Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
File: ICNzDgbEv7_6ypBeUxJldCwXirQ.mft (raw, json)
Hash identifier: 7tra0ul+nLzjHuuCXe4JvTsJTKuMM210zpZe+YNnuOA=
Subject key identifier: A1:4C:54:0B:40:C7:59:58:1A:C6:02:F7:D1:7C:6D:1E:A5:0B:7F:6F
Authority key identifier: 20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Certificate issuer: /CN=2023730e06c4bfbffaca905e531265742c178ab4
Certificate serial: 019679E98ED0FDF568DC01F6E83A26A1EEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
Manifest number: 0EE5
Signing time: Mon 28 Apr 2025 01:01:11 +0000
Manifest this update: Mon 28 Apr 2025 01:01:11 +0000
Manifest next update: Tue 29 Apr 2025 01:01:11 +0000
Files and hashes: 1: ICNzDgbEv7_6ypBeUxJldCwXirQ.crl (hash: NolaYTb/nWPzcY/vTyHnEg9amyW0+d1RN5SWPq/nWTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:8e:d0:fd:f5:68:dc:01:f6:e8:3a:26:a1:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2023730e06c4bfbffaca905e531265742c178ab4
Validity
Not Before: Apr 28 01:01:11 2025 GMT
Not After : Apr 29 01:01:11 2025 GMT
Subject: CN=a14c540b40c759581ac602f7d17c6d1ea50b7f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:17:c7:40:26:15:d5:34:99:40:da:bb:48:
df:94:00:c4:4f:a2:60:b3:1d:5f:19:1c:cf:0d:2e:
60:8d:94:d7:a9:a2:67:61:16:11:ed:91:d7:28:3b:
08:59:ca:85:0b:95:9e:7f:89:ea:ce:48:9d:6e:95:
a7:da:4b:0e:a0:25:5c:be:33:2d:77:67:e3:e6:87:
5b:74:13:f2:70:a7:1d:56:89:62:ef:18:16:32:7f:
e8:39:ee:7a:73:bd:90:ea:6d:85:20:a6:f6:d0:fa:
4b:db:2f:d9:48:2e:2d:7f:75:59:20:e2:68:60:d8:
19:f0:79:b0:96:26:61:29:84:53:69:55:2c:24:12:
1a:e9:61:c9:bc:01:54:0f:9d:b6:a7:61:a8:4f:59:
b9:1f:02:05:96:53:c0:68:77:54:28:2d:9c:b4:f3:
4c:a3:dc:d1:25:16:b2:21:ce:dc:ed:94:4e:1d:0e:
6d:3e:f2:d1:29:30:a4:75:53:b2:80:b5:75:b3:7f:
59:de:a9:d3:25:87:1a:7c:fa:24:d7:8c:55:91:f4:
b6:a5:0f:63:22:b1:b3:ce:9d:41:f2:6c:16:d5:45:
22:8d:7c:b3:a3:62:92:e0:15:01:21:e9:c6:c6:8c:
11:7e:f3:c2:29:e5:a1:3b:cf:61:bd:bd:0b:a8:ac:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:54:0B:40:C7:59:58:1A:C6:02:F7:D1:7C:6D:1E:A5:0B:7F:6F
X509v3 Authority Key Identifier:
keyid:20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:b3:67:95:06:23:c2:f1:9c:87:8a:b9:e5:2e:66:37:f7:
e3:a3:f7:69:c7:ce:ff:a1:cd:5c:c7:15:bf:3b:89:28:e4:9c:
10:b1:14:30:f8:24:fd:01:1c:a0:d6:a2:2a:01:11:d0:9c:a9:
1c:45:46:dc:1d:ed:a4:75:bf:92:42:4a:b7:06:b1:f5:78:e8:
74:b7:50:85:e6:42:59:d4:e5:35:b8:42:ff:aa:21:38:27:60:
40:b0:08:82:06:28:82:b3:2c:d3:78:ff:37:bf:01:d9:d7:4d:
64:19:94:c5:2a:08:7c:8b:cf:58:34:12:48:c2:b5:35:f2:c7:
5e:e0:1b:8b:6e:13:61:3b:74:0c:39:2c:e0:17:46:b0:0b:ec:
81:dd:46:ca:8a:28:ca:af:05:64:e3:e2:18:50:77:df:30:1f:
ca:10:c6:85:63:2d:e7:88:61:d0:3e:83:9e:97:67:a1:0d:17:
15:c2:f8:06:6c:ca:21:7a:55:f1:48:2d:54:8b:f8:55:42:08:
5d:5c:9f:0c:6a:75:19:76:9f:5e:6c:ec:50:8e:53:d5:d5:ea:
bf:d3:75:c5:bb:76:ad:c8:63:32:3f:73:46:35:21:1f:a3:2e:
74:0a:eb:44:44:4c:b7:45:61:bd:e4:3f:ad:f0:63:84:9a:ee:
2b:45:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:07:21 2025 by rpki-client