Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: xy0bzQz8KZxMdfFTFYZ9RRkVDiH+vWFUXoWrY1wKsWs=
Subject key identifier: D9:5B:5E:2E:3A:04:35:DA:D6:2B:6A:62:68:40:42:08:B1:CA:2E:FA
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 0197B88F2D3C13E1D1E83A43779B391BC963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: RMoGa8145zxa9KHAGpNkfoHtdJw27W46Q645ffWbRgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2d:3c:13:e1:d1:e8:3a:43:77:9b:39:1b:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=d95b5e2e3a0435dad62b6a6268404208b1ca2efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:79:37:6a:37:e4:51:94:ae:b8:a7:cf:df:
f9:40:4d:ef:11:1f:ca:3e:55:d6:e0:44:f6:78:84:
04:f5:b1:c8:66:ea:ae:31:6b:c7:c4:31:55:df:fa:
d9:48:29:03:d3:c9:05:e7:4d:b1:20:34:0f:ca:32:
38:67:2d:45:23:a1:01:2f:d2:46:a4:4b:0a:74:67:
13:15:b5:aa:69:51:db:04:56:20:50:10:86:bc:80:
9f:b3:35:ab:a3:33:c2:0e:5b:99:df:5a:7c:87:44:
90:03:22:2e:a9:6a:f0:0f:39:43:40:34:d8:94:a4:
2f:6a:9f:28:ed:ea:63:de:5e:a4:e9:00:ab:0a:a7:
a7:89:7d:8d:9d:ea:72:7b:79:ed:19:b6:2a:6e:c8:
e1:ed:96:fd:9d:42:08:85:fe:9a:a3:70:58:38:40:
11:3c:33:21:1a:d9:80:17:62:3b:91:f0:f2:85:0a:
a1:c2:2c:5a:0b:91:95:d5:77:c0:56:c5:d1:26:fe:
5c:02:73:c6:f6:3d:28:8f:82:df:de:ab:8c:bb:f4:
7c:7f:e8:62:1f:1a:63:f6:ea:3d:a5:50:25:7e:5d:
7c:53:de:f6:e1:dd:09:45:d7:f5:3a:30:93:04:52:
87:5b:99:6b:f2:a5:5f:05:cd:a1:8b:7f:53:52:12:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:5E:2E:3A:04:35:DA:D6:2B:6A:62:68:40:42:08:B1:CA:2E:FA
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ff:7b:af:1a:a1:4b:ce:d3:1f:31:14:30:d6:e5:3d:ce:2e:
d1:ac:5a:7e:d5:18:d6:8c:37:b6:4c:3e:c5:28:d4:53:f9:bd:
f9:22:1b:ff:8e:cd:b2:38:b0:0a:4e:2f:eb:67:fa:fc:b7:f9:
ed:61:3b:ac:b3:dd:6a:8f:85:89:51:2a:96:3e:d7:b3:45:6b:
a4:43:c4:67:2c:4e:44:2b:29:ac:ef:77:a6:40:aa:46:53:ee:
ab:e1:17:6e:03:0c:bd:46:b4:18:3a:f6:d6:15:4e:37:2a:ec:
18:f7:a9:2a:a6:0e:bf:f1:ae:f3:c6:08:96:5c:71:39:2e:b1:
a4:71:d6:bd:dd:6f:57:aa:87:d6:06:68:9e:2b:df:6f:b3:e1:
d9:75:9f:7d:fb:e7:59:a5:d8:80:e5:96:7c:4a:cb:d4:c4:9d:
d6:6b:67:bc:7e:bd:3f:32:bd:a7:08:ec:4d:67:14:7a:14:e4:
5b:0e:e7:37:ba:25:e5:72:1c:a4:f7:de:ae:e5:37:73:bd:00:
67:1b:b8:e7:96:af:1e:b6:a4:5f:92:6f:e2:b8:f1:f9:52:b5:
28:bc:ac:91:75:ef:c5:cd:b6:df:a9:eb:e6:6d:3e:49:ce:48:
5c:4e:6a:88:fe:08:bb:77:58:db:ef:74:0b:24:60:32:ba:5d:
39:d4:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:37 2025 by rpki-client