Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: nXWUmSLoMlCi3wXLqYW6q3OwIghbaCNOBKpp0evMa/U=
Subject key identifier: 33:8A:9C:56:C1:D1:25:48:32:5F:75:A0:55:EE:09:F6:E2:CE:19:40
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019A4EF559DB6814A0D6E23373F2D9E54E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: DgqLgNMC0eVmT2580ZtOhznsvQ+LDaPPI5nr9rpB3Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:59:db:68:14:a0:d6:e2:33:73:f2:d9:e5:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=338a9c56c1d12548325f75a055ee09f6e2ce1940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:05:d6:a8:92:03:16:c1:93:28:7d:8b:2a:
08:ed:9e:7d:0b:16:a3:f8:f5:7f:44:bd:d7:95:43:
04:0b:50:8c:86:02:28:fb:61:ad:c9:35:d9:b2:b4:
5d:64:57:18:c5:f4:7f:b5:0b:6d:51:fb:9c:ff:01:
5c:98:6a:79:0f:ad:b7:32:84:15:fb:ef:d7:6c:40:
81:5f:5d:63:66:a3:56:74:7b:85:49:91:a3:fd:f4:
6b:c1:4a:84:80:69:1f:67:fe:f9:46:36:54:88:f9:
74:c2:75:9d:0c:17:ac:a5:e6:ba:cf:4b:e4:2b:fb:
9b:a6:30:90:86:ee:8f:a5:77:df:47:ce:18:e2:ae:
5b:2e:03:f2:e0:46:04:65:e5:95:12:1d:e3:03:e3:
c3:a0:03:63:26:42:b8:33:e8:6c:c7:82:30:d6:16:
e5:e5:5c:98:ff:d3:5b:bf:e0:85:17:77:15:b3:ec:
4d:a8:4e:fb:a3:06:d2:1f:ea:a5:21:c6:6f:95:af:
4f:a2:c2:73:9c:ed:e9:91:6a:57:c8:12:65:5e:16:
3a:66:f0:e3:d7:39:81:a8:90:26:7b:21:f2:2b:dd:
83:47:4f:81:59:3c:f3:ac:a4:82:4e:c0:e6:0b:d3:
9d:a9:cd:e7:ad:ce:1c:70:7a:c3:2f:9f:da:52:a8:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:9C:56:C1:D1:25:48:32:5F:75:A0:55:EE:09:F6:E2:CE:19:40
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:95:93:2c:19:cc:e3:7b:98:a7:1a:c0:e7:de:3b:04:70:e4:
08:ad:05:78:70:73:59:65:5c:4b:5b:a0:34:91:42:c2:0f:b2:
1c:42:bb:8a:a0:44:f6:3e:76:2b:e3:f6:d0:20:f4:ce:4b:0a:
58:58:60:8f:37:2c:0b:c3:2a:60:26:4e:6f:9a:8b:a3:bb:4b:
7b:19:f6:e0:f1:e3:7f:39:e1:da:82:72:33:c1:a0:b9:ca:18:
81:fc:06:a3:ba:ac:04:53:48:22:67:f8:c3:86:73:dd:dd:c6:
b8:64:50:40:32:53:31:62:d9:45:cb:92:f8:37:a2:92:11:ae:
cb:90:8a:36:6e:2b:4c:7b:43:79:d5:bd:50:84:28:80:bd:7c:
8d:de:2c:66:bd:93:0a:c2:2a:d7:c5:cd:78:e7:44:ef:07:d5:
c9:bb:01:c4:c8:cc:e1:22:bd:75:22:90:16:fb:07:48:53:85:
77:ba:77:5c:d1:e4:d6:9a:95:8e:dd:ce:ac:f6:16:db:96:0f:
72:a0:aa:95:68:24:ea:b1:bb:90:07:a8:7c:89:41:cc:61:17:
04:30:95:65:3a:ed:52:80:6e:43:5f:82:b1:b0:dd:74:39:23:
a6:55:b7:6f:a1:f9:8b:ab:29:17:2b:16:ed:d8:f9:a1:fd:a8:
53:f7:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:22 2025 by rpki-client