Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: kmS6rOq4QcsxbCSYwMhPbHMQ77Cz4P4lUAxmGYtLbrM=
Subject key identifier: 84:2C:A1:98:13:CE:08:BF:3B:70:EA:D9:42:FD:02:4C:1F:61:29:25
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 0197B6A21ADF59B15429F0B0B003E9E32263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: 9H7vwViqjO2cLU1XqVpIFKKiDwu0XtXSF1uS36F/zCw=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1a:df:59:b1:54:29:f0:b0:b0:03:e9:e3:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=842ca19813ce08bf3b70ead942fd024c1f612925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:18:c1:5f:cd:b3:39:29:29:b6:01:d3:ce:
6f:d6:93:dd:06:91:9d:1d:ed:d1:69:f6:d9:3e:00:
e6:f2:5a:1e:0b:f1:26:45:94:4b:5e:08:e4:f7:52:
ed:72:68:60:e2:2a:22:26:02:2d:0f:a4:5f:5d:58:
6d:95:7c:31:20:82:be:8f:3e:f1:1c:bd:1f:09:05:
a4:7a:59:96:65:d1:a6:c9:e4:46:04:c2:f2:3b:7e:
cd:55:d3:83:1d:f5:fa:38:92:02:d4:1c:1b:2c:93:
31:ff:64:ba:43:a6:f7:47:05:31:58:4f:a9:e4:3d:
fb:bf:70:0d:e4:bf:ba:9c:16:7e:7b:5b:45:30:be:
16:6b:f7:98:e7:19:03:5e:d5:e0:da:0c:79:9b:99:
d7:d0:e3:0e:68:59:63:bf:7c:49:b6:0f:0c:39:c8:
a2:25:d1:2c:91:59:c9:bb:08:24:9b:1d:15:78:7a:
f4:5c:a8:73:5b:40:79:76:4a:fe:c2:51:05:47:95:
28:68:a1:6c:bf:c0:0d:c8:b2:36:37:37:ae:2f:41:
0c:c5:86:8a:17:80:0b:5f:53:5c:40:ab:ca:9e:7a:
cf:18:71:b6:12:63:3d:17:ef:69:a7:4f:8e:7f:21:
0b:58:a1:83:75:29:b7:74:86:45:45:8b:8e:af:b0:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:A1:98:13:CE:08:BF:3B:70:EA:D9:42:FD:02:4C:1F:61:29:25
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fe:5f:3b:7d:4a:2d:ff:3c:d6:f4:0f:54:0a:6d:99:a5:96:
44:35:fd:4a:d3:90:87:b4:64:36:1f:c3:c1:1f:03:46:f5:80:
0a:cb:74:e1:15:4d:33:68:77:a1:18:da:0d:63:3c:bb:05:52:
8a:84:ef:ab:d2:2e:11:81:37:84:11:e1:74:9c:f6:72:d8:7c:
d1:6e:ae:ea:76:0a:26:44:40:f2:73:c9:59:ac:c7:7d:a7:45:
95:d1:f4:00:6b:45:3b:d0:5b:dd:e8:c3:47:5a:2e:03:cf:ca:
98:da:65:6e:e2:60:6e:d1:50:6f:6d:58:90:88:e1:5c:48:0f:
13:7a:97:23:17:c4:ba:85:dd:f5:67:73:d2:99:62:4f:6c:6b:
61:ad:d8:60:ae:8f:ca:ee:47:cd:32:e8:48:13:b6:23:6f:8c:
25:f2:1a:07:a0:e2:52:0a:8b:07:5d:09:ed:52:3c:52:89:7a:
7d:c3:66:2d:0c:67:dd:8b:1d:eb:82:d5:b8:cd:c0:a3:74:c4:
1a:cb:7f:ad:d3:fc:22:a4:74:7b:ab:35:64:a1:6b:28:9b:9e:
e4:64:fd:6d:06:c0:e7:8a:a8:2a:b3:f4:83:6e:64:fc:bb:fb:
a7:4e:11:3a:dc:bf:d9:da:a1:49:d7:28:a0:0f:fb:f2:8f:e3:
20:28:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:40 2025 by rpki-client