
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: Ivli2Fg8DxAe5K60dTkIdaBjl3HzyAmSi/pt+qiPW/8=
Subject key identifier: CE:CE:74:56:36:FD:76:F6:4A:B6:B0:01:96:81:0A:E5:1E:F0:B2:96
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019873E25D4D0B9F793D1B7AC7CFF8161DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0A24
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: GIYA/P/ywN+sOaiZi8+Dj0tg/EMyAtzfqW1KJNDvlXg=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5d:4d:0b:9f:79:3d:1b:7a:c7:cf:f8:16:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=cece745636fd76f64ab6b00196810ae51ef0b296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:d4:79:f5:c4:85:d8:c9:9d:8f:11:05:a9:
1b:7f:29:7d:41:00:46:dd:67:bf:fa:70:13:b1:b0:
58:c2:a0:89:73:c0:f2:61:4b:46:cd:f7:bf:3e:93:
c0:36:46:e8:6e:c2:36:e9:df:0d:a6:40:25:6c:21:
ca:8e:67:0d:b5:e1:7c:6f:0f:7c:03:31:b4:ad:41:
d9:71:24:d5:a5:87:06:00:8d:70:16:fb:32:a8:7d:
00:a7:82:87:c7:00:e0:22:56:01:97:9e:4d:ff:a6:
4a:de:56:7c:e3:e1:83:ae:d7:fb:0c:ca:67:6a:a4:
98:ae:dc:ed:aa:56:47:3a:31:db:77:64:d9:fa:be:
03:66:91:08:68:2e:27:53:98:0d:71:6f:f4:48:21:
a6:d1:c0:31:73:98:b7:19:f9:dc:b5:50:46:66:bd:
e5:fb:23:f5:f1:bc:7a:7f:27:a4:09:ee:c9:69:8c:
97:ca:7a:07:14:ab:28:57:a0:f3:a9:1c:2e:81:4f:
69:88:43:7a:a8:71:27:88:97:0c:88:c8:55:76:ed:
70:5e:9a:73:c6:55:b3:03:44:26:9f:8d:a6:4d:68:
b6:b2:a9:0f:7c:63:58:e3:20:8b:db:3b:e3:be:21:
e9:73:27:b1:6c:de:53:f4:8d:58:90:89:4c:de:cb:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:74:56:36:FD:76:F6:4A:B6:B0:01:96:81:0A:E5:1E:F0:B2:96
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:70:18:a8:ce:37:59:9a:09:7f:d5:a4:ec:d4:a2:00:cd:2f:
81:c7:2c:e7:e1:ea:c5:34:f2:71:c9:8d:cd:74:6e:16:36:fb:
4a:3c:db:30:44:db:d3:09:57:5f:a1:b7:19:89:34:7e:0b:96:
ad:46:3d:fb:1f:52:3c:10:63:62:0c:fb:b2:f5:95:22:1e:6c:
11:fa:2b:a1:dd:c8:02:56:2e:d4:fb:3c:2e:63:d0:18:74:d0:
77:95:9b:88:d3:3b:24:54:a4:ba:06:fe:4c:cf:e9:a3:a6:93:
22:6f:a1:f4:10:1c:c6:45:95:79:d3:fc:a1:b5:25:f2:34:18:
01:ca:ea:4c:42:53:bf:9c:71:f0:13:45:35:8e:3c:a9:05:ec:
bd:6d:5b:94:bc:d1:9d:6c:c5:bb:40:e2:00:df:a8:46:15:23:
0e:d1:42:0e:30:db:58:c9:f2:56:b5:9f:76:17:1c:84:b2:62:
95:06:ae:fe:5e:02:a1:75:05:13:24:b5:93:3d:50:68:77:30:
1a:dd:81:24:b6:3f:1b:d0:46:30:ac:7e:d1:31:04:92:36:5a:
28:e9:2e:52:6e:c3:67:1a:07:d8:b4:6a:bc:a0:e3:a8:82:e1:
f6:3b:07:53:9a:7b:2b:91:d6:b8:8b:6f:e5:10:b9:0f:e3:36:
1b:24:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:30 2025 by rpki-client