Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: 20Xd7rXKTkngv8jFGY5bKHrsNzvXueL15FX1W6x1GUA=
Subject key identifier: D8:71:63:14:94:FB:70:FC:2F:F9:5B:65:7A:D9:7B:76:0F:FC:57:A0
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019A71B7FE3B7FDFC952EDECCD3A016739F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 07C9
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: xEzvJK26Rq4jot6sSCn8AWK4ul8XMiGXtHNwDERvDpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:3b:7f:df:c9:52:ed:ec:cd:3a:01:67:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=d871631494fb70fc2ff95b657ad97b760ffc57a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:f6:b2:7c:a0:e0:32:f0:b6:30:a0:f8:ab:
a9:d9:b4:ed:f8:3b:f5:b2:25:da:19:22:52:55:d4:
5a:2a:b8:7b:38:55:8b:af:4e:2b:a4:56:d4:22:e0:
fa:b8:b2:eb:30:39:12:f1:8d:62:a5:dc:f7:10:e2:
3a:56:e1:60:45:3f:9f:a4:45:bf:eb:9d:dc:c6:82:
be:be:2a:97:c2:cc:7a:11:06:d9:5b:31:e5:42:e8:
b5:0a:b6:6d:5d:34:f4:20:dd:35:96:b3:dc:b1:35:
e8:48:d9:04:a6:06:c1:ed:fd:7e:fd:8e:bd:51:37:
45:69:ae:65:20:df:c1:23:fa:90:27:07:31:94:27:
49:51:37:70:62:19:37:93:93:d1:d9:a5:c9:33:78:
8f:a9:8b:a6:7a:5e:24:22:6d:b3:06:76:e8:63:58:
95:2f:7a:55:8d:c1:b0:f6:e7:5c:4a:71:7f:dc:22:
fa:23:78:c7:39:b5:2c:4e:aa:10:b0:6b:ce:73:bb:
9d:74:1f:f1:36:7d:7e:f1:54:ce:b6:cc:58:81:e2:
46:66:41:a8:dc:d7:21:70:47:7f:77:23:58:f5:4c:
ad:0b:35:46:c9:36:ce:50:ce:69:6f:69:36:48:af:
7a:be:9f:74:ec:b6:f9:88:d4:71:51:e1:a3:48:bd:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:63:14:94:FB:70:FC:2F:F9:5B:65:7A:D9:7B:76:0F:FC:57:A0
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e8:f8:15:33:c0:86:e0:cd:d8:b1:55:d4:76:ae:55:30:0f:
e0:92:9d:a8:89:4b:18:fb:5a:0a:3f:55:81:81:e3:55:2a:0d:
d2:e4:6b:c7:9a:60:82:b0:ea:26:8f:4d:17:07:bc:ad:14:46:
11:87:24:93:c7:78:49:0d:1c:e1:fb:2b:b5:94:dd:15:c2:ca:
52:67:64:6e:9c:49:3c:20:63:f7:81:7d:dc:a2:a6:22:d1:e2:
28:5a:3b:c9:88:17:0a:a0:96:85:74:8e:a6:1a:c8:3b:be:11:
ae:b8:6e:8b:b8:c7:f0:f9:3a:f9:d2:ce:72:da:0d:f9:8d:51:
34:c8:c0:ec:f2:5a:bc:b2:82:7d:44:2a:e6:2a:ad:23:c4:71:
d6:31:a2:64:38:db:72:f7:31:3b:26:31:1f:c6:72:e4:2e:5d:
5b:6b:c2:05:27:b3:07:77:ac:5a:30:f2:24:05:73:92:8b:0e:
ff:d7:e1:1c:88:b9:73:94:4d:5e:7a:0a:c7:bc:f9:ca:ad:e9:
ba:b1:de:b0:02:d3:91:ed:e7:f6:9b:52:f7:3c:88:4b:af:34:
26:0c:71:0d:9c:b8:1a:97:a9:56:f6:dd:1c:24:ac:f4:85:9b:
cf:d6:23:3e:1e:a3:b4:5a:19:16:83:43:bf:89:38:71:0d:5c:
00:77:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:21 2025 by rpki-client