Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: K4nZcTHPTnsrkIzEZQJtRX0s11lLFMwJkN+P3WXB3cc=
Subject key identifier: 7A:1E:49:F9:33:F5:16:57:F7:88:54:6F:F4:7B:3E:AC:FC:4A:8D:EB
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 0196C53A5A10A1687E0E2E02378769519ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 08AB
Signing time: Mon 12 May 2025 16:00:57 +0000
Manifest this update: Mon 12 May 2025 16:00:57 +0000
Manifest next update: Tue 13 May 2025 16:00:57 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: HZCvekZMm+kT2SvZ9vz3VROKETykaqlBJxe97+HZarg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:5a:10:a1:68:7e:0e:2e:02:37:87:69:51:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: May 12 16:00:57 2025 GMT
Not After : May 13 16:00:57 2025 GMT
Subject: CN=7a1e49f933f51657f788546ff47b3eacfc4a8deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:a8:41:4a:96:55:60:43:df:67:e0:73:09:
5e:c0:17:ea:b6:12:74:64:95:b9:87:b5:83:2d:37:
90:da:5c:cf:5f:f0:24:75:0e:ed:e8:da:2b:ec:5d:
77:07:44:47:4b:69:8a:ce:68:67:56:54:5b:51:16:
37:e4:80:1a:06:e4:17:2a:a1:fe:7b:99:bc:80:60:
b0:29:f0:97:2d:74:ed:89:08:47:79:80:86:27:a3:
bd:99:ce:f9:cc:18:b7:5a:8b:25:c7:64:80:16:de:
05:3f:f6:a6:1d:81:f6:b9:dd:e1:24:23:86:18:d5:
cd:be:a4:c4:fe:ab:be:a3:78:5f:e7:45:11:ca:68:
68:da:7b:07:35:2d:b0:57:d3:e3:f8:9e:59:9c:04:
b3:38:57:8f:7b:49:b1:57:84:89:0e:f2:cd:4c:24:
42:fa:4b:36:f2:9e:42:f3:bf:b6:7c:cc:ac:3b:4a:
32:63:cc:92:69:71:cf:7f:fd:c8:42:fa:48:5a:ca:
51:62:c6:5a:17:e6:44:a4:b0:f2:ac:c6:67:70:79:
24:03:a9:22:42:9e:87:33:1c:ab:1a:94:a4:8b:05:
21:f9:2d:46:44:f6:1c:85:25:0b:e5:e2:b6:0e:94:
a5:83:18:55:f7:1d:67:78:42:5d:e3:4f:9c:ec:94:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:49:F9:33:F5:16:57:F7:88:54:6F:F4:7B:3E:AC:FC:4A:8D:EB
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:80:6b:ed:cd:fd:c1:6d:c3:f6:f9:9f:44:66:4e:97:82:42:
63:92:91:79:db:f3:8a:af:9d:5c:13:cd:95:a8:39:08:b2:cc:
41:79:42:ed:f4:ea:42:41:f4:68:90:ec:f7:63:82:db:88:77:
d5:ce:61:2c:bd:43:06:1b:54:81:7b:3f:53:e3:d5:34:55:f9:
29:0e:54:bb:16:2e:61:f7:37:2b:c4:71:27:4c:7d:25:2c:94:
f9:3e:04:02:bc:75:71:ec:49:ba:92:df:a7:09:2a:59:27:15:
d4:82:1d:1f:5c:64:10:89:47:c7:46:0c:4d:cd:5b:36:48:1b:
de:99:1f:4c:9a:06:e1:4a:fe:a9:f9:0d:ca:6b:13:ed:ce:71:
88:e8:00:e1:57:ac:1d:2b:db:f5:46:b3:62:39:16:4d:10:32:
93:e0:ee:f9:39:ad:e1:33:00:81:68:74:33:6e:6b:6e:f2:88:
93:f3:63:1a:02:1f:d6:3b:18:e0:4e:da:70:11:0d:cb:4f:b3:
6e:3d:3e:43:fc:3b:f0:79:78:ef:da:65:0b:ab:eb:05:f3:85:
aa:a7:bc:61:15:d3:a5:85:2a:57:41:ac:e2:55:fe:66:55:f7:
44:f9:f5:b0:d0:06:86:11:99:f2:35:a7:a2:44:73:9f:4a:82:
e7:6c:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:47 2025 by rpki-client