Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: +dkkQx/pISzSSaI4hL0bmg7Va5QYddV50KNLQmUOVf4=
Subject key identifier: 9F:9D:F6:6A:4D:38:53:05:00:2B:3E:99:48:B8:C8:4F:D3:4C:B9:24
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 0198E453F4F7977F2562D08AC684433EFF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 1653
Signing time: Tue 26 Aug 2025 03:02:44 +0000
Manifest this update: Tue 26 Aug 2025 03:02:44 +0000
Manifest next update: Wed 27 Aug 2025 03:02:44 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: GwN10ELZszXvZqXKo3GIzkfrUYuNgXA72p7nj8yTP1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:53:f4:f7:97:7f:25:62:d0:8a:c6:84:43:3e:ff:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Aug 26 03:02:44 2025 GMT
Not After : Aug 27 03:02:44 2025 GMT
Subject: CN=9f9df66a4d385305002b3e9948b8c84fd34cb924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:bc:c3:99:f7:08:f6:97:50:52:a9:3f:35:
ec:75:9a:fc:e9:8e:4b:d3:50:a3:5f:32:eb:e0:59:
be:2a:61:9e:3c:92:e1:b5:e4:ab:fc:8b:b7:94:2d:
9d:be:fe:6c:9b:9a:3e:c3:ff:e3:02:69:28:13:d6:
39:04:2d:2d:56:c9:4c:65:1a:42:84:0f:c1:c0:04:
f9:10:a3:14:89:2c:0e:88:b9:45:bd:5c:c3:31:45:
c3:02:4c:50:05:fe:e2:2b:93:60:e4:a9:93:79:bd:
b5:83:c2:2b:9b:83:12:ad:52:55:fb:ab:61:16:70:
91:65:8d:d9:64:dc:de:22:ab:a6:96:41:45:ae:b0:
d9:79:7d:00:77:06:e1:d2:6b:c8:77:9d:c7:3c:ad:
52:c8:58:3e:df:7b:6b:be:8d:bd:08:3f:f3:75:63:
12:36:6b:04:2f:50:af:7c:43:9c:13:4a:0f:66:0d:
c1:d7:00:52:a8:e6:db:3c:13:b1:1c:c9:cc:f9:98:
f5:fe:73:2a:c4:ca:9c:a3:48:50:56:5e:ea:5a:84:
7a:af:00:4d:3a:4b:71:a3:b2:e8:a3:fc:97:86:10:
43:d1:5b:0c:61:b2:8c:00:7f:86:91:bf:03:5c:5e:
71:8f:24:25:37:2b:d2:34:a9:9e:a5:4f:61:a4:21:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:F6:6A:4D:38:53:05:00:2B:3E:99:48:B8:C8:4F:D3:4C:B9:24
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b0:1f:bc:27:fd:52:91:eb:ea:0a:55:bc:a6:fd:ef:f3:21:
f6:70:31:93:39:04:18:47:e1:b8:f0:bb:3d:21:39:c5:51:3c:
7e:8b:e4:28:21:a9:14:98:21:cf:6f:23:4c:88:16:65:0a:a8:
52:e1:1b:76:a9:73:2c:d7:08:de:69:53:5f:e0:e7:ee:ca:da:
4a:da:91:f7:ea:70:07:2b:be:e8:32:e0:92:45:75:e6:a9:d4:
00:52:b5:e1:8d:cc:17:b1:73:df:12:64:de:75:5a:a3:b0:4a:
09:88:8e:de:68:ee:bb:b5:07:3b:6e:78:5f:90:30:6f:b9:ef:
1f:20:a3:2c:b7:44:90:26:57:a9:25:49:2f:01:08:89:5e:59:
71:3a:3c:05:28:23:db:5e:a1:78:65:43:43:88:5c:55:20:41:
68:b0:da:7c:11:63:50:a1:87:1c:79:e1:2b:4c:13:50:6e:cb:
7d:c0:ce:48:8f:4d:55:59:4f:4e:da:76:af:ef:f0:16:6e:1c:
d0:b8:f3:52:96:5d:82:29:ce:ed:f9:de:82:e1:bc:40:c8:48:
59:da:1d:15:84:1a:ac:2f:18:31:2d:3a:d3:be:7a:d9:57:c1:
b6:ed:05:2f:56:f6:4e:c4:96:d1:8e:3c:57:37:04:1a:2c:3d:
d0:28:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 13:10:56 2025 by rpki-client