Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: iSKEU5X6zWH6ef5/pns7xfFiDTCCrtT0Hat2/uFgi90=
Subject key identifier: 27:96:C0:AB:7B:B9:AD:F8:77:1B:5F:E7:F7:84:25:4D:F6:D9:F2:BC
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 0199CFED0EC09CD062E6AE80D6C65CA7CB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 16CD
Signing time: Fri 10 Oct 2025 21:00:43 +0000
Manifest this update: Fri 10 Oct 2025 21:00:43 +0000
Manifest next update: Sat 11 Oct 2025 21:00:43 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: I+gt9qBFDDoTK/+Bq7kXIHupeMzGGAdypjsszmn4EKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:ed:0e:c0:9c:d0:62:e6:ae:80:d6:c6:5c:a7:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Oct 10 21:00:43 2025 GMT
Not After : Oct 11 21:00:43 2025 GMT
Subject: CN=2796c0ab7bb9adf8771b5fe7f784254df6d9f2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:53:44:69:f1:0a:15:2c:64:64:5f:e6:eb:a9:
3a:08:bb:c9:c4:69:37:d2:4e:fb:c2:86:1e:51:2d:
d2:4a:cb:66:2a:4c:33:b7:c0:4b:9f:28:b3:b2:d1:
c4:81:b4:4c:e1:8d:02:d0:4f:4f:e1:9e:74:66:71:
0b:bb:af:b8:5f:c0:d4:53:30:ba:0a:89:b0:9c:dd:
a8:2b:18:fa:24:f9:2d:f3:ee:d9:52:4d:ee:a4:f4:
32:ee:8f:d7:08:01:70:d2:3c:53:ee:43:73:d3:97:
f0:93:8f:94:c7:36:12:f2:e7:15:3d:02:96:09:3b:
53:46:22:fa:89:10:cb:71:22:0c:00:79:44:91:7e:
7d:bc:b7:2a:f0:98:bb:35:ad:1a:7b:98:9e:71:45:
20:9a:8d:79:0a:29:e4:d2:24:5c:a0:d7:a6:e4:95:
fc:ec:d6:b7:b6:06:c2:ec:58:b9:e2:c6:b1:55:d1:
58:db:36:b9:56:76:85:82:d2:b2:d6:7f:9a:88:b4:
07:37:1f:5f:56:a2:f5:03:a7:fa:3d:7e:be:55:2c:
7d:27:8b:e1:21:eb:35:02:62:92:dc:d5:28:ab:0a:
05:6f:a0:74:c7:84:18:fc:7e:ec:a6:06:65:6b:7d:
cb:d1:1e:83:c6:dc:1c:08:6b:d5:3e:0e:a8:12:f4:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:C0:AB:7B:B9:AD:F8:77:1B:5F:E7:F7:84:25:4D:F6:D9:F2:BC
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:c9:06:22:b4:8e:dd:f1:f3:4c:ea:1b:d9:48:b9:89:25:
49:ec:bf:6e:e3:28:e4:7a:32:8d:19:42:a9:17:15:45:20:33:
f7:41:64:c8:2c:53:01:a3:3b:29:3a:de:cc:17:54:52:87:87:
84:93:53:2b:1c:d1:70:43:57:03:fe:71:60:ce:43:90:85:e9:
0e:63:1a:6d:34:08:7e:59:fb:5f:1a:96:c7:cc:ee:6a:97:d4:
e4:81:99:58:c6:a5:6a:83:ce:67:72:87:b0:c3:5d:4b:10:0b:
e4:ca:0c:bf:ad:9f:18:9e:cd:0a:fd:83:20:4a:3c:82:31:05:
b4:11:a6:d9:a5:3b:24:9f:ab:89:2b:f8:2b:af:cb:7d:59:61:
a5:71:0f:7a:de:ed:18:27:7d:74:d4:b6:f5:9a:cf:35:ed:ba:
cd:da:aa:dc:64:9a:ac:c6:9c:a7:bb:0e:70:e8:87:7e:e4:44:
93:9e:90:43:05:26:8f:6e:23:da:dd:44:90:7d:b9:17:6b:ee:
74:08:95:4a:44:af:57:ef:20:9b:bd:f8:d4:df:b8:f9:21:0e:
76:5b:e4:7f:32:fc:b9:51:b1:14:ef:e9:1c:75:24:ef:e9:0d:
85:f3:10:c3:58:96:c3:34:23:45:29:95:88:50:76:8a:a8:4b:
7e:7e:f2:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnP7Q7AnNBi5q6A1sZcp8uFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3
NGRmOTIwHhcNMjUxMDEwMjEwMDQzWhcNMjUxMDExMjEwMDQzWjAzMTEwLwYDVQQD
EygyNzk2YzBhYjdiYjlhZGY4NzcxYjVmZTdmNzg0MjU0ZGY2ZDlmMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31NEafEKFSxkZF/m66k6CLvJxGk3
0k77woYeUS3SSstmKkwzt8BLnyizstHEgbRM4Y0C0E9P4Z50ZnELu6+4X8DUUzC6
ComwnN2oKxj6JPkt8+7ZUk3upPQy7o/XCAFw0jxT7kNz05fwk4+UxzYS8ucVPQKW
CTtTRiL6iRDLcSIMAHlEkX59vLcq8Ji7Na0ae5iecUUgmo15Cink0iRcoNem5JX8
7Na3tgbC7Fi54saxVdFY2za5VnaFgtKy1n+aiLQHNx9fVqL1A6f6PX6+VSx9J4vh
Ies1AmKS3NUoqwoFb6B0x4QY/H7spgZla33L0R6DxtwcCGvVPg6oEvQi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeWwKt7ua34dxtf5/eEJU322fK8MB8GA1UdIwQY
MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt
ZmQxMjBjMzFkYTcyLzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy
LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHvJBiK0
jt3x80zqG9lIuYklSey/buMo5HoyjRlCqRcVRSAz90FkyCxTAaM7KTrezBdUUoeH
hJNTKxzRcENXA/5xYM5DkIXpDmMabTQIfln7XxqWx8zuapfU5IGZWMalaoPOZ3KH
sMNdSxAL5MoMv62fGJ7NCv2DIEo8gjEFtBGm2aU7JJ+riSv4K6/LfVlhpXEPet7t
GCd9dNS29ZrPNe26zdqq3GSarMacp7sOcOiHfuREk56QQwUmj24j2t1EkH25F2vu
dAiVSkSvV+8gm7341N+4+SEOdlvkfzL8uVGxFO/pHHUk7+kNhfMQw1iWwzQjRSmV
iFB2iqhLfn7yrQ==
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:09:29 2025 by rpki-client