Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: dSNQJWdVeXKkYJNKoymB/RKyVgPpa4n44N3BdQuRIqs=
Subject key identifier: BC:42:FC:98:3A:ED:39:1A:8C:C2:92:56:BE:04:F5:85:05:74:28:BC
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 0197B70F49777662F9C01297FDF6CE409DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: TGs3q2gLFK+XW8/sufA9GJSYUHrtwKchzqsY42DZcWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:49:77:76:62:f9:c0:12:97:fd:f6:ce:40:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=bc42fc983aed391a8cc29256be04f585057428bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:7e:2f:e6:26:f7:55:1b:ea:b3:2f:a8:64:
1c:5c:a5:71:e5:30:2d:cd:29:c9:de:02:04:ad:8b:
21:42:93:59:55:35:63:08:48:34:02:df:40:f7:54:
21:51:47:e6:a7:18:b0:58:71:5a:09:5a:ee:3c:75:
d9:57:42:f7:41:03:e0:9d:e9:83:3c:54:f5:73:5c:
8e:b8:15:11:3e:75:77:39:b2:27:58:d0:a6:19:d8:
10:a7:7e:7a:98:e0:a2:57:24:59:c0:59:37:52:0e:
db:33:62:b2:7e:58:4f:fb:dd:a1:5f:a8:62:9c:8c:
79:7f:26:22:7a:02:55:b9:d0:26:cf:75:69:da:dc:
e6:63:9d:10:a2:fa:75:56:a4:78:ae:ae:28:57:d0:
9c:1f:37:e1:63:01:d7:a5:c2:05:42:2c:2b:82:6b:
c6:6e:11:a1:00:49:f1:0d:06:9b:af:38:a9:e1:2c:
f0:72:46:10:3a:3f:45:70:e8:b4:3e:5e:92:1e:65:
2b:8b:26:f5:82:fc:2f:07:93:94:a5:5c:e1:18:76:
30:a0:4b:7e:ce:c2:e7:e0:53:fa:34:09:fd:90:46:
1a:fe:67:4a:9c:a9:99:c7:c9:1e:f5:57:f3:9a:cd:
36:f3:bb:09:50:98:3d:ed:06:e9:ca:b3:d3:d0:f7:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:FC:98:3A:ED:39:1A:8C:C2:92:56:BE:04:F5:85:05:74:28:BC
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:4b:bb:53:ee:8e:fd:3a:57:07:ff:3e:ae:fa:c4:af:a1:
81:88:4f:d2:74:bb:55:18:74:66:b0:80:d0:9d:b7:82:fc:27:
4a:8e:fa:f3:61:f7:8d:73:90:8f:76:c2:18:1d:12:87:f2:c6:
6f:22:24:9a:8a:d6:68:08:70:27:ac:8b:3a:1a:98:27:f7:73:
06:94:50:b0:79:93:02:88:b3:85:13:97:da:b3:a4:78:ec:3f:
1c:90:ff:1e:ee:91:f9:c9:cb:a2:ba:ed:34:2c:cd:d4:cd:86:
2f:d4:99:40:7b:7b:1f:2c:72:ac:25:d6:91:5d:cc:2e:bb:e1:
ce:ed:2e:e0:a0:f2:6f:6c:fe:48:5e:b9:d0:16:b2:b2:34:34:
68:7d:56:a4:d7:18:23:87:89:31:ff:b2:fe:38:6c:88:32:a8:
0a:62:44:09:aa:4a:c2:94:81:a0:eb:a4:0a:21:bf:da:0f:82:
e9:4b:a2:99:ab:e5:9a:7f:ac:c2:d5:62:be:91:ae:84:f6:12:
26:92:2a:46:1d:69:8e:4b:5c:06:b6:a9:09:d2:25:7e:4a:5e:
c5:7b:f5:d8:5b:9b:d7:70:01:91:46:85:50:e9:c8:c2:4d:98:
2f:f2:5c:8c:a9:41:20:93:e9:b8:4a:28:35:08:f6:b4:63:7b:
da:9b:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:41 2025 by rpki-client