Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: p55dGRV4RotbcUmFjP06bvaRHh29b0Mtavf3jc2WGZU=
Subject key identifier: D2:C0:58:B0:2D:BB:7A:B5:5D:CB:43:C6:A2:39:6D:0F:4C:80:86:A6
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0196B66BFFE009B9B405D94124340866EC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 19:00:53 +0000
Manifest this update: Fri 09 May 2025 19:00:53 +0000
Manifest next update: Sat 10 May 2025 19:00:53 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: dYyrEIIA1g0XWI/QrjSM0iU1/x8vb3j/6JvDlGtrObI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:ff:e0:09:b9:b4:05:d9:41:24:34:08:66:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: May 9 19:00:53 2025 GMT
Not After : May 10 19:00:53 2025 GMT
Subject: CN=d2c058b02dbb7ab55dcb43c6a2396d0f4c8086a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:6a:3c:d6:82:2a:09:b0:6f:a6:96:a6:ad:
ba:05:d4:e4:7a:5b:b7:ea:87:4f:76:9d:1b:0e:ec:
8f:5d:d2:bf:b2:f5:eb:76:9b:e6:02:35:7c:06:59:
09:d8:12:c7:cf:68:9d:5a:6d:8d:8f:c2:29:47:43:
8d:cc:8d:45:d3:64:a4:a0:ca:67:1b:b2:fe:56:fe:
c1:42:cc:da:e0:07:af:9e:32:17:c9:45:81:81:20:
52:1b:b5:8a:de:dd:6e:b6:ad:05:9a:46:52:ce:e3:
92:8e:6f:d6:fb:fb:7c:66:d4:14:0a:4f:40:f3:65:
92:03:9f:03:00:00:d1:e3:68:cc:b8:48:85:51:8a:
bc:c9:aa:39:0a:0a:97:fd:ec:0c:06:36:dd:13:ef:
75:bf:4e:e3:b5:cf:93:be:1c:78:63:42:08:14:20:
0a:46:11:60:a6:24:3e:5e:01:45:c9:84:f1:09:67:
81:83:5f:2a:1e:f8:cb:53:cd:af:aa:89:6c:ab:5e:
03:e7:cb:bd:ed:c3:ab:3c:33:6a:0f:85:fa:42:1c:
dd:9b:e9:05:31:19:e6:d7:1f:b3:b1:6d:a4:b0:e6:
0a:be:2d:5b:70:93:32:e3:13:36:52:39:ff:cd:d4:
f1:25:77:40:22:b9:3c:ea:b4:1c:9f:99:31:b2:ec:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:58:B0:2D:BB:7A:B5:5D:CB:43:C6:A2:39:6D:0F:4C:80:86:A6
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:71:ca:e0:4e:e0:16:30:bd:0c:c7:9b:85:4c:a3:ef:40:
86:3e:7c:5f:d2:38:29:aa:26:c8:34:46:11:ec:10:56:dc:81:
4e:e8:08:3c:3f:e5:39:2a:42:4e:6d:ec:bc:ba:7e:36:9b:a2:
39:c5:cd:29:c7:14:53:59:f3:61:12:19:1a:d8:70:a8:4f:a3:
bc:8d:fd:a9:00:17:c2:29:9a:ab:56:94:20:42:bf:b8:5d:a6:
06:00:6a:ef:06:d7:2b:a5:11:77:d8:d9:dd:84:e4:6a:c6:34:
d9:5d:72:25:e0:b3:a7:9e:d3:1c:23:68:f3:30:ac:d4:22:1d:
59:a3:02:fe:f0:9e:1d:47:ad:4c:d3:57:16:86:00:f6:0c:30:
8e:ca:9a:1c:7d:76:b6:12:ec:7d:6b:21:35:17:ec:77:03:24:
f9:e0:ce:91:a9:ac:ae:24:52:4e:df:21:18:68:ff:e3:be:df:
63:19:c2:15:11:80:70:31:f7:f4:10:d6:9d:94:78:87:67:fa:
cc:1a:70:95:b8:37:f2:a0:ff:a4:33:ea:7f:e1:56:50:66:4a:
66:50:31:cf:78:9f:5d:25:67:77:62:13:7b:7d:c0:7a:a1:58:
fc:22:5e:17:0a:a8:31:94:26:95:05:06:39:13:33:98:c1:10:
cb:d5:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:27:55 2025 by rpki-client