Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: +ogQyPSUnmDsvWVmoJF+PGzvgMhy5cEm3JdFpVI2gD4=
Subject key identifier: 16:BD:2B:9A:13:67:1C:FA:64:CA:A4:62:01:DE:6A:46:27:50:AF:F5
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 0196BB92A89312BC0C78FAE06B04771E9BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 05DD
Signing time: Sat 10 May 2025 19:01:12 +0000
Manifest this update: Sat 10 May 2025 19:01:12 +0000
Manifest next update: Sun 11 May 2025 19:01:12 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: 5576I9902S77xhMIfwM4Z3frZsjVWhe2LRIK6uESMSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:a8:93:12:bc:0c:78:fa:e0:6b:04:77:1e:9b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: May 10 19:01:12 2025 GMT
Not After : May 11 19:01:12 2025 GMT
Subject: CN=16bd2b9a13671cfa64caa46201de6a462750aff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:50:2f:cd:48:4b:7e:2c:f1:dc:1a:66:3f:
59:fd:c1:8e:eb:13:ab:de:69:f6:14:9a:cf:8c:1e:
d7:0b:f1:ba:58:fc:c3:66:d8:05:2a:6e:8d:ee:17:
67:df:42:e8:80:ed:06:83:98:4d:65:74:fb:61:5c:
24:07:ad:04:60:78:ab:0b:24:68:a4:5a:bc:e5:46:
75:9c:d0:af:2e:53:26:88:fb:fb:e0:ec:ee:1f:68:
aa:2e:d7:79:b1:f2:e4:51:c9:c2:ba:92:60:bb:02:
76:98:c8:ed:69:b7:f5:14:6b:29:07:0f:28:00:30:
c6:30:94:b2:b1:28:94:9b:8c:39:28:a7:c2:04:88:
df:9e:2b:a8:8e:d0:f4:d9:b9:f6:53:4d:bc:83:c8:
e3:c1:d7:b7:da:a5:3b:e7:dd:01:ce:95:a8:63:2e:
c9:a2:e5:dc:e8:33:58:0f:ec:e8:dd:40:a2:44:3c:
d8:85:85:f6:40:88:9e:53:eb:20:ce:8d:fa:19:d4:
96:7e:86:f8:bb:a1:9f:a9:83:90:08:ec:f7:b6:69:
47:70:1a:7f:7c:89:b9:84:1d:9f:a6:0e:54:7e:6a:
d9:7e:b4:59:97:cf:aa:ff:07:11:29:e0:b4:eb:7c:
a1:1e:ef:a4:f9:98:6f:85:4c:90:53:7f:df:6a:e8:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:2B:9A:13:67:1C:FA:64:CA:A4:62:01:DE:6A:46:27:50:AF:F5
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:a7:38:1f:73:96:ba:a9:60:53:ef:05:b1:ea:85:7e:34:
46:d0:81:45:86:87:e6:84:56:f4:1d:e6:9f:ec:5c:81:57:95:
a5:1d:b7:ea:36:96:1a:6d:7f:37:e7:c1:1e:a0:9b:ce:c7:ed:
dc:df:d5:02:04:df:95:56:05:1c:25:76:f3:e0:5a:f6:11:61:
9e:1c:9e:ef:84:53:11:d5:07:5a:7c:ca:8a:68:1c:16:c9:28:
13:0f:d7:f3:3c:6d:75:8b:e5:a0:e6:25:d7:28:f2:56:10:cf:
c7:58:0c:91:2b:9f:56:17:0d:1d:bf:d9:a1:ae:e4:ec:f3:69:
08:33:cd:8d:d1:47:41:ee:41:cf:97:6d:29:88:b8:68:e6:dd:
83:1c:d2:01:f4:eb:de:8d:5b:cc:fb:42:38:65:78:94:58:db:
9d:61:45:5b:32:f0:d4:79:dd:81:d7:aa:68:02:34:48:1b:78:
e9:72:df:0b:99:13:a8:1a:3b:0f:e1:35:6c:ef:1a:3e:d4:d3:
36:9a:fd:7f:34:4c:ef:89:5b:fa:08:43:e3:1f:4e:83:54:b2:
e1:f5:f2:7f:d1:0c:d3:c6:3c:30:eb:2e:12:4a:b3:8b:2c:91:
88:a4:10:73:53:23:18:70:2d:ab:64:39:6c:e8:d1:66:b5:22:
fc:67:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:44:51 2025 by rpki-client