Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: ccN4fF/lprdbJ7VvpnUyUtmVy4ELO2vnvkapaGxoU/U=
Subject key identifier: D2:D8:54:F8:BB:38:53:2B:C8:E5:45:1A:98:3E:05:29:98:52:21:18
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 01984776B8D27C6B814BF43B01AC8F37DE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 0973
Signing time: Sat 26 Jul 2025 16:00:19 +0000
Manifest this update: Sat 26 Jul 2025 16:00:19 +0000
Manifest next update: Sun 27 Jul 2025 16:00:19 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: aKV88ujy9ToP57lojskoK8sKq2xEe/LXaXIY2Z5RNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b8:d2:7c:6b:81:4b:f4:3b:01:ac:8f:37:de:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Jul 26 16:00:19 2025 GMT
Not After : Jul 27 16:00:19 2025 GMT
Subject: CN=d2d854f8bb38532bc8e5451a983e052998522118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:bb:69:4d:b8:7a:f4:2c:02:d8:b0:c7:b0:
7a:c6:b9:d8:5b:4e:35:0d:df:e1:71:30:3b:62:d3:
45:0b:53:11:ad:de:26:9f:00:f5:f6:2e:94:da:08:
b0:33:a4:ff:13:a3:e9:bd:e9:39:70:04:cb:b1:a3:
68:f5:8e:6c:2b:42:0d:b9:2a:f5:2a:b3:9a:7d:dd:
4d:3b:bc:d7:8b:50:06:79:b4:b7:4c:01:5b:82:07:
4d:c3:5f:8d:ec:86:a6:59:40:f6:6c:72:92:10:64:
8d:4c:7a:1b:89:88:0c:8a:fa:f7:f7:3b:74:54:cf:
02:2d:7c:33:77:8c:f4:7b:b2:fa:a1:07:43:d3:c5:
a0:27:9a:df:7c:8c:c7:72:8f:51:83:15:f4:5a:eb:
57:99:c4:a1:7b:a1:19:88:cf:b0:3d:07:e4:40:e1:
2d:6b:a9:06:11:f6:7c:01:b4:a0:cd:80:89:4d:47:
48:a9:14:2f:5e:b2:91:d3:2a:ba:51:3d:28:ca:ba:
e7:3e:cc:f5:76:8f:fa:00:9e:2a:77:89:ae:7e:65:
e0:e5:c2:d1:70:92:f2:d2:da:92:ad:51:d4:b4:b3:
7b:d1:4d:0a:7e:3b:26:ff:3a:5e:88:36:ae:9a:f5:
7b:97:41:30:24:b9:22:df:16:f2:61:5d:69:0a:41:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:54:F8:BB:38:53:2B:C8:E5:45:1A:98:3E:05:29:98:52:21:18
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:b4:ee:46:19:5d:9e:4a:e0:83:2d:66:9b:a9:93:98:b4:
72:78:06:a4:28:3b:d5:2b:d7:67:2c:1b:6a:5a:50:17:3f:6a:
13:ce:65:6f:35:96:f1:35:3b:e8:63:3d:67:a7:3a:ac:9b:89:
5d:bc:ff:82:e2:99:25:81:64:98:4b:ba:ab:72:01:cc:11:7c:
c2:b1:17:0c:8d:5c:45:91:5b:74:8c:02:21:ca:b2:db:19:01:
d4:ad:e0:e6:06:60:54:51:47:f0:f0:3b:c1:8d:65:a1:15:89:
f6:99:16:ad:4e:e9:c8:ee:f0:d7:54:93:f4:60:6e:c5:e2:60:
91:cb:2b:37:d8:e6:e9:7a:87:22:1a:4c:b2:80:e8:83:90:67:
13:d7:8b:0a:e7:e5:c2:47:ea:71:26:12:d8:62:20:3f:da:64:
af:96:44:d5:e7:da:2a:50:22:b4:8f:5c:e1:d3:ff:3b:3c:ad:
e9:1e:b5:bc:5d:6b:d6:80:d9:69:d8:4e:ff:eb:f9:52:8a:71:
e0:bf:78:c1:98:55:92:0f:2f:31:7b:09:55:6e:c0:77:13:bf:
7c:4c:ea:a4:42:3b:a2:b5:88:11:aa:5d:d0:70:5d:0e:5c:c4:
e2:46:9e:28:a8:86:75:30:03:14:74:07:12:fe:67:76:f3:34:
70:ee:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:15 2025 by rpki-client