Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: rWgtOkePYVvzG1bwJvjd73LOkiOtak+SKAjM82wBT+4=
Subject key identifier: 0B:A3:2C:FF:DA:05:DC:D0:EC:7E:1F:9E:07:E0:C6:23:E3:E3:45:71
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0198D6603B09B7602E628858ED10965B0BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: Qo0KRFBxMDXP1qAHSUxYFKlMyYCNM2NNauSF1D0679c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3b:09:b7:60:2e:62:88:58:ed:10:96:5b:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=0ba32cffda05dcd0ec7e1f9e07e0c623e3e34571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:1a:73:f8:de:4c:41:34:6a:56:f2:9e:5a:
0f:06:05:64:9e:e0:e1:e4:8a:50:85:6d:49:d9:bc:
93:d4:0a:56:cc:e2:0e:96:68:e2:c9:ad:58:66:69:
34:c4:6f:e0:cd:89:5d:f4:1f:0a:fe:60:af:18:92:
0d:7a:97:32:46:90:77:43:18:30:df:96:cf:28:da:
71:e4:22:45:e3:09:86:11:b5:07:50:27:4d:ca:0a:
52:c8:20:74:fa:64:f7:44:1c:93:24:5c:7b:17:ff:
9b:ef:79:4c:4a:bd:5c:b6:c5:d3:f5:fd:58:9f:11:
79:18:f1:5a:da:78:71:1f:d5:a4:ee:bb:d9:f6:12:
2c:b0:02:dc:d3:3b:6b:f8:71:40:38:fd:e0:c6:c5:
60:fa:ba:4c:0f:fd:ea:6e:23:ce:6d:fa:e9:38:0f:
86:f3:bb:46:6d:6e:07:1f:79:16:05:f2:1e:da:65:
62:12:89:39:81:52:2f:fb:82:c4:e9:81:76:20:b2:
c4:2e:d7:62:3a:0e:2f:ca:79:bf:65:17:4c:90:3b:
a4:17:73:ec:a5:38:fd:d4:d7:af:95:86:99:f3:98:
da:15:e1:31:d9:64:75:78:28:1d:11:97:70:9e:68:
d1:75:65:9d:f0:f9:57:be:0d:7f:13:da:9e:93:f5:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:2C:FF:DA:05:DC:D0:EC:7E:1F:9E:07:E0:C6:23:E3:E3:45:71
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:88:c9:1d:81:08:74:0b:f9:e8:d7:ab:9c:b7:04:8b:59:
f0:48:b0:62:9d:cf:e1:f1:51:9c:e2:c9:e3:33:55:31:6f:4b:
57:36:46:4b:b2:ff:28:40:af:64:08:a7:a9:e5:35:d2:db:ac:
57:1f:31:0a:ef:51:95:75:93:e2:b8:ea:b7:96:d0:40:30:83:
8a:ab:53:7d:19:db:d5:23:6d:3c:2f:44:5b:c7:d7:d1:1f:c6:
91:bb:68:b7:6b:82:2b:46:ca:1e:cd:73:d6:32:d8:e0:81:34:
54:9b:84:91:5a:32:b0:7f:e7:83:1a:92:64:7f:bc:e9:b6:dc:
5e:9b:da:09:83:5d:5a:c7:36:1a:ff:ad:98:28:7e:fb:c5:40:
24:61:d9:28:bf:ec:5a:52:bb:76:c3:3f:1b:f2:8a:f4:84:4a:
05:d8:f0:06:ce:fd:54:ea:2e:7a:df:c1:68:c1:2f:bf:7f:ea:
79:55:a7:b8:ce:ad:6b:c3:77:fa:83:6e:d5:10:99:80:56:db:
25:21:59:2a:4a:5e:01:61:89:39:e2:e6:2e:b4:31:8a:ae:6b:
9b:f3:36:b8:bd:15:66:b0:f9:3f:8d:3f:c8:f3:62:18:a8:b0:
53:12:58:87:d9:35:c8:e1:e7:1e:60:5b:12:f5:f9:a0:57:5d:
52:d4:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:23 2025 by rpki-client