Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: A3CQ6dhQkBkHm2pjVV/OH9FgoDq8rBBPaHvV9Vq74As=
Subject key identifier: 9C:9D:38:FE:6E:BE:7E:9E:9F:44:13:5B:E9:D9:4C:42:20:24:C2:60
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 0199FEB4B9EF64C6449A0D34FB22CF428824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:20 +0000
Manifest this update: Sun 19 Oct 2025 23:01:20 +0000
Manifest next update: Mon 20 Oct 2025 23:01:20 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: C9XlzTFbgXUwTw0ovHTyjjGmxc1zQAArkdecot7qkM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b9:ef:64:c6:44:9a:0d:34:fb:22:cf:42:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Oct 19 23:01:20 2025 GMT
Not After : Oct 20 23:01:20 2025 GMT
Subject: CN=9c9d38fe6ebe7e9e9f44135be9d94c422024c260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:5a:c9:92:f5:4b:ab:7c:3f:ef:35:05:0a:
83:97:4c:42:55:5d:27:71:cf:df:04:c9:f8:d9:b1:
a2:95:20:b4:bb:9a:af:5a:da:21:07:a7:a8:a7:92:
5d:85:a2:11:c1:4f:a5:84:24:3b:08:12:96:1e:7e:
d7:f8:45:02:18:82:74:4f:80:b1:ed:bb:e4:72:ab:
72:a6:d9:9d:ea:7f:fe:38:ab:be:cc:99:98:80:d5:
b3:1f:86:01:c4:6e:53:ed:b0:1b:53:39:f7:a9:c1:
d6:95:31:dc:54:1b:89:b4:6a:1d:b1:06:89:9c:9e:
02:a6:c0:6e:8f:fc:a3:db:18:8e:2d:b2:de:b3:aa:
ee:29:4e:cc:d0:cb:99:52:f0:2c:bb:8e:33:83:82:
80:57:1e:24:c2:65:12:52:f8:4b:ec:3a:c7:4a:73:
a8:02:d8:02:00:89:74:6b:15:a0:39:c0:1c:ed:62:
0c:6f:03:16:c3:02:f1:72:fc:12:0a:53:6b:af:e6:
67:c0:14:48:d7:c1:d6:61:80:ef:71:47:80:57:ce:
54:2d:44:34:eb:92:eb:11:d2:75:20:31:68:ba:8a:
70:18:16:cb:21:db:8f:56:da:a7:1b:b8:e6:fa:b1:
a9:e1:69:d9:bf:a7:b9:56:9b:c6:aa:e1:ab:02:b6:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:38:FE:6E:BE:7E:9E:9F:44:13:5B:E9:D9:4C:42:20:24:C2:60
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f0:e3:6b:27:22:4a:65:c8:eb:92:e3:ea:2c:a5:63:9c:f8:
3d:da:5c:c4:4b:74:51:1a:50:7a:d2:09:b4:e3:c7:1d:9f:01:
fe:0b:4c:db:7a:c3:ae:0e:b1:37:d1:06:81:f9:f6:36:46:18:
c2:1b:7b:40:23:05:6e:f8:c8:a9:38:1f:cc:80:05:ea:59:56:
1f:99:45:da:eb:d4:7a:da:3d:82:4f:0f:63:c3:0e:bd:83:00:
de:c4:82:7a:c0:e9:d0:09:19:75:d5:ff:ae:6f:ab:14:32:8c:
47:ed:c2:4f:e9:d2:d7:08:58:78:14:d7:ce:63:30:99:25:6d:
e1:a6:20:6c:43:46:e2:0e:33:1e:bc:db:1b:47:31:6a:6b:5c:
43:45:03:1e:12:80:02:c0:6d:54:1d:6c:f7:4b:8f:25:64:50:
00:63:64:7f:58:14:03:59:ce:8a:00:12:3e:e4:46:1f:58:18:
46:e6:b3:b9:8a:59:87:cb:ca:21:2b:94:03:6c:4b:e8:2e:3d:
8d:cc:86:b5:36:c8:70:9c:cb:e5:c7:db:e8:d1:d2:18:2e:bf:
d0:4f:ab:96:4c:17:21:60:be:ec:26:01:b0:64:10:20:1d:68:
9b:4a:fb:d7:34:92:55:6d:fc:e9:65:5d:bc:a1:fd:d7:b3:b8:
72:15:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:58 2025 by rpki-client