Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: /QbflwUm71JinNpp22upPC+fxZtVwkDUhIG1xxlnUw0=
Subject key identifier: 97:E6:42:72:07:25:98:54:C4:18:6E:B6:36:C8:7A:D5:D2:8B:42:5D
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 01967BD7744981E28E5DC57194062FE8B5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 05BC
Signing time: Mon 28 Apr 2025 10:00:39 +0000
Manifest this update: Mon 28 Apr 2025 10:00:39 +0000
Manifest next update: Tue 29 Apr 2025 10:00:39 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: GYWa5r6fIh5xQBlrWAFdJ52/nBiYT6nKiLauR3+AWwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:74:49:81:e2:8e:5d:c5:71:94:06:2f:e8:b5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Apr 28 10:00:39 2025 GMT
Not After : Apr 29 10:00:39 2025 GMT
Subject: CN=97e6427207259854c4186eb636c87ad5d28b425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:f0:7c:ea:39:a2:0a:af:51:1d:05:25:22:
94:d5:44:e0:04:30:cd:3a:00:8b:63:8d:19:3c:8e:
0c:b7:3f:e4:29:59:2b:63:f7:78:6c:38:f7:55:a3:
91:c7:96:ec:74:cd:4d:97:54:aa:c7:fd:ec:4c:fa:
59:8b:18:60:6a:02:f8:82:01:32:78:7c:96:ee:f4:
33:fd:fa:35:f4:d2:58:a4:37:aa:b4:93:c7:ea:52:
cc:40:c3:08:cc:f7:fb:66:d3:4a:44:16:f4:28:e1:
28:c5:07:9c:73:36:c0:ee:a7:cc:48:4f:1b:f7:4c:
35:6f:61:02:f2:2c:6c:f2:9e:90:77:2b:09:6d:83:
b0:f3:1f:77:b0:a1:04:5d:c6:b5:29:1c:4e:85:0f:
cd:d7:70:65:26:3b:da:05:eb:0b:e4:a9:ee:fb:66:
09:f6:38:7a:f5:83:4b:53:ed:6f:33:2b:fc:76:2b:
0c:ee:43:62:03:cf:d4:73:c5:86:cf:c1:63:0e:38:
61:65:ed:99:5a:a7:4f:c3:90:1e:c7:d8:ee:c0:ed:
7d:3b:9d:df:52:f5:2a:d1:2f:68:a9:28:69:54:d2:
d5:32:e6:99:ae:ca:99:b2:38:29:b8:ec:93:17:37:
f6:0b:35:99:63:f7:3a:8d:0c:e5:01:8a:b0:67:99:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:42:72:07:25:98:54:C4:18:6E:B6:36:C8:7A:D5:D2:8B:42:5D
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:d2:46:4f:ed:12:a7:cc:2b:32:2d:02:c2:ce:ca:e3:39:
6c:c2:71:0f:b8:bc:93:da:b8:c7:fc:cb:15:f2:7c:f5:7d:d9:
74:5b:22:20:c8:a3:5a:f7:f7:45:02:03:59:8f:f5:be:82:3a:
8b:a1:be:c8:88:ce:67:17:ad:ac:71:d6:6a:32:97:4d:14:a9:
98:f8:2f:29:f6:7f:17:6f:40:0b:aa:b2:50:d6:37:aa:f2:2c:
b8:56:f4:54:fa:85:a8:d4:c1:77:91:da:e5:b1:ea:a7:df:3e:
26:f0:bd:da:60:7d:df:62:4c:4c:c4:a5:d5:c7:9d:93:d8:18:
96:47:54:a4:10:de:f8:e6:58:a5:65:6f:4c:a5:61:4c:e3:90:
3c:94:21:10:7e:9b:cf:bd:52:29:47:5c:00:eb:9c:e2:55:7a:
89:81:19:c1:99:ea:cb:d3:b6:7f:b9:d5:6f:53:95:94:10:0b:
8a:dd:26:46:51:f4:38:77:f0:57:38:4b:8c:e7:02:b1:a4:9b:
12:58:92:1f:d8:6f:6e:87:ee:a1:89:24:a2:d3:73:b7:d5:ad:
b8:41:88:8e:29:d2:58:d1:ae:ae:58:c7:23:58:de:6b:a7:ec:
9e:75:12:11:2a:b1:fc:62:4b:3a:97:d4:d4:af:3f:6b:85:08:
4b:5b:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:54 2025 by rpki-client