Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: 6atyXa7kowaZgPs+wPqyTWb2DjKIdq4pGRMSVU8eJh4=
Subject key identifier: 25:EA:2D:42:40:FE:6D:44:0C:F8:3B:61:70:C6:28:01:FF:85:3F:2A
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 01984B548A4F28342F087E8BB16F5CA12F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0A0F
Signing time: Sun 27 Jul 2025 10:01:28 +0000
Manifest this update: Sun 27 Jul 2025 10:01:28 +0000
Manifest next update: Mon 28 Jul 2025 10:01:28 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: txM+AZwAxm8ONGej4IwObwvepXJc26dk9u1fPp/obLs=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:8a:4f:28:34:2f:08:7e:8b:b1:6f:5c:a1:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jul 27 10:01:28 2025 GMT
Not After : Jul 28 10:01:28 2025 GMT
Subject: CN=25ea2d4240fe6d440cf83b6170c62801ff853f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:f2:02:79:79:b7:0b:30:a3:07:07:3a:eb:
9d:99:5f:3c:f3:a8:10:96:ff:6d:78:3d:8b:7e:71:
f6:41:9f:ce:8d:ed:ef:57:6b:67:59:67:20:eb:ae:
d5:8c:98:89:81:1d:6c:10:81:9c:01:d4:db:e6:c8:
af:d2:d8:25:ba:12:46:a6:d4:12:af:61:9c:4e:04:
87:43:af:35:cb:42:ff:c8:03:60:ce:63:2e:fd:0d:
c7:94:2e:bf:c4:30:93:e6:2a:98:58:38:c7:fc:e5:
48:ec:5b:de:91:c0:7a:59:c3:a7:67:f7:b7:64:55:
74:ce:01:55:92:d4:ff:65:6e:b6:45:f9:fe:4e:16:
7b:82:0e:16:36:9a:94:f2:80:48:d6:b5:c9:93:9d:
67:a4:87:df:05:27:76:4a:af:79:1b:22:52:66:19:
95:00:4d:a4:c8:63:f6:ce:8c:b7:16:97:dc:2e:c6:
a3:a2:31:1a:0e:8e:91:4c:55:a9:fa:c5:2c:4a:a5:
d5:ff:b4:ce:b6:28:4d:8b:71:f7:a2:02:be:2a:db:
23:bf:7c:99:6d:ea:db:ff:51:89:70:54:7a:4e:d7:
f7:2e:98:0a:cc:60:46:c4:68:5f:12:00:b2:d6:51:
58:e9:f0:d2:c9:37:a9:09:36:da:c8:ba:85:65:74:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:2D:42:40:FE:6D:44:0C:F8:3B:61:70:C6:28:01:FF:85:3F:2A
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:5c:38:dc:f7:fa:6d:81:b6:09:73:33:10:4d:51:af:c4:
75:56:0a:c8:c2:67:f6:64:88:9d:d2:5c:75:25:e9:6e:0d:97:
75:b2:9f:77:37:ba:73:c8:37:94:35:06:81:b1:b3:75:26:df:
1b:d9:a1:df:44:24:fb:de:ad:b6:ba:ff:73:b7:ef:3a:a3:7f:
2c:8a:e8:06:c8:aa:4f:56:20:de:3d:3d:6e:33:7f:3a:63:aa:
96:f0:11:61:20:62:e4:95:b1:0f:bd:99:3f:50:58:33:15:5b:
1e:38:eb:9b:28:f1:7c:64:45:97:a4:93:ab:55:bd:4a:5e:d7:
c8:b0:a6:b9:31:14:f2:f7:92:93:54:96:09:dd:76:35:b5:c8:
cb:1b:7b:cb:c3:9a:c1:83:d6:da:da:5b:28:d9:94:de:1a:a4:
31:30:4b:26:f8:ce:10:56:f4:8e:a5:42:59:d4:46:44:57:45:
ca:37:27:fb:72:11:fa:74:94:97:d5:af:34:f4:ea:0b:df:52:
21:7d:a7:2c:a9:6c:1f:3a:dd:0c:3a:99:ef:e6:ce:51:02:54:
7c:24:df:22:77:ce:54:f4:be:e0:65:a7:7f:1c:47:d5:5d:d0:
22:0b:45:a5:45:9d:23:56:a2:15:59:41:b9:73:76:77:5a:3d:
92:f7:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:20:19 2025 by rpki-client