Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: tYV+RHj40m3S5eWqwL7Hgzkze47R9LARiXMp/vCLTqg=
Subject key identifier: CC:A2:63:73:DB:2E:5F:EF:16:12:4C:5D:59:44:9D:95:6D:F6:57:8A
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 0198D4738C47E869F1B9549FE1A923FC7431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 09BC
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: gWk7tCNGg/OrjbyjhArvSffBqVv4FBCg2B59i247UKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8c:47:e8:69:f1:b9:54:9f:e1:a9:23:fc:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=cca26373db2e5fef16124c5d59449d956df6578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:ed:c5:60:fe:af:47:c7:eb:9a:81:12:59:
c8:69:dd:a0:84:29:cc:d5:7a:55:c0:bb:ab:f0:59:
9c:f0:d2:10:19:cd:94:df:76:a4:2f:22:51:ae:52:
2d:e4:6f:33:3d:0b:28:49:f2:1b:25:4a:59:05:9a:
15:42:a3:18:bb:bb:a8:a3:d7:ab:b7:79:fc:49:44:
d1:f6:af:fb:fc:da:32:18:65:ff:6d:e2:0c:be:59:
8d:a4:ac:84:49:ad:0d:dd:72:78:d1:b6:42:80:39:
ff:d2:23:62:56:10:d4:78:aa:14:c1:a0:48:78:e2:
b0:29:65:93:72:1e:17:0a:c8:71:ce:37:e1:e3:96:
d2:c4:3f:5b:58:d2:48:e6:36:e5:16:a5:8c:a9:1a:
7a:f0:72:42:36:5c:47:34:dc:67:0f:61:2d:61:07:
5b:1e:59:4c:e5:33:e5:3f:9b:0f:f6:9a:9d:14:e9:
f1:25:95:18:f7:4a:dd:de:8d:08:c7:12:15:79:4a:
6c:a8:05:55:48:8b:b8:56:c3:4f:67:30:28:2a:b5:
dd:39:e2:de:87:6b:f0:78:fe:27:24:aa:29:9d:d9:
19:ea:dd:86:7f:72:64:dc:e4:67:f0:49:6a:e7:fc:
ad:bf:54:60:90:72:4e:ee:18:df:a6:c7:40:f1:10:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:63:73:DB:2E:5F:EF:16:12:4C:5D:59:44:9D:95:6D:F6:57:8A
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:40:52:5e:fe:7a:5a:9a:11:96:b7:b9:8f:e7:3e:bb:ee:
cd:7f:de:86:19:a2:99:ed:f2:b2:87:c7:58:31:b5:ac:d8:16:
07:fb:67:be:fe:18:ad:c1:00:c0:68:f5:31:05:d9:ac:c7:08:
79:24:81:51:f3:52:e3:cf:6f:64:38:5d:fa:6b:0a:71:ec:dd:
c7:d0:a9:7d:c5:c6:52:5e:e3:de:3a:77:e4:ac:77:46:a0:4d:
ee:3a:12:70:6c:d7:b0:7a:58:87:8b:bd:e1:6a:64:11:6d:62:
ff:b3:79:3d:8f:d8:bb:67:e9:8e:ee:d8:ba:fc:2a:6a:57:66:
0e:a5:a6:75:e9:9f:7b:0a:a6:7c:e7:b2:a6:9e:ef:01:de:bf:
75:93:26:fe:c6:4d:c3:44:4f:1d:65:f2:76:c5:7c:41:09:3f:
0c:5f:9c:75:8c:3c:2b:b0:52:40:7f:12:9d:bd:2a:68:7a:70:
81:8b:dd:e8:91:73:ac:dd:e5:30:70:f7:76:be:d5:70:0c:05:
ca:ce:bb:d7:f1:ae:cf:12:28:f4:29:e9:62:e8:e1:c6:d3:34:
40:91:90:cd:21:92:fb:3b:a0:96:d2:fd:87:1c:3d:ce:72:a2:
48:75:19:f9:7e:77:72:2d:32:e1:52:c4:ba:55:66:56:5d:cb:
10:95:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:55 2025 by rpki-client