Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: oxJcmKwXCuOhQcuP7LpreobYE9S9nktBxcddygIv6SU=
Subject key identifier: 92:84:95:71:31:40:CB:C0:0C:7C:C0:88:67:7D:F0:F5:95:D7:00:56
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 01988B0F6EDEE05A313DC0D634BD343E04E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 19:01:41 +0000
Manifest this update: Fri 08 Aug 2025 19:01:41 +0000
Manifest next update: Sat 09 Aug 2025 19:01:41 +0000
Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: BzIQG/oUnbVHiS7m1Ii99WSgFvOuF5C5Rsqdhp17erg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:6e:de:e0:5a:31:3d:c0:d6:34:bd:34:3e:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Aug 8 19:01:41 2025 GMT
Not After : Aug 9 19:01:41 2025 GMT
Subject: CN=928495713140cbc00c7cc088677df0f595d70056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:79:91:a8:eb:22:fb:57:e6:49:dc:9b:44:
fe:03:8c:e1:a0:27:01:ff:72:d7:4c:7b:4e:bd:d9:
ad:34:10:4a:6b:ab:c3:bc:f0:09:f4:83:ed:db:41:
a8:31:81:41:ea:b2:20:76:a7:8f:ec:72:1f:b4:97:
13:81:49:de:8e:e2:df:fd:d5:d4:39:53:aa:44:dc:
05:02:6a:ba:59:e1:14:66:fc:34:16:35:03:80:9b:
9d:b5:51:53:7f:44:6b:4c:b2:3f:f4:46:96:46:ac:
fd:55:c9:25:24:f0:82:13:00:2f:fb:24:49:12:f4:
21:db:1e:a1:45:4b:52:d4:c7:d4:1e:c4:c6:1a:b3:
98:9e:21:05:3f:b4:f2:1d:6d:37:77:ea:c9:a6:5d:
25:0f:2c:08:86:ac:bd:83:6f:31:e0:79:5f:a5:6a:
52:9c:0d:ee:8b:e3:a8:85:5e:92:d4:72:4f:c9:fe:
47:4b:6d:c2:7f:83:39:1d:5a:e7:72:23:96:d0:57:
f2:31:de:d6:ca:84:01:c3:e3:4c:54:61:78:0d:42:
f9:73:6a:fc:45:ef:d6:ed:66:f8:89:e2:62:b6:fa:
e5:2a:66:65:7a:cf:16:18:e4:d8:45:63:12:f0:53:
3e:31:d6:33:c7:c6:c2:5a:bf:97:09:0a:43:fd:bb:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:84:95:71:31:40:CB:C0:0C:7C:C0:88:67:7D:F0:F5:95:D7:00:56
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:a4:01:0f:4c:c4:ca:89:47:7b:67:69:1e:12:32:7b:91:
65:6d:ef:69:28:d6:9b:64:09:d7:8a:40:b6:30:af:d0:f2:c4:
33:a0:a6:23:52:50:ec:54:23:3a:2a:68:8a:5f:bd:11:d1:83:
63:04:ab:e7:54:64:ec:14:89:1b:e0:35:5b:8c:f2:f0:8d:f4:
dc:d1:3d:e1:5c:12:ef:2d:c3:a3:04:40:db:dd:ae:e6:b0:d9:
bf:4f:50:90:fa:b3:44:29:f8:10:a7:81:46:16:1b:ea:b6:d3:
c0:24:0d:a3:f2:0c:58:7e:1a:5e:ed:a2:f5:08:aa:b6:ec:a5:
62:a3:c2:5e:53:54:81:14:10:ed:ea:02:79:3f:ab:c9:c3:3c:
e7:47:90:26:c9:0f:4e:eb:af:ad:f1:a5:23:3d:a9:27:e2:58:
d4:9c:80:12:e3:51:b2:61:16:4d:52:28:d3:30:f0:19:a0:ef:
d1:54:f3:57:6e:1d:dd:b6:9a:69:63:9d:34:d9:08:32:6d:6a:
69:56:e4:65:7a:52:08:6d:d5:36:e4:51:a0:38:3a:11:0b:c1:
2d:ff:b8:6f:40:7e:db:81:de:44:90:09:41:60:09:b5:16:58:
f5:ee:05:5b:26:09:5c:70:7c:dc:1a:13:1a:0f:4b:a9:94:7d:
b1:04:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:23 2025 by rpki-client