Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
File: ICNzDgbEv7_6ypBeUxJldCwXirQ.mft (raw, json)
Hash identifier: a0PaipQNI3K3CUdx+tyLf8daGvcYAFYyT4U9KPrz3RA=
Subject key identifier: 52:D9:4C:14:21:43:64:E9:68:02:FA:0A:95:CE:0D:60:A6:74:CD:EF
Authority key identifier: 20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Certificate issuer: /CN=2023730e06c4bfbffaca905e531265742c178ab4
Certificate serial: 0197808E4B7DF88C1C97313F628D4642800A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
Manifest number: 0F6D
Signing time: Wed 18 Jun 2025 01:01:38 +0000
Manifest this update: Wed 18 Jun 2025 01:01:38 +0000
Manifest next update: Thu 19 Jun 2025 01:01:38 +0000
Files and hashes: 1: ICNzDgbEv7_6ypBeUxJldCwXirQ.crl (hash: 8TD2ZfGYqM4u1Cna3Hyip4poT2JPr1wjMmGm2IRsTf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:4b:7d:f8:8c:1c:97:31:3f:62:8d:46:42:80:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2023730e06c4bfbffaca905e531265742c178ab4
Validity
Not Before: Jun 18 01:01:38 2025 GMT
Not After : Jun 19 01:01:38 2025 GMT
Subject: CN=52d94c14214364e96802fa0a95ce0d60a674cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:c4:6b:62:9a:d0:b2:62:98:bd:42:87:f8:
2b:6a:d8:3c:f1:2c:5a:75:bf:cb:80:17:39:02:cc:
51:3f:86:ed:21:a1:74:42:d5:d5:03:2a:ba:20:bb:
fe:0b:34:8d:76:ef:55:4b:c8:61:56:2c:34:27:b1:
4e:15:f6:8b:da:6e:96:70:c0:5b:74:b6:1a:c7:2b:
7e:8a:27:eb:40:e2:a2:3c:15:92:a6:95:1f:bf:6f:
ee:7c:f4:9b:fb:b8:3e:91:f9:2a:c4:55:cc:af:5c:
72:aa:bf:ab:c3:a4:1b:c1:2b:dd:1c:46:be:08:c4:
34:59:63:d4:b7:fe:7f:27:32:0a:32:9f:01:cc:2e:
52:cf:5c:0d:06:a4:56:36:42:a1:42:4f:91:81:8b:
da:89:f5:98:eb:12:9b:d4:30:d6:cd:10:0e:2c:47:
3c:37:85:b4:6d:7e:ab:de:27:c7:94:06:c3:a8:45:
52:66:20:24:ae:10:57:90:00:47:d0:76:c1:0b:77:
d2:1c:dc:89:a4:ca:67:d2:d6:93:fb:af:3f:66:00:
d2:f4:a7:1f:4f:fc:82:3f:e5:66:44:f3:66:1f:36:
4c:d3:61:60:ed:9b:4e:0e:d8:bb:b9:a9:e1:34:17:
3a:45:3f:0e:95:99:8b:89:eb:9a:8c:ce:4f:05:d1:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:4C:14:21:43:64:E9:68:02:FA:0A:95:CE:0D:60:A6:74:CD:EF
X509v3 Authority Key Identifier:
keyid:20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:7d:36:34:3f:c3:51:4d:d3:9c:f0:82:25:ce:d0:2b:07:
b4:e6:74:82:29:ac:2f:d3:d5:cb:af:e9:53:fc:90:5c:af:d2:
8f:89:8c:7e:11:49:85:ea:b0:08:a6:6d:e7:b5:e8:88:13:d8:
93:f9:e3:bb:6b:4b:3e:a9:4a:7f:1c:da:2d:63:30:4a:b9:3a:
74:7b:51:49:cb:29:9f:d7:92:f6:ae:3b:8f:63:22:86:38:57:
4f:c7:bf:45:35:16:aa:7d:e5:c5:1e:a2:f9:39:b5:99:9e:49:
d2:f3:7c:fc:d0:85:d1:e4:bd:d9:24:33:e9:07:c9:6f:bb:88:
fc:4f:09:16:62:bc:32:4c:bf:b8:56:43:f6:32:d9:a2:fd:11:
4b:d3:b3:05:e8:eb:d7:b0:7c:8b:34:00:77:c5:9f:82:45:5d:
0c:ce:6e:a6:ca:ec:f8:cb:7e:b0:c7:2a:ca:5c:a4:5c:a2:95:
01:46:1a:98:cc:66:5d:d8:7e:e3:84:ad:b3:ed:6f:af:a9:0d:
df:4e:2c:97:fd:d9:b4:90:94:00:57:c9:90:ec:3b:11:57:a0:
45:c1:ea:22:22:62:35:e1:64:51:47:91:8b:c6:62:5e:f7:d5:
4b:23:7f:4d:7a:3e:0f:16:da:80:5f:21:e4:16:03:e9:32:ee:
68:fb:d2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:44:46 2025 by rpki-client