Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: 8AonxtWl4xlgT02fRzU6XCDblkTenjbN1p7hJpnXXMA=
Subject key identifier: BF:64:B5:E7:31:C2:B7:DB:E0:F8:37:B3:65:F0:6A:0D:35:2F:14:93
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 0198D54E87BA9EC586998BFF319747703ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: 7K/Pq09DScdIXoXXrrPLOGgi/qa0eILOZ1Vx0K4ovHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:ba:9e:c5:86:99:8b:ff:31:97:47:70:3a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=bf64b5e731c2b7dbe0f837b365f06a0d352f1493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:7d:f2:4c:11:b6:a6:7c:93:91:30:ec:e7:
ea:8e:b5:98:e1:fe:7d:4c:90:76:7e:79:bc:1d:a6:
31:ba:3f:77:8e:58:fe:46:7d:60:86:40:a3:bc:83:
c7:6a:ae:db:83:53:2d:73:4e:ec:44:11:39:bb:fc:
fa:4e:74:0f:18:1c:78:de:ec:d5:2a:dc:c7:c9:0d:
9f:a7:61:06:ba:39:06:55:f8:7f:f3:84:8e:0a:8c:
e9:64:b0:03:16:2d:3a:dd:69:87:53:9f:6d:a6:ee:
7e:d7:85:5a:6a:77:55:6b:86:55:03:cf:7f:cf:07:
37:6d:cf:6e:3b:11:75:f9:53:09:3d:f6:8a:e7:eb:
47:ea:24:ee:62:a1:e4:ee:32:a0:54:8e:a1:57:6a:
80:e9:89:7b:09:17:7f:87:6f:f6:8a:16:c0:ee:ca:
ba:4c:3a:de:35:8a:49:1e:f7:30:62:b4:b1:1f:ef:
fb:df:55:11:c8:2c:fe:fd:08:b5:38:86:c0:80:cf:
06:e3:30:f6:3d:d8:f4:89:6d:4e:13:cb:04:d6:f4:
32:8b:d6:c2:08:60:b0:15:7b:c1:1d:51:fc:7d:25:
62:63:ba:e7:f1:80:d5:ce:7b:4d:00:76:46:8c:9f:
5e:84:f8:51:8b:af:0d:4d:3d:2d:30:6a:b1:8f:77:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:B5:E7:31:C2:B7:DB:E0:F8:37:B3:65:F0:6A:0D:35:2F:14:93
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c8:ea:4c:2e:90:33:c5:73:76:49:70:3a:6e:7d:db:8c:45:
50:ca:10:0d:cd:c5:6a:1f:d6:65:ea:b9:91:0a:ba:65:2d:0c:
e4:14:c4:2c:3e:b3:e7:c6:76:4e:67:a0:93:92:7b:51:c0:0e:
d0:09:9c:7f:1d:e6:41:27:50:ce:a3:86:75:04:a6:e2:35:43:
40:b4:e6:e5:8a:5f:43:c3:31:2c:cb:61:2e:77:d2:55:85:88:
cf:47:b1:00:c7:c5:c2:52:65:da:89:c6:5e:b8:45:6d:b2:02:
70:8a:a2:b3:44:43:a6:fd:b1:ef:af:44:9b:0f:4b:ac:9d:e3:
91:37:cb:f8:83:76:54:db:2f:28:d8:1a:a8:50:75:87:82:c0:
16:73:d3:40:64:2a:71:c8:91:78:84:03:7b:95:d5:e5:0f:d6:
04:a3:63:9b:d5:52:c1:0e:b1:0b:b9:b6:46:4a:f4:1f:49:08:
eb:f4:28:00:47:90:80:72:63:cf:41:b5:e5:0c:71:4c:b2:15:
1c:97:0f:0d:2f:c3:e0:a4:c1:27:0f:5b:fe:4e:e9:a3:0c:43:
0b:73:26:16:ce:78:6a:f0:e2:f6:a8:de:9f:3b:75:ff:8d:e2:
37:d4:17:53:07:e7:6b:64:67:c0:3a:96:89:97:f4:0a:30:e0:
84:23:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:09 2025 by rpki-client