Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: VcRMwaGImYgXaF1m3212ZRFJNO0RZMMOnnisVmpxkQI=
Subject key identifier: 1F:A2:07:58:C8:4F:71:C8:AF:E7:A9:22:96:6E:85:CE:BD:3E:97:CD
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 01974666F8347E3847AC7EAE8513F58D08D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0988
Signing time: Fri 06 Jun 2025 18:00:42 +0000
Manifest this update: Fri 06 Jun 2025 18:00:42 +0000
Manifest next update: Sat 07 Jun 2025 18:00:42 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: flREi/gMx5wx89qTnDYnOrcRpkbg7IGo9GRnbZ0asgA=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:f8:34:7e:38:47:ac:7e:ae:85:13:f5:8d:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jun 6 18:00:42 2025 GMT
Not After : Jun 7 18:00:42 2025 GMT
Subject: CN=1fa20758c84f71c8afe7a922966e85cebd3e97cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:76:d6:ae:94:24:5a:96:70:d7:26:2e:ac:
d5:98:24:e9:fb:cc:b4:74:e2:ce:ae:d1:56:b3:b5:
3e:df:39:d9:0d:2f:b8:27:ef:96:64:9b:b5:ac:69:
dc:b1:03:83:d0:06:82:a1:79:e2:84:c4:aa:3e:bf:
01:0d:64:aa:6b:0b:8a:c5:00:42:4c:92:3e:a8:a5:
2c:55:9c:3b:02:6d:eb:fa:5f:57:ba:f9:f7:12:c8:
87:08:4b:3b:65:3a:aa:40:de:f4:5a:af:38:48:11:
4c:65:f0:f2:c3:21:4a:7c:90:8b:f4:0c:7d:c6:b9:
b4:aa:b3:ad:08:df:b9:46:6f:1c:93:39:f8:89:f6:
c1:29:04:59:e0:14:c5:ff:0b:bc:3f:46:ad:39:40:
b2:45:63:db:a7:0b:7c:6e:4e:c9:1c:22:b0:df:50:
a7:01:30:12:42:0a:0c:76:5d:18:82:d1:10:59:a2:
37:fd:86:23:fb:4e:0c:70:9c:11:c7:db:87:23:2b:
18:5e:cc:de:2d:8b:b6:5e:90:f3:7c:ca:17:16:79:
77:3d:b1:b5:90:d7:9c:e1:5c:e4:2b:19:a7:a7:9f:
4b:7e:c2:25:b8:75:d9:09:7f:92:5b:7f:cd:7b:56:
a9:8b:a2:2f:d6:c5:e9:cb:db:bd:21:54:d4:f2:d1:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A2:07:58:C8:4F:71:C8:AF:E7:A9:22:96:6E:85:CE:BD:3E:97:CD
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:b2:55:61:df:7b:83:34:6a:55:30:b9:c1:df:b2:de:26:
6e:e7:2b:cc:7b:f7:75:aa:9f:e7:91:4a:e4:ba:1b:84:a4:13:
5b:68:3d:e2:86:dd:5b:04:63:3f:3a:f4:a8:52:2e:cb:da:ea:
53:ff:0f:62:c4:3b:f5:71:52:41:d2:85:4c:3d:12:72:8c:ff:
cc:61:b8:0c:31:39:df:c3:bf:7c:08:10:4c:ae:75:19:7d:2b:
19:93:c7:64:62:77:e6:6a:63:10:f2:bf:47:27:41:45:e3:80:
27:2a:ed:e5:7a:9b:d2:02:b2:a8:98:0e:fb:84:69:06:95:65:
a0:8d:24:52:98:bf:60:b0:f2:b4:09:02:78:ab:fb:15:3f:08:
0a:7d:20:64:22:6b:39:43:8a:d6:47:55:c4:83:9e:54:41:01:
65:3f:84:dc:16:9b:14:8c:bf:d6:99:0a:15:31:22:75:f4:8e:
76:d4:41:3a:3b:78:b8:f5:28:ba:83:57:d7:a6:93:07:1c:03:
9d:aa:66:e9:2d:50:8d:7c:a7:20:ad:c1:02:26:0b:bd:30:25:
c0:fb:a8:06:f0:09:c7:2e:53:4c:88:51:ff:33:1b:7c:11:36:
85:5f:6a:8f:f0:04:22:51:e5:3e:06:84:db:5c:1a:c9:5e:ad:
3f:82:bb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZvg0fjhHrH6uhRP1jQjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz
NjhjODIwHhcNMjUwNjA2MTgwMDQyWhcNMjUwNjA3MTgwMDQyWjAzMTEwLwYDVQQD
EygxZmEyMDc1OGM4NGY3MWM4YWZlN2E5MjI5NjZlODVjZWJkM2U5N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE921q6UJFqWcNcmLqzVmCTp+8y0
dOLOrtFWs7U+3znZDS+4J++WZJu1rGncsQOD0AaCoXnihMSqPr8BDWSqawuKxQBC
TJI+qKUsVZw7Am3r+l9Xuvn3EsiHCEs7ZTqqQN70Wq84SBFMZfDywyFKfJCL9Ax9
xrm0qrOtCN+5Rm8ckzn4ifbBKQRZ4BTF/wu8P0atOUCyRWPbpwt8bk7JHCKw31Cn
ATASQgoMdl0YgtEQWaI3/YYj+04McJwRx9uHIysYXszeLYu2XpDzfMoXFnl3PbG1
kNec4VzkKxmnp59LfsIluHXZCX+SW3/Ne1api6Iv1sXpy9u9IVTU8tGSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+iB1jIT3HIr+epIpZuhc69PpfNMB8GA1UdIwQY
MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt
ZTkxZmY1ZmU2YzI2LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2
LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZuyVWHf
e4M0alUwucHfst4mbucrzHv3daqf55FK5LobhKQTW2g94obdWwRjPzr0qFIuy9rq
U/8PYsQ79XFSQdKFTD0Scoz/zGG4DDE538O/fAgQTK51GX0rGZPHZGJ35mpjEPK/
RydBReOAJyrt5Xqb0gKyqJgO+4RpBpVloI0kUpi/YLDytAkCeKv7FT8ICn0gZCJr
OUOK1kdVxIOeVEEBZT+E3BabFIy/1pkKFTEidfSOdtRBOjt4uPUouoNX16aTBxwD
napm6S1QjXynIK3BAiYLvTAlwPuoBvAJxy5TTIhR/zMbfBE2hV9qj/AEIlHlPgaE
21wayV6tP4K7bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:10 2025 by rpki-client