Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: jhOivZVJp75XqUuBs2ZsFFmWlRQ06q17ET1+t3QAUFw=
Subject key identifier: 9B:17:0B:8C:8F:C3:A3:C0:85:66:F9:00:28:7B:CC:21:A9:D7:C8:AA
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019679E92A9AF86DFB0865A573B9D5C76CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0859
Signing time: Mon 28 Apr 2025 01:00:45 +0000
Manifest this update: Mon 28 Apr 2025 01:00:45 +0000
Manifest next update: Tue 29 Apr 2025 01:00:45 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: cnlmD+BEUPJDdD/t3Gd8MkXpnVee24OLMO7ycwQce20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:2a:9a:f8:6d:fb:08:65:a5:73:b9:d5:c7:6c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Apr 28 01:00:45 2025 GMT
Not After : Apr 29 01:00:45 2025 GMT
Subject: CN=9b170b8c8fc3a3c08566f900287bcc21a9d7c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:68:d8:07:7a:a2:fd:41:01:db:25:1d:b8:
97:b5:67:57:ee:03:ad:49:a7:95:cf:a2:2f:99:e0:
3d:ad:dd:5b:b5:ed:39:9a:18:f4:10:8a:04:72:fe:
2b:0d:bc:08:15:bd:c3:28:04:ec:fb:49:6f:41:52:
23:c8:d7:9c:6d:6d:ac:f0:40:e3:12:1d:03:03:c9:
d1:87:ea:8f:d5:a8:31:d9:53:06:a8:aa:4d:92:e5:
ca:f1:2b:c9:82:dd:20:1b:e7:82:88:ad:0a:f6:be:
79:3a:d5:79:06:ac:2b:8d:3f:bc:30:f7:fb:32:5e:
72:ea:76:d9:85:db:c0:6f:61:7b:c2:67:3a:8d:3a:
57:36:20:60:e4:ba:6e:a6:6b:32:5a:2a:fa:33:e7:
cc:7c:09:7b:51:dc:88:c0:d0:27:c0:db:24:44:2c:
8e:df:b5:e4:03:b1:4f:e8:1d:5a:70:e1:b0:df:75:
2e:78:59:28:6c:dd:98:24:2d:2a:28:8b:0a:e6:11:
63:87:03:21:1e:a0:54:15:81:f2:7d:14:1a:be:91:
a5:05:79:da:a7:29:03:bc:a1:0e:d8:47:14:08:b5:
13:7b:e5:31:5a:4b:ba:a4:c7:91:dd:ed:76:ba:eb:
77:90:bc:b1:2e:8d:82:cf:aa:6a:b0:b3:2f:77:ef:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:0B:8C:8F:C3:A3:C0:85:66:F9:00:28:7B:CC:21:A9:D7:C8:AA
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:d1:12:f6:fb:98:ae:58:ad:70:0a:cf:e0:08:56:93:4e:
57:7a:70:10:8b:51:c9:7f:f4:29:92:c2:99:66:c8:66:59:74:
e2:6e:8a:17:75:eb:6f:24:1d:16:43:54:f5:79:13:3b:89:30:
5f:ce:07:55:4b:82:b7:2c:60:39:36:68:df:32:04:22:84:38:
7e:5c:5f:32:46:89:57:96:cb:0b:a7:76:69:5b:fd:96:c2:e6:
79:81:d2:aa:ff:6f:64:07:e6:39:d1:41:43:10:f1:fe:3e:7b:
03:1d:3a:61:5d:82:7b:7f:9a:2a:f4:b7:d8:19:5e:e4:32:2a:
a8:55:f0:99:00:f1:1e:62:b3:e6:52:82:dc:eb:ad:99:41:db:
40:30:c2:eb:58:b1:6e:a7:45:6a:01:73:1a:6e:fa:61:3a:4f:
c7:23:4e:a0:fe:03:a4:bf:85:69:53:4f:4d:45:9c:8d:f5:4d:
d8:ef:72:98:c9:31:dd:0b:3f:bf:c5:ce:39:08:e9:c8:c8:40:
ac:cd:b6:95:3c:10:db:26:2d:e8:b4:97:35:54:19:f2:db:b4:
db:cf:9d:94:80:d4:76:7c:18:8c:e9:29:e3:f5:26:2b:35:eb:
bc:27:55:ff:73:db:2e:51:23:13:f3:66:7e:72:d4:a4:9b:d9:
0d:a2:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:04:15 2025 by rpki-client