Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: LEL9SqEpo68vpCJTDkQIDipoBW09+1baXCuePeC5b9Q=
Subject key identifier: FC:A4:13:50:68:E1:AB:41:0D:BF:3D:C5:04:F5:5E:FB:EA:4F:79:5F
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0196C34C19EB2C496A0014190D04E5ED2C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 07:01:06 +0000
Manifest this update: Mon 12 May 2025 07:01:06 +0000
Manifest next update: Tue 13 May 2025 07:01:06 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: ZClNg2ux4ovn5YoC4f3lAeur107I0Zb2BnwvfBzeuk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:19:eb:2c:49:6a:00:14:19:0d:04:e5:ed:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: May 12 07:01:06 2025 GMT
Not After : May 13 07:01:06 2025 GMT
Subject: CN=fca4135068e1ab410dbf3dc504f55efbea4f795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:6c:8d:a8:d5:3a:95:57:83:7f:e1:60:e5:
22:b0:b1:bb:ec:7c:48:13:93:1a:87:b9:c2:b4:b3:
ff:61:93:a5:e8:92:74:59:23:4c:7c:aa:56:8d:5f:
65:62:00:5e:ac:9b:89:26:65:7a:96:3b:f6:9f:e3:
81:db:1a:d6:6f:0e:d0:23:3b:c8:f9:c2:d4:a3:43:
3a:1c:14:f4:76:ca:5a:06:61:86:22:10:ce:3e:ab:
24:79:3e:3c:72:be:68:93:c3:e3:9d:14:a4:89:25:
ed:8f:2e:b5:7e:dc:e1:31:ea:a8:36:72:82:5b:9b:
7b:63:62:4e:26:b1:a0:2e:16:6b:53:40:57:b9:0c:
2c:02:63:7d:67:a8:9e:84:4e:fa:c2:44:42:cd:31:
c6:2d:89:ab:1d:51:f1:0f:92:94:99:e3:0d:7d:90:
4f:5a:4a:87:29:5d:23:54:f8:f1:5c:8a:a9:5e:43:
3e:35:9f:09:db:6a:02:14:67:ca:61:f4:c9:ad:ae:
45:35:85:9c:1d:0d:17:95:ba:35:4f:8b:52:6c:33:
30:93:6a:31:e7:ed:0c:8f:5a:3a:9e:86:57:1f:1f:
1a:24:37:17:ad:db:32:22:e5:47:20:de:29:61:15:
74:dc:7b:27:8f:fa:9d:7b:55:46:b0:9c:ae:86:9e:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:13:50:68:E1:AB:41:0D:BF:3D:C5:04:F5:5E:FB:EA:4F:79:5F
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:2b:d8:4c:ff:04:6b:27:3a:c2:f7:ac:d5:cf:ec:67:76:
b6:61:fd:07:35:fd:72:88:eb:a9:75:c4:57:e6:a1:c0:0e:0b:
04:6c:38:13:e7:d0:d6:72:d3:37:b1:96:21:62:bb:b1:3a:45:
9f:30:b9:cf:f0:03:9f:f7:da:8c:d1:50:b6:29:d2:1d:41:35:
92:e0:87:39:c2:7b:95:c8:bf:74:8e:9e:68:a3:8e:4b:5c:a8:
42:54:93:7b:a6:72:13:bb:a5:66:2d:0a:54:87:90:7d:1b:58:
28:e9:3a:a1:ba:27:f3:32:56:e0:49:74:be:8b:db:7e:bf:4a:
0d:35:9d:db:4e:c7:89:40:c6:fc:9d:9f:24:3a:fb:4a:f6:6c:
87:c1:25:16:9c:7a:b5:75:02:56:be:09:4d:98:9a:ee:a9:e0:
c9:92:2b:0a:da:9c:ec:7f:aa:e1:38:b4:f3:2f:bc:0a:e8:d1:
d5:f0:bd:54:18:6f:b1:03:e6:7d:65:39:f0:20:ea:80:aa:8d:
a7:2f:00:70:d1:1a:3f:71:c2:e7:2a:0e:14:98:63:bb:74:b2:
78:31:39:b2:76:12:5f:5c:c0:e9:3c:fc:a1:9c:bc:56:9c:25:
a3:fa:31:0a:e8:1b:46:00:b1:0d:30:c3:40:b1:94:9d:ca:0b:
bb:34:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:56:30 2025 by rpki-client