Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: fO8OHoMq2+tBltyY4ws16HLs6QiNCnOBF8BxCB9bat4=
Subject key identifier: A5:80:76:09:AA:23:24:8C:73:F9:29:70:B9:9E:0F:6D:DE:71:18:B8
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 01988BEA9BE672D52D9D0773B867AC94D8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 23:01:05 +0000
Manifest this update: Fri 08 Aug 2025 23:01:05 +0000
Manifest next update: Sat 09 Aug 2025 23:01:05 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: TXULwO+vjhUebVZvGjmeacECCph+FHz+fWFd8PGrzOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:9b:e6:72:d5:2d:9d:07:73:b8:67:ac:94:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Aug 8 23:01:05 2025 GMT
Not After : Aug 9 23:01:05 2025 GMT
Subject: CN=a5807609aa23248c73f92970b99e0f6dde7118b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:ed:5c:cb:80:b4:84:80:4e:9a:11:77:a4:
15:81:f9:ce:be:98:48:a9:40:8f:37:22:07:af:7c:
5c:bc:00:7d:df:7f:a7:ec:8e:cb:cb:c1:d7:20:1e:
97:1b:a1:1c:22:a7:35:9c:39:7f:1a:94:b6:89:d8:
f1:3d:04:8e:56:92:0c:ba:f7:fe:cc:92:61:d3:2f:
da:3b:17:81:d4:ba:c2:63:55:81:ca:dd:6f:89:19:
5a:b3:95:8d:8a:ac:21:24:41:7d:40:84:fd:24:cb:
fc:4f:01:bc:e7:77:b4:86:1f:08:c4:44:ea:30:2d:
71:0f:c7:27:53:c6:22:32:df:be:bc:e1:50:6a:a9:
77:ff:da:e3:fa:c7:a1:a3:d6:38:84:a3:70:70:75:
0f:7b:e3:18:d3:9b:20:81:35:49:55:c9:a7:51:0c:
4d:71:e8:0c:df:85:21:81:6b:98:ee:59:bb:88:9e:
f3:b4:c1:ef:1a:59:ce:98:25:46:fd:5a:ae:7c:d1:
fa:8f:57:48:28:66:94:d6:f2:e4:b7:d8:7f:9b:f4:
ed:0e:66:65:68:e5:49:ca:75:06:ad:ed:79:50:16:
8a:4c:56:87:b2:e6:a5:48:5c:c6:69:64:d1:f0:1c:
0b:d4:ba:9d:3b:8c:86:58:eb:82:6f:5e:d9:3e:fc:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:76:09:AA:23:24:8C:73:F9:29:70:B9:9E:0F:6D:DE:71:18:B8
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:91:05:0d:31:d4:80:e4:05:18:95:ae:24:fe:03:0a:a4:a8:
51:35:de:75:8d:29:27:40:cf:37:a6:fa:dc:6e:54:f4:cb:7b:
52:12:d2:aa:1a:5f:c5:89:ea:17:78:1e:b2:3a:35:c9:7f:72:
63:a7:dd:a9:47:4a:f7:63:e9:9f:30:eb:8b:62:35:b6:b7:50:
81:5f:5d:a3:56:e1:ff:c3:37:f0:7c:7b:1a:1e:ce:ae:0d:1d:
22:55:c3:67:ac:d8:6b:98:ca:9d:81:2c:f7:de:57:a5:5e:08:
9a:5a:9d:3d:ef:2d:3c:34:a9:c2:e1:5c:df:b0:54:62:52:07:
c6:c4:9e:fe:1b:7b:ac:87:08:fd:10:ba:9a:9b:e3:13:75:4d:
7b:47:0e:26:ca:e3:3e:bb:d1:78:b4:c4:27:86:ec:bb:a8:97:
dc:34:61:4a:ae:ff:2e:9d:25:7b:ab:bb:9b:9a:ab:bc:b6:3f:
07:55:d9:6a:d1:98:8f:af:71:d1:ec:42:f9:ab:fd:78:0d:eb:
85:ee:7b:7c:72:4d:06:f0:8f:24:c9:54:30:1a:a3:c9:f0:9f:
64:dc:63:e4:5b:88:f6:0e:76:e3:7b:27:96:36:b6:d2:0b:1b:
34:ab:a2:6d:85:fa:36:16:e0:9b:0d:04:f2:53:81:53:c1:ed:
b7:3f:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:06 2025 by rpki-client