Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: R2zUTUSU78E+pwfHM8O7xtKOPpqCUYwCBi/yPUZ9K/o=
Subject key identifier: E8:D9:CD:0C:80:28:26:33:70:80:A9:19:66:4C:06:84:93:CD:63:89
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 0196572648B5ED2714C73261674C2228AAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 05A9
Signing time: Mon 21 Apr 2025 07:00:48 +0000
Manifest this update: Mon 21 Apr 2025 07:00:48 +0000
Manifest next update: Tue 22 Apr 2025 07:00:48 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: bHso6wViEQmK+IwvbaI2d68bUe9b22PsqYh10be+y+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:48:b5:ed:27:14:c7:32:61:67:4c:22:28:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Apr 21 07:00:48 2025 GMT
Not After : Apr 22 07:00:48 2025 GMT
Subject: CN=e8d9cd0c802826337080a919664c068493cd6389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:02:fe:e7:d3:a2:a2:5b:58:e7:d0:9b:ed:
0a:09:d6:fc:8a:49:27:61:09:0e:a6:05:b3:32:95:
79:bd:14:24:b6:77:89:50:ec:e4:2d:29:de:eb:15:
85:ba:ef:b8:c7:b6:93:eb:7f:df:27:88:b5:ee:50:
6f:05:2c:d7:05:3f:2b:59:47:53:67:a0:a9:5a:3a:
f3:48:74:8a:66:01:e1:ea:99:e8:6c:a8:e1:99:01:
55:3d:b7:99:88:33:1b:5c:b0:2d:da:9c:6d:e7:c3:
5d:4f:d3:94:fd:d0:88:6f:30:9c:70:ca:25:6f:93:
93:31:bc:be:68:1e:66:cc:09:70:14:27:f7:aa:b5:
c8:52:66:c7:bf:fb:d3:fc:00:9d:0d:19:fc:98:06:
10:34:f4:9a:9b:e1:cc:e2:8a:b3:1c:82:ec:c2:50:
0d:c1:fd:95:a4:50:13:63:36:0a:39:b3:f0:5d:d1:
f2:99:ad:a7:53:75:2e:69:63:93:cc:9f:79:6e:47:
c6:57:7c:2d:b2:1e:b6:db:0a:41:28:96:29:e8:e2:
8e:3d:79:ca:52:08:83:7d:38:c0:74:2f:96:ee:db:
e4:5a:51:e9:fe:90:35:b6:5e:b1:12:04:1c:34:8e:
30:c9:61:ae:67:8b:22:90:b7:bf:a0:d3:8a:f9:35:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D9:CD:0C:80:28:26:33:70:80:A9:19:66:4C:06:84:93:CD:63:89
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:09:13:54:a5:b3:60:1d:36:7e:04:96:30:4f:44:08:cc:0e:
0b:17:77:90:46:1e:50:d3:dd:da:9e:ae:a6:03:8b:0c:28:9e:
76:6f:0a:2c:6d:67:8b:66:79:86:4d:3e:ad:39:68:fb:ef:6c:
4a:bb:ab:01:fa:82:4c:35:fe:7b:1a:ae:2e:75:9c:e4:f5:2b:
30:95:5b:e8:52:94:8f:53:43:44:ae:e6:3f:5c:d4:28:86:46:
d9:00:2c:d5:86:6c:fb:5c:d6:c9:25:f0:3e:a0:5d:9f:72:2c:
e0:d0:fc:19:88:07:ed:48:02:0b:18:4a:41:8a:3d:fe:10:04:
a7:86:1f:ad:b6:d0:9e:db:50:86:a4:47:5f:86:0d:bd:33:f9:
ac:1a:05:12:5f:e0:eb:53:19:70:2c:2c:80:12:f6:a1:47:e8:
2e:28:c2:71:c8:a3:cd:ec:f6:29:dc:c1:9e:e3:a9:50:56:b7:
a1:a5:98:30:db:a3:46:7c:bd:5a:5d:70:c9:f4:86:ba:8f:cd:
51:c6:92:62:12:d7:89:3c:ec:57:da:ce:7d:51:eb:eb:6a:1a:
83:3f:8f:18:45:4c:0e:a2:31:6c:2b:89:db:2b:90:25:98:e5:
4d:ee:17:eb:a8:13:cd:1d:2a:99:7d:eb:25:bf:10:49:05:0e:
53:68:eb:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJki17ScUxzJhZ0wiKKr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzk0Y2ZkMzFhMWE4MDljYmY2YzAyYTc0YTU3YmRkYzdm
ZjFmNzgwHhcNMjUwNDIxMDcwMDQ4WhcNMjUwNDIyMDcwMDQ4WjAzMTEwLwYDVQQD
EyhlOGQ5Y2QwYzgwMjgyNjMzNzA4MGE5MTk2NjRjMDY4NDkzY2Q2Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFgC/ufToqJbWOfQm+0KCdb8ikkn
YQkOpgWzMpV5vRQktneJUOzkLSne6xWFuu+4x7aT63/fJ4i17lBvBSzXBT8rWUdT
Z6CpWjrzSHSKZgHh6pnobKjhmQFVPbeZiDMbXLAt2pxt58NdT9OU/dCIbzCccMol
b5OTMby+aB5mzAlwFCf3qrXIUmbHv/vT/ACdDRn8mAYQNPSam+HM4oqzHILswlAN
wf2VpFATYzYKObPwXdHyma2nU3UuaWOTzJ95bkfGV3wtsh622wpBKJYp6OKOPXnK
UgiDfTjAdC+W7tvkWlHp/pA1tl6xEgQcNI4wyWGuZ4sikLe/oNOK+TXl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjZzQyAKCYzcICpGWZMBoSTzWOJMB8GA1UdIwQY
MBaAFCLJTP0xoagJy/bAKnSle93H/x94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMDdkZDgtYjFlMi00YTg4LTkwMTgt
ZmZkMGRmNmJiYTIyLzEvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMDdkZDgtYjFlMi00YTg4LTkwMTgtZmZkMGRmNmJiYTIy
LzEvSXNsTV9UR2hxQW5MOXNBcWRLVjczY2ZfSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAkTVKWz
YB02fgSWME9ECMwOCxd3kEYeUNPd2p6upgOLDCiedm8KLG1ni2Z5hk0+rTlo++9s
SrurAfqCTDX+exquLnWc5PUrMJVb6FKUj1NDRK7mP1zUKIZG2QAs1YZs+1zWySXw
PqBdn3Is4ND8GYgH7UgCCxhKQYo9/hAEp4YfrbbQnttQhqRHX4YNvTP5rBoFEl/g
61MZcCwsgBL2oUfoLijCccijzez2KdzBnuOpUFa3oaWYMNujRny9Wl1wyfSGuo/N
UcaSYhLXiTzsV9rOfVHr62oagz+PGEVMDqIxbCuJ2yuQJZjlTe4X66gTzR0qmX3r
Jb8QSQUOU2jreg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:11:29 2025 by rpki-client