Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: 5WP9Ozn6yadPbTruEkwFRRn8azEjQKt5kb2xgRPm2e8=
Subject key identifier: 74:6D:F9:A6:D7:53:F8:54:CE:D5:06:76:00:23:86:89:DA:D7:52:67
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 019A4EF4B32FA1F7B4DC3CEB5CA293AFE818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 07B7
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: Of0rz6nflzllmLp1Lp2uo6rPz9wSgcp7K/3NE2OOcV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b3:2f:a1:f7:b4:dc:3c:eb:5c:a2:93:af:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=746df9a6d753f854ced5067600238689dad75267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:f6:f0:7a:aa:3b:13:e3:a1:8d:2d:7d:9e:
80:89:99:d8:db:c1:5a:72:ea:b0:b1:0d:85:0b:c0:
1c:18:2a:93:a9:55:a5:b0:70:4c:fb:f4:b8:bb:27:
23:1b:da:1e:20:a4:04:8e:60:ad:25:2b:71:39:6d:
97:53:6e:49:43:cb:ac:3b:0c:10:7e:77:ce:f1:75:
42:04:f9:47:7a:9e:8e:a3:46:3d:a8:b8:a2:3e:04:
18:bf:34:f1:d1:04:88:61:d0:8c:42:dd:0c:0d:c7:
9d:c6:f6:62:5f:d4:44:6b:68:43:9a:8a:c2:cc:0d:
89:fa:ed:e1:6c:23:8e:38:68:39:85:f1:be:c3:9e:
31:39:ea:4b:86:fc:55:fa:41:36:0b:36:ae:36:06:
e5:2d:3f:d0:9a:54:83:69:38:fd:41:ce:3e:92:e0:
c4:16:8c:36:9a:45:42:41:f2:21:60:65:0f:f9:da:
5d:68:81:f1:da:bd:96:6a:53:8f:f2:f0:48:52:b9:
91:66:25:45:b1:ee:3a:56:7e:fb:5d:89:de:be:ea:
92:a1:b0:11:14:be:db:0e:ce:aa:e4:b9:86:2c:77:
13:7c:db:d9:0d:a0:a5:1d:47:1e:38:22:e2:06:41:
41:81:ed:99:74:a6:89:7f:53:35:2f:59:c0:fa:96:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:F9:A6:D7:53:F8:54:CE:D5:06:76:00:23:86:89:DA:D7:52:67
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:93:e0:7b:5f:e5:3d:35:be:55:39:ad:54:6f:b7:b8:c1:b7:
0a:76:bf:25:ed:55:5c:a7:cb:6e:1a:2c:33:95:95:1e:e6:ce:
59:8e:dc:99:ed:cb:36:3b:ae:6d:b4:4c:f3:34:8a:ac:f0:17:
d5:ac:1a:1f:ad:de:de:78:d7:c6:8c:05:43:0e:57:b8:1b:9d:
5b:d7:be:b0:15:ca:c4:bf:ee:b8:ae:dd:87:27:88:96:d3:43:
31:7c:f8:ec:3d:ed:d4:93:28:31:6b:64:03:c5:50:40:db:98:
e7:84:53:6d:e8:16:37:9f:16:2c:8a:0c:42:f9:70:e7:a4:90:
04:b8:da:84:2d:fc:6e:0e:0b:09:87:c2:8c:c8:e5:c2:6e:c1:
26:24:88:7c:8d:8a:96:5f:b8:07:5d:88:7e:5a:ac:2f:f0:ce:
04:a9:07:b1:4d:c9:3c:da:11:44:e1:17:e6:db:9d:ab:31:10:
82:21:31:49:9a:4b:90:54:4f:d4:f6:2b:e7:bf:8d:61:81:87:
03:a9:26:dc:3c:33:f2:85:c9:97:c6:e0:3c:20:3c:fd:76:54:
4c:d3:0f:59:5b:4b:33:08:37:5e:2c:cd:e9:99:02:1e:54:66:
fa:4e:43:05:aa:50:8a:b9:b4:37:95:74:c3:82:dc:bf:54:2d:
00:b7:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:22 2025 by rpki-client