Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: QY83cjBKrCM47AdTrNFkGcFDj7NE1yKeMcnJh/EiGSM=
Subject key identifier: EE:FA:67:FA:C1:CE:41:69:4D:CF:0F:67:4F:58:46:18:D7:AC:04:95
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 019A4E18E891697E24012F504FFA0DFCBD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: 18oPNLT0LEK6xMpsP9jCVsF3Ck3jcLkSKEasgD4Ozpg=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e8:91:69:7e:24:01:2f:50:4f:fa:0d:fc:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=eefa67fac1ce41694dcf0f674f584618d7ac0495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:e8:79:41:c5:56:03:95:d4:4b:ed:c8:02:
a6:e8:7c:0f:87:cb:e1:38:33:27:37:a9:34:4e:ba:
65:00:ef:39:92:ab:8f:b2:8d:c3:9a:3a:05:d1:33:
ed:d4:20:18:b3:ab:d3:52:92:a8:87:85:07:15:f9:
18:18:6d:10:9f:ed:a4:f3:11:49:e2:20:69:1f:1d:
19:94:8e:62:24:95:32:5e:32:19:d2:87:7b:7c:0f:
b8:bd:9f:a2:4c:e5:bf:f6:f8:df:8c:c5:61:32:d4:
17:56:83:7a:5a:cd:99:fa:f0:74:f7:49:ac:46:dc:
d4:fa:6f:cc:b3:85:b2:83:d5:84:c7:44:5f:f3:3a:
df:ac:3f:7b:fd:e2:0b:55:d6:20:b7:e6:5a:41:c1:
87:3a:2c:d5:4a:60:e5:50:3f:88:c1:2f:07:8c:d8:
a9:65:0c:6f:6a:ee:36:5f:8c:89:ff:6a:d4:54:38:
05:92:d8:a7:b6:a4:87:7b:c9:42:f2:82:e3:63:73:
6f:4b:6b:9e:b0:f8:b6:38:70:70:b5:e3:ae:5a:d6:
47:e6:33:ce:ba:f2:0f:ac:5a:e7:8b:a9:77:5e:8a:
f9:c0:08:3e:6b:0c:60:39:ef:a0:92:cc:48:34:32:
28:9f:21:5c:b4:b4:16:78:91:f4:06:a3:a5:40:ec:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:67:FA:C1:CE:41:69:4D:CF:0F:67:4F:58:46:18:D7:AC:04:95
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b6:d6:64:56:8c:9b:55:40:b1:b2:5e:3b:71:db:26:56:88:
36:d5:2e:bf:f6:f2:cd:71:e7:4d:7f:60:d2:e3:e4:55:5d:b2:
9e:37:4d:7e:ba:c3:b3:20:5f:66:fc:5d:30:0d:35:b2:ea:40:
67:cb:c8:d7:1f:e5:9a:b3:50:1c:c9:5f:14:d1:b6:e7:48:62:
a8:e6:9f:79:74:1d:59:ea:55:83:45:20:37:4b:d2:41:07:83:
e4:bd:69:a2:4c:e4:59:13:5c:cc:b5:b9:be:d2:fe:6e:6e:42:
38:2b:9d:22:b0:c4:91:b6:9d:0a:94:78:da:e6:56:cd:eb:b3:
33:83:3c:f1:22:58:3f:ac:02:14:df:1f:be:d4:95:25:40:2e:
9f:1c:42:81:c1:83:9f:f7:9b:d7:59:41:e4:08:79:6a:70:24:
92:80:9e:0f:7d:10:28:48:47:da:ff:f0:24:cf:87:fb:ef:d3:
19:7d:c0:2d:f0:89:3d:05:73:0f:af:45:22:e7:14:9f:59:67:
28:ac:7a:01:2c:32:5a:5d:c5:9f:9c:f1:fd:42:2f:9e:c6:22:
a1:c1:af:b3:2e:20:d9:85:d5:ec:60:a8:77:69:53:58:70:ba:
35:b6:ae:f8:fc:fa:69:cf:5f:3d:3b:03:76:b5:e2:4b:53:d3:
3f:f6:c4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:38 2025 by rpki-client