Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: UhxgTjhkpAGOLUYiM9d7B6XhuHNsHJFR4ZGeButmKdw=
Subject key identifier: 36:96:E6:B0:A4:7A:6B:0B:3D:FD:54:53:7F:8F:86:DA:38:53:BB:26
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 019A5074A7CEE2B37C0DDB774FB7859F6496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1663
Signing time: Tue 04 Nov 2025 20:00:13 +0000
Manifest this update: Tue 04 Nov 2025 20:00:13 +0000
Manifest next update: Wed 05 Nov 2025 20:00:13 +0000
Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=)
2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: HDXGwle9f0wa7mahi/KRVtdw3Lq59p0yta6grTOvCCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a7:ce:e2:b3:7c:0d:db:77:4f:b7:85:9f:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Nov 4 20:00:13 2025 GMT
Not After : Nov 5 20:00:13 2025 GMT
Subject: CN=3696e6b0a47a6b0b3dfd54537f8f86da3853bb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:d8:5e:67:6e:95:b9:36:ff:d4:04:63:25:
9d:80:0e:50:4f:49:78:6c:76:5c:dc:4a:03:39:b8:
0a:32:57:7a:46:3b:09:f0:b3:82:77:1f:bf:b2:14:
1d:13:05:23:de:7d:b1:c5:c6:66:4f:7f:10:23:38:
7a:28:f4:54:6b:1a:be:d5:ca:96:0d:28:b1:85:c8:
cb:e9:59:ee:72:f8:74:c1:ef:de:ee:80:2f:35:08:
54:7d:ae:e7:3c:47:19:27:f8:b8:12:9e:a2:57:42:
de:fb:f6:33:a3:ca:3a:63:03:c9:41:20:a7:a4:18:
e9:21:35:b6:a3:3b:28:c8:98:0b:da:56:83:ae:99:
5b:c8:e7:5d:5b:f8:95:6f:e2:dc:ef:78:aa:6a:a9:
d0:ce:a3:7a:1d:1b:72:87:0c:ea:30:70:83:62:b4:
f7:1c:51:85:26:3c:c5:dc:22:ba:ec:5e:7a:cb:e6:
22:ad:21:a9:1c:11:cf:c2:12:c9:e6:2e:52:8c:d8:
1f:95:16:1e:cd:ca:f0:59:82:61:7a:b7:1a:05:95:
2f:6d:6a:3e:6a:74:03:99:bb:c9:c6:97:76:43:1f:
e9:d4:92:75:d7:f7:8d:7f:1d:65:15:b2:00:27:7d:
17:f5:8c:0d:41:28:22:03:5d:6f:af:c2:e3:79:e2:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:96:E6:B0:A4:7A:6B:0B:3D:FD:54:53:7F:8F:86:DA:38:53:BB:26
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9a:93:e6:2e:af:62:90:12:ef:c0:61:a8:84:31:40:da:4f:
27:45:05:7e:33:5c:46:8f:18:7f:c7:35:ff:04:8d:18:ef:78:
47:b6:75:15:9e:1a:56:59:5c:0f:43:39:e8:9f:4c:af:0f:11:
6c:19:ef:30:11:7c:c2:49:c9:9a:82:25:01:b9:ad:8b:31:ed:
a7:26:be:3d:51:21:b1:83:fa:d0:b5:ab:4f:16:cd:b4:e6:34:
49:8b:1c:fc:1e:b5:61:0b:79:f9:70:59:ea:0f:a4:8e:74:29:
79:3c:80:cc:72:cb:17:93:d7:2d:1e:a7:99:5a:2a:05:6b:0b:
53:c0:fd:8d:84:24:00:cb:55:07:a1:ad:02:10:2f:74:f7:17:
46:f9:27:db:ad:74:11:0d:65:b8:fc:87:20:94:78:9f:fa:b9:
e6:20:b5:5a:e9:be:68:f2:e8:42:a2:dd:38:7d:c2:5b:ce:fe:
43:e6:28:c6:6b:cf:08:57:bd:33:24:be:1d:cb:b8:f0:bd:c8:
1d:58:8f:97:79:57:45:c5:fc:16:13:39:b4:48:f6:a5:33:67:
53:32:4e:86:f5:89:d4:dc:9c:0f:65:8a:6c:be:aa:40:6d:29:
51:0b:1c:bc:c2:cc:07:4a:42:de:e7:7b:c0:e7:a1:66:a1:4b:
2d:18:e8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKfO4rN8Ddt3T7eFn2SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOTJjNTJmMzYwYTNhNzJmZTIyNDQxYWMzZmM3ZTBlNTIy
NWVlOTEwHhcNMjUxMTA0MjAwMDEzWhcNMjUxMTA1MjAwMDEzWjAzMTEwLwYDVQQD
EygzNjk2ZTZiMGE0N2E2YjBiM2RmZDU0NTM3ZjhmODZkYTM4NTNiYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaDYXmdulbk2/9QEYyWdgA5QT0l4
bHZc3EoDObgKMld6RjsJ8LOCdx+/shQdEwUj3n2xxcZmT38QIzh6KPRUaxq+1cqW
DSixhcjL6Vnucvh0we/e7oAvNQhUfa7nPEcZJ/i4Ep6iV0Le+/Yzo8o6YwPJQSCn
pBjpITW2ozsoyJgL2laDrplbyOddW/iVb+Lc73iqaqnQzqN6HRtyhwzqMHCDYrT3
HFGFJjzF3CK67F56y+YirSGpHBHPwhLJ5i5SjNgflRYezcrwWYJhercaBZUvbWo+
anQDmbvJxpd2Qx/p1JJ11/eNfx1lFbIAJ30X9YwNQSgiA11vr8LjeeJ4PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaW5rCkemsLPf1UU3+Phto4U7smMB8GA1UdIwQY
MBaAFDGSxS82Cjpy/iJEGsP8fg5SJe6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMt
Mjc0OGM0MDAyYzJlLzEvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMtMjc0OGM0MDAyYzJl
LzEvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJqT5i6v
YpAS78BhqIQxQNpPJ0UFfjNcRo8Yf8c1/wSNGO94R7Z1FZ4aVllcD0M56J9Mrw8R
bBnvMBF8wknJmoIlAbmtizHtpya+PVEhsYP60LWrTxbNtOY0SYsc/B61YQt5+XBZ
6g+kjnQpeTyAzHLLF5PXLR6nmVoqBWsLU8D9jYQkAMtVB6GtAhAvdPcXRvkn2610
EQ1luPyHIJR4n/q55iC1Wum+aPLoQqLdOH3CW87+Q+YoxmvPCFe9MyS+Hcu48L3I
HViPl3lXRcX8FhM5tEj2pTNnUzJOhvWJ1NycD2WKbL6qQG0pUQscvMLMB0pC3ud7
wOehZqFLLRjoxA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:41 2025 by rpki-client