Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: 8qcA1zZPxWC9pxX5NYa6FUYvAP1l2/xlv04AntCcZ6g=
Subject key identifier: E7:CC:33:B3:5B:75:82:27:E3:CB:45:2F:13:B9:32:A1:35:AB:18:CC
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 0197B6A0F7245EB5E400DECAABDCADD4A6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 065F
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: joTZ19kfYBfLv5eopxUNp74VKtWnK6lk6XGW8Dxz45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f7:24:5e:b5:e4:00:de:ca:ab:dc:ad:d4:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=e7cc33b35b758227e3cb452f13b932a135ab18cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:7c:d1:2b:dd:4d:60:79:c8:a5:43:ce:b5:
4c:f4:83:81:03:3b:ee:c4:0c:51:db:75:cb:42:9f:
df:f8:81:91:f3:ed:ef:3a:e1:ba:76:30:13:09:ce:
4d:a3:74:55:91:8a:b4:ac:3b:6e:0b:3f:7d:0c:bb:
11:7a:a9:1a:3c:49:8e:9a:01:0a:2d:32:81:8a:65:
30:5f:a1:61:b5:98:a5:9c:d2:a7:ae:c0:91:5b:9f:
88:be:d8:e3:75:e2:7c:50:64:aa:e5:87:07:f4:bf:
7d:04:45:60:98:db:52:ae:75:b6:53:6f:fa:30:a5:
c1:ba:6a:84:b8:c7:47:8f:2b:0a:bd:bb:f3:21:2c:
17:d0:8d:eb:06:cf:73:d5:3b:10:94:df:33:93:e4:
e2:63:82:7f:73:c1:83:3e:95:5a:b0:db:f3:f2:9b:
b1:37:9e:57:65:bf:ca:23:6c:a8:dd:a0:e0:99:35:
74:ea:e0:c7:c4:11:8c:bf:c9:b7:5f:ed:7a:9f:33:
70:69:e2:74:20:d6:ad:b8:43:fb:5f:92:a3:10:15:
4e:45:15:da:4c:ee:d5:f3:11:fc:a4:11:17:84:18:
12:43:cd:2e:b9:a0:8c:96:73:4a:56:dd:87:8d:bf:
01:c9:4d:58:89:02:35:e3:13:7f:f4:96:0f:5a:40:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:33:B3:5B:75:82:27:E3:CB:45:2F:13:B9:32:A1:35:AB:18:CC
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:c4:0b:32:77:22:70:02:80:33:11:c3:d1:31:7d:06:a1:
87:3a:45:21:16:30:5a:fa:9c:3c:60:9e:92:7a:fe:92:71:fe:
29:08:0d:c9:1a:38:bb:e2:3b:04:81:81:a0:76:3c:b1:b4:ae:
bd:85:e7:6d:27:3d:21:f3:d1:7b:03:eb:72:45:dc:c6:3e:a9:
01:1f:b6:c8:f7:70:37:62:ac:80:74:99:bd:b6:d5:73:a4:8c:
63:8d:5f:e7:6a:22:42:40:1e:87:f5:74:a9:05:52:31:34:9b:
ac:b3:52:cc:16:91:f4:c2:09:60:90:6c:39:c9:8b:74:59:6a:
2f:d6:92:55:d3:e2:5f:d2:ba:27:71:0f:44:6e:ea:bf:9d:2b:
e3:7c:56:e3:04:a4:29:3b:61:59:aa:6d:aa:9f:c7:d2:3e:75:
f5:38:8e:a7:56:3a:72:16:f6:ce:bc:e1:12:a9:c6:6b:cf:d9:
a0:aa:47:35:d7:e1:38:f2:67:34:67:d5:80:80:0e:df:c0:89:
1e:89:fc:b3:d5:7e:a3:08:da:bf:9d:60:c6:d4:da:95:7e:d0:
b9:83:bb:fb:93:6e:b7:cc:c5:f2:19:14:97:d2:2f:f6:57:ae:
32:c7:f3:54:65:01:17:81:e6:9b:96:d3:b6:f8:ed:4e:61:4d:
79:d2:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:34 2025 by rpki-client