Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: BSwtAuizxsenpss8dVmLRctxmflNgHGaGIzlxx+Th5o=
Subject key identifier: 82:4F:8C:8C:50:56:24:2E:6D:E5:6F:D2:F0:A7:F1:F0:7F:75:E1:56
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 0199180A15070DA473A4FFE089A67F599C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 0716
Signing time: Fri 05 Sep 2025 04:02:17 +0000
Manifest this update: Fri 05 Sep 2025 04:02:17 +0000
Manifest next update: Sat 06 Sep 2025 04:02:17 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: THzu+r95f6b9XxRhFbD1Ln/SmSUZ1Wy18aFWT3KAbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:15:07:0d:a4:73:a4:ff:e0:89:a6:7f:59:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Sep 5 04:02:17 2025 GMT
Not After : Sep 6 04:02:17 2025 GMT
Subject: CN=824f8c8c5056242e6de56fd2f0a7f1f07f75e156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:aa:94:02:3b:1d:28:0b:ba:62:76:dc:0f:
63:54:69:72:e7:d7:7c:b5:f2:85:e4:09:be:6a:40:
0c:93:67:17:f5:59:e3:63:41:1d:8b:af:f2:21:2c:
65:93:43:f6:35:ca:5e:d6:be:7c:69:f3:2f:af:8d:
57:bd:dd:aa:f9:46:a0:28:6c:1e:c0:a7:14:9f:35:
d5:7b:43:5d:b7:07:dc:6d:b3:46:65:95:69:43:2b:
0e:4c:e1:da:b8:74:8d:3a:00:26:9a:98:09:97:a5:
d0:82:1a:75:d2:78:c7:9b:ea:41:39:38:19:de:9d:
51:53:bf:23:04:c7:03:be:81:42:1e:3d:68:0b:cc:
f0:77:83:11:2a:f6:1f:62:22:14:e7:b6:2e:ec:f2:
dc:a0:d2:b4:cb:a7:84:99:43:1c:e3:15:b7:f8:7c:
a9:35:8c:70:b7:d0:d5:5a:42:ae:79:ec:eb:b8:73:
f4:8d:ba:d2:98:08:0a:8f:91:49:78:4e:86:2a:80:
81:ce:e8:d7:03:1a:06:47:e5:46:eb:f6:15:e4:f8:
f8:7d:29:d9:e0:ec:cc:d2:8c:b2:e7:d6:91:de:67:
e4:d1:b8:37:aa:39:78:4e:d6:10:37:f9:99:d2:61:
0f:a5:0d:45:75:c4:79:57:40:75:14:fb:d9:9a:e0:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:8C:8C:50:56:24:2E:6D:E5:6F:D2:F0:A7:F1:F0:7F:75:E1:56
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:fc:56:68:ed:aa:a2:e8:97:59:40:3c:4e:e2:91:b9:1f:
fd:76:6f:c4:05:24:49:8f:5e:fb:31:57:5c:bf:1a:39:4d:f3:
9c:19:ac:b6:7f:2d:db:e9:42:bc:29:0f:e8:26:c9:8f:b3:a1:
24:4e:13:e3:94:de:d3:40:5b:7e:60:e1:81:60:f6:4e:de:20:
d5:d6:3b:f5:71:bc:ac:a4:8c:77:93:51:23:de:fa:bd:6e:6f:
ed:8b:2a:aa:6a:d3:6c:8a:8c:9d:b2:cb:c8:fb:10:96:33:e3:
24:87:c2:94:32:d1:f1:2b:8b:be:62:4f:a4:e1:f9:19:bf:12:
55:cd:64:a5:9d:5d:a5:63:fa:59:e3:87:0c:19:f4:3c:7f:74:
29:04:17:e6:00:7d:9a:d2:79:c6:06:58:67:45:81:63:97:1c:
98:e4:e8:48:98:ba:49:01:54:88:ce:32:aa:bc:cc:16:12:1b:
f0:61:9e:be:8b:41:09:28:7a:b8:91:dd:26:3a:03:4f:0d:8d:
3a:52:fb:09:13:71:57:d9:28:33:05:94:9e:56:28:a9:17:77:
50:3a:95:f9:9f:c0:53:53:18:cb:b3:9c:2f:62:4f:c1:c4:f0:
8e:18:e9:3c:ef:97:96:c3:9f:3f:ea:15:de:f0:6a:7b:bb:61:
2a:66:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:20 2025 by rpki-client