Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: YGlnfsBfFPQ3g0EbEaTfvponjAVlPqJzPJnabKGUFDc=
Subject key identifier: 6B:69:F5:A9:30:30:F3:D7:97:F8:F0:62:ED:BA:62:97:5C:50:62:2F
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 019A7293545926EAC76262BE4C7322AEE39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: tqpyusBMpWcRAMQgaCe00ReBc9vMtoADp5eGys2qELo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:54:59:26:ea:c7:62:62:be:4c:73:22:ae:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=6b69f5a93030f3d797f8f062edba62975c50622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:38:a9:0a:05:e5:65:d2:4c:e5:93:2d:51:
7c:9a:b5:8e:27:2d:2e:dc:c9:63:13:17:bc:2a:bc:
59:31:fb:c0:e6:e1:91:bc:c2:61:76:48:73:44:30:
7d:1e:8e:2e:53:75:9f:5a:18:5d:a9:0f:eb:81:83:
0d:e2:94:15:a1:70:6f:36:3d:47:90:2f:c0:ce:c8:
3b:06:ef:58:b2:69:49:51:81:89:01:26:49:cc:92:
fd:6a:33:b4:fc:84:22:bd:46:c0:ca:76:77:9d:9e:
b8:f5:91:58:ff:51:66:55:1c:99:3f:71:a9:34:b0:
b7:c3:63:af:50:bb:60:1d:48:b5:68:7a:dd:d8:f9:
b4:e1:77:d6:51:73:6b:3e:74:9c:c2:cb:52:cc:74:
cd:31:c5:92:4a:62:04:d8:e3:4d:b5:da:8d:2d:2e:
60:7b:75:da:a7:7b:33:f5:95:5b:a2:04:b5:84:3f:
5d:d1:d2:33:e1:60:f2:44:ae:85:62:17:1d:09:72:
ba:bd:27:18:5c:cd:a9:a6:13:b2:c2:d8:cd:c3:f4:
35:9c:c5:99:05:33:24:e2:2b:6c:43:8b:6c:fa:de:
80:6e:da:a5:1f:11:da:84:62:2e:46:9f:ba:5c:2d:
7f:6f:06:14:78:0d:95:d1:d1:3a:51:9e:be:80:84:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:F5:A9:30:30:F3:D7:97:F8:F0:62:ED:BA:62:97:5C:50:62:2F
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6a:55:82:96:5d:54:fd:4d:ba:93:bd:4d:6e:73:f9:12:eb:
b7:d1:d0:ec:5b:bf:29:2e:92:a8:0d:6b:d7:ae:a4:7e:10:5b:
56:19:b9:e4:d1:ea:09:7c:0c:7e:10:7c:ad:53:ed:d5:66:b1:
15:3b:d3:36:30:71:44:5d:ad:09:55:91:2c:d8:fc:4e:ff:13:
89:32:d6:53:4c:d6:73:03:87:cd:6c:59:51:fb:f0:a3:ac:c8:
1c:16:ef:d7:60:f8:98:06:bb:98:92:fe:4b:1b:24:ab:92:42:
17:27:c8:92:35:03:c0:1d:9a:d0:e7:67:2a:71:1e:7f:fd:ef:
d9:29:89:0e:8d:fa:58:de:ec:39:99:c2:87:0b:de:50:38:9f:
91:00:98:0f:95:02:6c:65:43:03:1e:d5:0f:76:f1:42:ec:2c:
b4:b4:99:04:15:37:82:a8:44:5f:8e:2c:fd:0f:e6:5c:c4:b3:
06:fb:36:4d:ab:5d:1b:88:34:d3:64:18:b3:3c:43:03:d8:3b:
06:40:1c:6c:11:03:a0:70:f3:39:9e:16:91:06:06:fa:f6:8f:
51:4f:35:b9:ac:30:d9:81:02:62:7b:8d:d1:de:7d:e2:75:24:
1e:b3:4f:59:72:68:41:47:07:9f:e4:72:b7:e5:73:3b:8c:75:
d8:0a:84:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1RZJurHYmK+THMiruOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2MxYTg4YzljODlhZTk0MjU0ZTIyNDFjNzg4ZTk3YzFm
ZjNlNDgwHhcNMjUxMTExMTEwMDQ5WhcNMjUxMTEyMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg2YjY5ZjVhOTMwMzBmM2Q3OTdmOGYwNjJlZGJhNjI5NzVjNTA2MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhs4qQoF5WXSTOWTLVF8mrWOJy0u
3MljExe8KrxZMfvA5uGRvMJhdkhzRDB9Ho4uU3WfWhhdqQ/rgYMN4pQVoXBvNj1H
kC/Azsg7Bu9YsmlJUYGJASZJzJL9ajO0/IQivUbAynZ3nZ649ZFY/1FmVRyZP3Gp
NLC3w2OvULtgHUi1aHrd2Pm04XfWUXNrPnScwstSzHTNMcWSSmIE2ONNtdqNLS5g
e3Xap3sz9ZVbogS1hD9d0dIz4WDyRK6FYhcdCXK6vScYXM2pphOywtjNw/Q1nMWZ
BTMk4itsQ4ts+t6AbtqlHxHahGIuRp+6XC1/bwYUeA2V0dE6UZ6+gIS9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtp9akwMPPXl/jwYu26YpdcUGIvMB8GA1UdIwQY
MBaAFIl8GojJyJrpQlTiJBx4jpfB/z5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAt
NDNmNmFlNTIwYjFhLzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYjNlMDMtMzk2OC00ZGIyLWJmODAtNDNmNmFlNTIwYjFh
LzEvaVh3YWlNbkltdWxDVk9Ja0hIaU9sOEhfUGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWpVgpZd
VP1NupO9TW5z+RLrt9HQ7Fu/KS6SqA1r166kfhBbVhm55NHqCXwMfhB8rVPt1Wax
FTvTNjBxRF2tCVWRLNj8Tv8TiTLWU0zWcwOHzWxZUfvwo6zIHBbv12D4mAa7mJL+
Sxskq5JCFyfIkjUDwB2a0OdnKnEef/3v2SmJDo36WN7sOZnChwveUDifkQCYD5UC
bGVDAx7VD3bxQuwstLSZBBU3gqhEX44s/Q/mXMSzBvs2TatdG4g002QYszxDA9g7
BkAcbBEDoHDzOZ4WkQYG+vaPUU81uaww2YECYnuN0d594nUkHrNPWXJoQUcHn+Ry
t+VzO4x12AqEwg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:48 2025 by rpki-client