Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: 3i2Xene+92NOWBxrarm/3FvvRd0kPTLuaJVBRn2JqUg=
Subject key identifier: 54:26:44:9B:77:9B:A5:4B:44:08:54:15:A2:AC:C7:E9:A1:FB:8A:C2
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 019A4FCFE60F1FA449624A54E091D1E109E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:16 +0000
Manifest this update: Tue 04 Nov 2025 17:00:16 +0000
Manifest next update: Wed 05 Nov 2025 17:00:16 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: rGUwp+mtG58fHlLQRsGou9v5eiVvWiCesFt+n0PitvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e6:0f:1f:a4:49:62:4a:54:e0:91:d1:e1:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Nov 4 17:00:16 2025 GMT
Not After : Nov 5 17:00:16 2025 GMT
Subject: CN=5426449b779ba54b44085415a2acc7e9a1fb8ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:a0:cc:55:76:a2:f9:88:e1:ca:1f:60:d5:
ff:95:fa:af:f7:8e:20:1e:fc:ff:5f:e6:d2:8b:d3:
b3:45:01:c1:32:15:45:f7:58:a9:80:ab:c9:9b:69:
cc:7d:e9:e2:d8:08:27:3d:be:b6:3f:86:9a:8d:c0:
7f:12:35:b9:63:9f:ff:59:99:e6:56:19:54:31:a9:
4d:b8:4b:07:6c:3f:4d:cd:9f:cd:4d:9d:21:a9:ae:
fe:f1:af:f9:b1:aa:26:34:bb:59:41:66:38:5d:d8:
d2:1e:93:ce:fd:ea:b0:72:54:a3:a0:52:32:c5:f7:
9b:83:f5:3a:00:9e:8e:4d:9d:59:20:8c:18:8e:d7:
c9:dd:d0:dd:20:a9:24:e6:f6:0b:15:f3:f9:79:c3:
a9:8e:01:fa:72:6d:f3:a2:45:02:2a:c6:dc:64:cc:
0f:12:13:54:be:aa:cc:e7:dc:e4:d5:6a:e5:3b:b6:
72:47:c0:c4:bf:3b:d3:8b:90:56:c6:c2:bb:87:4c:
b6:18:47:b8:50:6f:08:0e:4b:8b:f5:85:f2:31:57:
d6:fb:f1:86:59:c6:d6:e6:6c:af:24:3e:9c:d7:a9:
2f:74:b9:01:90:ce:97:38:26:49:1f:8a:b4:24:b9:
fa:74:84:9e:43:dc:d0:e6:83:75:36:04:41:e8:1f:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:44:9B:77:9B:A5:4B:44:08:54:15:A2:AC:C7:E9:A1:FB:8A:C2
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:aa:a6:b4:36:b7:78:52:43:4f:9a:4b:38:19:a0:c2:b5:55:
5f:e9:97:ed:78:3e:5c:d9:78:53:7a:96:42:c6:61:72:ec:5e:
99:e7:0e:c9:54:d0:fc:8b:d1:f2:6d:da:f4:b2:e3:06:31:26:
4b:e0:0d:5d:99:dd:2b:1d:b9:38:70:9f:e9:ac:6f:36:03:1a:
d6:02:9b:9e:4e:ce:60:89:b2:94:90:4b:f1:70:e4:97:0c:bc:
ed:8c:cf:5c:87:d3:e5:ac:65:d3:48:d1:00:70:7a:b7:7a:fd:
9c:55:b3:e2:ad:49:6f:34:b0:81:5d:82:44:0d:62:58:f9:29:
f5:4b:9f:f7:79:34:40:01:6b:46:74:fb:ba:34:18:8f:cf:30:
29:1c:83:d7:6d:6d:f1:8d:35:6e:8a:b6:96:7c:6b:1e:13:02:
fe:69:21:02:80:e2:88:d1:e0:e3:25:11:f9:6a:a1:9a:50:ca:
ca:56:ba:c5:b3:54:d0:d8:2d:77:b9:1c:91:09:50:60:c0:56:
05:82:05:e1:3e:1d:c1:4a:db:69:28:88:a2:fe:a3:0a:5b:5e:
5b:23:6e:f8:82:54:7e:ad:5a:2b:18:40:76:6f:03:a0:df:06:
ab:29:37:40:bb:e4:a2:84:af:55:ad:1e:aa:fa:2c:2b:d8:b6:
53:34:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:33 2025 by rpki-client