Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: XQf++Kyz1cLBNKEyvl0ABcWzK+x+2KEk6fhhwJzEflQ=
Subject key identifier: B9:3F:E4:3A:14:5A:95:C4:60:A5:AB:66:C0:2F:F2:3C:84:5E:4C:FA
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 0199FC586C0B8386CF99356D67468105AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: aUh6CDn43c9RUScU2kwd3c8Qa3mprMFrtyI5Y44/Z9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6c:0b:83:86:cf:99:35:6d:67:46:81:05:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=b93fe43a145a95c460a5ab66c02ff23c845e4cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:be:54:f8:8b:41:8b:c7:b1:62:42:16:b5:
c0:a8:0f:c4:93:27:40:fc:ed:09:07:aa:87:b9:27:
06:d4:1e:af:b5:5b:dc:63:e2:fb:93:da:aa:4a:e2:
41:b7:2f:a7:49:d5:95:cb:48:af:6e:8f:34:af:48:
64:be:19:80:58:c9:22:72:5b:dd:1a:23:6f:8e:af:
d4:9a:40:6d:43:64:6a:91:45:77:ad:12:9d:61:98:
cf:fb:f6:d6:ec:3c:76:83:fa:5a:cb:20:72:9c:9e:
b2:4e:d5:27:78:a4:21:01:af:00:d4:53:7e:9f:da:
d9:eb:24:fa:6e:d4:14:1f:5f:87:41:de:07:6e:9d:
77:0a:e2:76:96:8d:62:6a:23:e9:b3:31:88:25:13:
25:08:25:f1:e0:1f:1f:41:c2:af:29:ab:a2:c3:b9:
2f:55:48:f0:57:27:55:47:66:55:91:d1:32:8e:07:
81:00:8a:f1:c1:59:af:eb:5d:2e:25:7f:8b:1e:a7:
65:10:77:58:33:62:00:5f:98:67:8d:ca:fd:61:65:
bd:96:e0:52:61:b8:b5:d4:0f:6b:15:f9:87:d1:3b:
59:fd:35:31:1f:1d:03:b4:68:fb:c4:a8:b5:ac:13:
cb:9d:b6:17:a6:53:9c:9d:f0:65:db:6e:04:49:b8:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:E4:3A:14:5A:95:C4:60:A5:AB:66:C0:2F:F2:3C:84:5E:4C:FA
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:54:4b:1e:2f:c6:67:ff:2c:8e:fe:fd:b1:1c:ff:99:8b:
a0:96:60:d8:9f:f5:be:fe:17:77:46:ae:a3:21:6d:9e:b7:29:
46:2e:ed:23:8e:5a:69:b2:b2:ae:a1:c4:13:ff:50:67:1c:b2:
c6:5d:e0:f5:fd:ce:17:a6:88:1c:73:28:6b:76:3f:9b:a1:dc:
9d:d7:3d:67:90:37:78:0a:e2:ae:4d:03:be:62:ec:cc:73:5f:
69:cf:a7:f7:a8:7a:1c:c2:f7:40:91:d3:4a:5c:e7:81:2a:8c:
46:29:ff:86:b4:2e:83:87:ed:5c:af:26:c5:c0:63:96:40:26:
db:0c:7e:6a:d2:62:2c:e8:2f:b3:d9:d6:58:15:41:30:e2:4c:
b9:eb:c8:cc:95:de:38:5c:f8:3e:24:2d:f4:86:df:8d:33:bb:
31:34:2c:2d:01:ae:70:23:86:e7:41:af:46:db:b6:a0:38:f9:
c9:c9:c2:c8:1b:bf:51:3f:d4:25:6b:dc:65:9d:78:9a:3a:3f:
b1:a4:23:b8:41:90:41:1b:cd:5c:52:31:ec:74:db:c7:57:e1:
af:f2:2a:58:29:8f:14:b2:5d:18:2e:c6:a0:12:5d:6c:c3:12:
53:2a:e6:49:8f:9e:bf:b1:d9:b5:12:7e:91:97:9f:96:3f:79:
bb:fb:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:34 2025 by rpki-client