2c:18:32:28:db:e9:
c6:ff:45:ff:b6:23:69:c1:a0:d3:45:ef:3e:2c:8d:67:a5:d4:
ac:87:07:f8:99:bd:07:bc:a6:38:eb:db:20:d2:d4:d9:75:a2:
56:d3:8e:96:9d:94:2d:c1:ab:d1:e0:7a:44:0a:c6:aa:a6:ee:
05:8b:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:59 2025 by rpki-client