Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
File: ICNzDgbEv7_6ypBeUxJldCwXirQ.mft (raw, json)
Hash identifier: tRp/mOhZFwCrtbcIkBqwsqZDWyi/AG+pq+8gslfOyAc=
Subject key identifier: A8:74:7D:06:28:9E:11:41:E4:F9:B3:C9:08:24:11:D2:CB:40:D8:E6
Authority key identifier: 20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Certificate issuer: /CN=2023730e06c4bfbffaca905e531265742c178ab4
Certificate serial: 019890DB00B57A9476D0882F3CD51335D076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
Manifest number: 0FFA
Signing time: Sat 09 Aug 2025 22:02:08 +0000
Manifest this update: Sat 09 Aug 2025 22:02:08 +0000
Manifest next update: Sun 10 Aug 2025 22:02:08 +0000
Files and hashes: 1: ICNzDgbEv7_6ypBeUxJldCwXirQ.crl (hash: dsDOc0Zwqi+MorTydLePZgRG9bTSJSj8/ng4HhowJNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:00:b5:7a:94:76:d0:88:2f:3c:d5:13:35:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2023730e06c4bfbffaca905e531265742c178ab4
Validity
Not Before: Aug 9 22:02:08 2025 GMT
Not After : Aug 10 22:02:08 2025 GMT
Subject: CN=a8747d06289e1141e4f9b3c9082411d2cb40d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:aa:49:e8:65:85:d7:e6:a7:8f:24:ea:53:
41:eb:b7:5d:48:e6:6a:a2:8c:36:b3:23:56:bc:3d:
6d:42:a0:9c:fe:62:43:17:a1:4c:99:bd:58:90:12:
47:6b:79:1b:ff:40:95:d9:e9:e2:11:d4:f2:95:3c:
22:f3:aa:a7:99:b8:c1:0e:f6:64:98:8a:7e:b0:11:
a4:ad:dd:ae:5a:be:cb:18:66:0e:44:1f:83:ec:db:
b8:ab:eb:46:bc:20:80:0c:26:e3:d8:06:26:9b:66:
79:81:43:10:6a:60:71:69:f2:1c:84:1d:14:dd:43:
b2:ab:51:07:f6:14:54:19:3d:dc:06:97:82:58:45:
2b:52:52:f9:a0:a1:83:bd:ae:fe:6b:7f:af:cb:56:
61:73:d5:0b:d8:34:a8:33:e2:71:cd:e9:57:5c:0f:
ca:5e:a5:68:be:c6:fe:2e:6d:ec:40:55:aa:60:60:
6b:da:b3:37:39:92:66:52:4f:80:c5:b1:fc:a2:43:
e7:be:ff:60:b2:ac:bb:fd:8e:31:76:14:48:6a:68:
0a:c8:d4:ac:63:aa:57:4d:72:82:f7:25:9b:2d:d8:
c8:fd:60:e7:65:35:ca:fc:0d:d5:3e:84:3f:35:82:
1c:e8:b6:84:df:6e:a9:35:dd:74:35:cc:9f:68:e2:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:7D:06:28:9E:11:41:E4:F9:B3:C9:08:24:11:D2:CB:40:D8:E6
X509v3 Authority Key Identifier:
keyid:20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5f:72:3f:88:81:28:52:88:ee:b2:83:3d:4f:e8:cf:fa:95:
54:62:28:d8:63:54:5c:6a:4a:97:79:5d:1b:a0:dc:17:77:ad:
b5:0f:5e:9e:dd:8f:d6:ad:c4:2c:32:9f:8a:83:69:43:88:93:
96:02:c4:9e:a5:f3:a9:4a:29:ff:97:71:67:52:c9:c5:1a:2f:
41:47:43:fa:05:9a:7a:f2:fa:57:15:15:c6:e3:79:e6:ba:4e:
7a:e7:c4:28:ab:2f:54:ee:48:37:09:ec:db:92:23:20:e5:fa:
06:5e:e2:f5:90:5c:ff:0e:a1:69:29:71:ba:f4:8a:2d:d4:00:
37:45:bc:7b:3b:8b:32:34:0a:73:b8:d1:5e:d2:ac:51:02:f5:
a6:78:2b:8a:24:81:27:33:21:3c:9e:f2:0d:3e:36:40:ce:19:
b9:55:9f:9c:ab:e9:f5:de:c1:c5:4f:73:cd:6e:9c:8a:b0:9d:
fa:5f:59:18:70:2e:6b:5d:3e:06:3b:2c:07:f3:a0:21:20:f2:
ad:b5:74:7a:dc:eb:6f:0e:93:57:1a:bd:f0:90:5c:32:67:72:
5f:ff:b8:19:f1:d5:b5:b4:53:8e:ae:44:56:eb:fc:98:51:92:
8b:d9:82:71:05:9c:63:f5:69:ec:67:48:7f:e9:3f:3d:bc:f3:
41:da:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:03 2025 by rpki-client