Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: d6kz+XimnTWaRBYsLmmimZ3J+nKdLEOOuuSrJ2qvDwI=
Subject key identifier: 0D:BC:64:9D:8E:1E:F7:C6:46:EB:39:77:01:21:E0:FC:15:0A:9C:8D
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 0198D66063929E2CE0559060FB75ABEE80FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: 3NKAWbZmaztsl/F8EIYqlhIHYvp4hSPg92LXDb3VW4Y=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:63:92:9e:2c:e0:55:90:60:fb:75:ab:ee:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=0dbc649d8e1ef7c646eb39770121e0fc150a9c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:1d:72:d0:90:96:c4:28:3c:4a:ed:70:0b:
39:3f:12:a5:64:c9:1d:3d:3c:da:68:47:4d:01:82:
fd:e1:43:8c:7a:06:58:9a:de:16:da:76:38:cd:10:
1c:ce:8d:c7:83:88:39:a0:22:ec:03:61:67:eb:e5:
8f:5c:59:b8:4f:03:18:cc:0c:01:3c:c5:0f:a2:e6:
5c:82:da:cf:49:8d:ce:23:27:70:22:f4:f8:24:e4:
8d:86:22:00:b0:ac:81:fb:59:b0:7d:77:e9:c8:20:
d3:18:c2:98:03:02:40:81:14:66:a9:87:60:a0:07:
79:18:08:12:d7:88:7a:50:48:69:b3:a0:b2:bb:12:
44:88:54:72:7a:df:32:11:46:bb:95:36:bc:65:63:
0a:76:82:a7:4e:a3:75:2b:f6:45:ae:40:38:5e:c8:
93:12:8f:23:6b:60:f4:33:a1:89:45:4a:f4:fb:bc:
e6:d9:da:fa:f3:1c:fd:d8:76:8d:96:06:96:ad:ab:
d4:46:bc:55:62:de:38:b4:8c:a5:70:dc:a3:55:77:
c2:9d:05:07:b2:a2:dc:6f:f1:78:2b:03:2b:87:2d:
eb:f5:bc:57:6e:03:45:8a:2e:25:6c:7b:f5:74:8a:
d5:6a:88:a5:d5:e5:ed:22:cf:42:9a:97:c4:3c:50:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:64:9D:8E:1E:F7:C6:46:EB:39:77:01:21:E0:FC:15:0A:9C:8D
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:d5:be:86:03:8d:d6:00:b1:c1:01:fe:c6:80:7e:c2:88:
9b:09:6d:75:c6:7b:a4:4a:51:8c:8f:0d:75:5c:d2:b4:8b:f9:
f3:6a:29:12:e0:ec:00:02:9a:50:93:24:d2:d6:68:cd:a4:3c:
95:2c:8c:f4:dd:39:8b:94:db:26:5b:b2:1d:2d:f5:ee:01:c5:
a8:89:0d:db:88:41:5c:2d:84:5a:dd:44:7c:0f:b8:8d:d9:b5:
ab:b6:dc:7b:7a:d4:29:bb:cd:4f:f1:3d:d1:a3:47:62:9e:7d:
ee:3b:34:1f:68:ee:7b:10:fd:92:37:13:d6:6c:c1:a9:6e:74:
26:90:0c:08:6f:04:80:bc:ad:3a:cb:e2:66:d1:db:9d:cd:b8:
18:75:84:76:f0:e2:15:8f:7e:4d:dd:ce:55:64:b2:2c:54:3f:
6e:c9:7e:b8:24:03:57:53:78:e3:8b:17:58:78:bb:4c:9e:7d:
e8:f7:98:b5:55:fb:47:37:6a:fe:91:8d:c8:64:2f:d3:da:73:
7d:4f:82:07:7e:3f:b6:a4:e0:de:6c:3b:f8:cd:ab:8e:e0:c5:
0e:08:60:82:67:2d:32:7c:ac:94:78:49:67:e4:9a:40:f3:40:
6e:64:e7:10:ce:2a:4c:5f:49:be:b8:ba:ba:7d:47:cd:7f:83:
83:0f:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:05 2025 by rpki-client