Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: QU1NiVo0OL9n6M64SGarJ5tvKiKaZOZNZSNAXxrBgss=
Subject key identifier: D7:F9:65:08:A1:9D:9A:F7:8D:C7:21:E7:BD:B6:EA:24:F4:77:1E:91
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019A4EF52D0F0E5053EDB27FE81317872570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: aq3+INwrw3sUBKBYbYPBN/7xHfpsc4EaYLC1MsPEzQw=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2d:0f:0e:50:53:ed:b2:7f:e8:13:17:87:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=d7f96508a19d9af78dc721e7bdb6ea24f4771e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:52:8c:bb:75:db:50:48:1c:0b:58:a5:fc:
2d:5b:3f:5b:82:b5:06:00:65:b7:6e:72:ed:49:8b:
a6:53:4d:46:a4:1e:f6:b7:2e:b6:14:87:f6:57:ce:
cd:60:5e:76:47:34:31:9d:42:83:56:05:95:41:22:
57:27:ee:6b:40:ad:13:14:38:96:e7:ca:74:92:40:
79:79:64:78:c0:40:51:df:51:f5:19:bf:0a:5e:f3:
06:01:ec:7f:38:c5:1f:7a:be:84:d1:c5:7b:58:75:
f3:f6:62:34:2f:22:46:1c:fe:5e:34:bb:73:94:ed:
09:38:ad:8a:a1:ac:a8:73:3d:22:16:f0:85:6f:87:
3e:36:c5:48:6e:a5:93:9b:05:5e:b2:fc:61:10:34:
b2:c0:2f:82:32:50:e4:ca:24:fe:e6:c9:69:31:74:
bf:69:78:f7:b5:fa:12:79:84:db:5b:ff:77:fb:97:
22:e0:79:89:56:a2:df:eb:c0:85:36:9e:44:fc:5d:
4a:72:bf:3a:4b:81:b1:2b:91:6f:0d:4c:63:5f:39:
53:1b:b7:a1:72:c6:6b:7d:53:77:00:10:24:80:68:
51:d3:73:d5:4c:2b:f6:8e:7f:01:1b:5f:ea:e6:16:
80:fe:d9:6a:07:9a:69:c7:98:22:48:ff:c3:40:7c:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:65:08:A1:9D:9A:F7:8D:C7:21:E7:BD:B6:EA:24:F4:77:1E:91
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:2d:5d:f6:bc:66:91:00:0f:d2:12:b4:f1:40:bd:78:3b:
b7:f0:b6:cd:18:87:b7:09:bb:bc:49:bf:e5:a2:38:ad:94:1f:
e9:b0:57:69:9a:e7:1d:6b:f3:5d:75:9e:20:93:8b:d0:74:0b:
61:7d:b5:d9:ad:ed:08:5c:2e:63:a9:6e:9c:b4:68:c9:e0:66:
49:b6:06:b1:75:1a:2b:aa:91:2d:61:21:0e:c9:8e:2c:0b:10:
40:48:a0:39:4b:4f:8e:9b:26:49:10:28:b8:21:32:2e:82:1c:
e0:96:f1:c7:72:80:1e:b4:5c:5d:9b:c3:3b:0b:58:35:89:f8:
6d:2f:b1:ce:f8:ad:ec:20:5d:b3:cf:b9:a6:9d:72:1e:6f:b5:
6a:0c:b4:86:3d:eb:3c:bd:4c:99:90:8e:ab:10:4a:f6:2a:a1:
b0:d0:79:f8:60:bc:fa:ca:ca:9c:23:f4:bc:6d:84:38:56:3f:
9e:bb:48:1c:0d:75:47:1a:3d:fc:63:ff:80:0d:08:51:f4:a8:
d4:e8:cd:48:a2:f0:46:99:e9:e5:76:fe:2d:a6:65:85:98:3e:
f9:af:4b:ee:85:84:6b:55:3f:1b:16:d0:c0:2b:16:8f:6d:41:
bb:76:88:37:73:93:59:1c:c2:08:75:ab:4f:2f:62:74:a6:65:
9f:cf:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:00:52 2025 by rpki-client