Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: UjnzxnQ5dDGGEXQxflLsWDWHqF1E4A1IqRUmLuTSdTM=
Subject key identifier: DC:D6:EE:68:06:B7:B1:05:9C:E8:BB:B5:E7:8F:1F:AA:E2:3F:9E:0B
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019A71B8ACCC034850E100A2E81116C99922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: Yn9fNiG6pVeTzJ4/jR4MOZIzhhNlU57iOGZxz3EWNdY=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ac:cc:03:48:50:e1:00:a2:e8:11:16:c9:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=dcd6ee6806b7b1059ce8bbb5e78f1faae23f9e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:49:b6:05:0c:77:22:4b:d1:20:4f:2d:a7:
41:cb:ca:2e:60:39:66:41:a5:e8:86:3e:09:0b:75:
e0:d8:6d:b2:3a:45:fc:b7:25:0d:00:b4:90:78:ab:
e4:4b:05:42:46:b0:8c:d2:7e:e4:27:2d:99:63:26:
6a:67:5d:3c:80:fa:89:1f:df:7a:72:75:e7:7f:6b:
a5:2e:36:c7:15:47:94:aa:4c:32:fb:0d:92:e6:a3:
a8:00:58:8e:c2:db:f8:d7:61:f6:a9:47:7a:03:90:
f1:53:4c:51:6e:68:ce:e0:1e:8f:16:2c:ce:5e:c6:
06:ee:79:d5:60:41:36:07:34:d3:77:92:2a:99:b7:
43:de:9c:9b:04:71:d0:04:b7:6f:2d:79:b6:16:c8:
5d:c1:af:f6:e9:e5:71:65:73:54:03:7a:aa:e8:06:
90:5f:78:9e:30:8f:73:f5:1d:50:81:de:cf:a7:55:
b4:f9:d8:ef:62:9f:52:50:e2:ad:e8:2f:0d:89:12:
76:3d:13:1f:71:ee:e4:44:6b:79:b6:ed:62:9e:9b:
97:35:6b:16:b7:2d:f5:ea:81:d7:8d:07:1e:a5:1d:
9d:82:86:9d:f2:14:12:42:41:51:c2:40:20:05:17:
c7:74:2f:68:26:eb:a4:80:b1:03:5c:54:8d:57:08:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:EE:68:06:B7:B1:05:9C:E8:BB:B5:E7:8F:1F:AA:E2:3F:9E:0B
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:79:80:ee:06:0f:4b:7e:d4:f5:c9:4f:4c:83:f6:9e:fb:
ee:0a:1b:10:c7:4a:34:b0:62:1d:9e:f0:cf:c9:0d:f4:5d:db:
88:c2:e7:2b:56:e6:67:4d:55:a7:e2:69:a3:14:1c:2f:bc:76:
de:f2:2a:04:bc:23:3f:b5:2b:e9:3a:9a:01:33:d9:73:1c:e1:
52:28:29:82:d8:6b:6d:a5:4b:06:0c:25:f3:0f:e3:3c:29:ce:
b7:5a:28:6f:8c:8a:fb:77:03:b7:c2:3e:c5:d5:d6:8a:be:c7:
4a:2a:2e:66:21:e5:fd:8a:39:da:26:e5:5f:3a:e1:9f:76:eb:
95:4b:17:5b:73:4a:74:9f:43:c1:e4:39:7b:b2:5d:ac:c7:52:
92:b8:20:2c:ef:5d:36:19:0b:32:a8:af:fd:07:b8:69:6a:02:
fd:92:7f:12:b3:3f:1c:bd:0a:51:02:02:2b:05:24:9e:e7:45:
b7:a0:ab:ab:69:05:f9:4b:97:02:fe:06:14:b2:3b:4b:9b:07:
7d:f5:b9:d2:3e:ef:4c:c3:af:4a:cc:ba:71:1f:2d:64:b6:d0:
2d:c1:a2:9b:f0:1d:20:be:84:80:20:c6:e9:9a:0e:57:d8:69:
7b:bb:76:c3:e2:20:7a:4c:50:50:90:af:76:99:50:56:4e:3e:
79:f9:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client