Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: BQOdbEn23GEHQlwDPlCM7Z45kUOalOCQP9650AGG5Pk=
Subject key identifier: 3F:3A:5C:C3:64:8B:55:2F:DB:DA:FC:AA:14:32:7B:E4:A9:C1:67:5D
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019A5C7A7F032D017FF8934E8B50FF0BA7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1714
Signing time: Fri 07 Nov 2025 04:02:02 +0000
Manifest this update: Fri 07 Nov 2025 04:02:02 +0000
Manifest next update: Sat 08 Nov 2025 04:02:02 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: aTxto+ymcqOQfQIXk4Z7MT5mISJnkJLSj50Zo7yX2/k=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:7a:7f:03:2d:01:7f:f8:93:4e:8b:50:ff:0b:a7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Nov 7 04:02:02 2025 GMT
Not After : Nov 8 04:02:02 2025 GMT
Subject: CN=3f3a5cc3648b552fdbdafcaa14327be4a9c1675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:76:e7:f1:2d:70:9e:22:3b:91:5f:a0:b5:
a4:e4:3c:8f:9a:63:3c:96:c8:06:d0:b5:36:a6:1c:
8c:bb:27:6d:b9:35:d2:91:a4:0d:72:04:97:ad:11:
a9:73:6d:9d:99:9e:54:bd:5e:68:c5:56:d2:6c:3b:
0e:1f:13:00:f1:72:5a:4c:55:74:f4:25:52:c0:6b:
65:f7:a0:89:6f:5b:77:4a:6d:6b:25:f0:4c:46:97:
b6:18:7e:7c:77:ea:bf:15:a7:47:44:39:a6:f4:77:
f4:9f:8a:3f:e7:99:4b:00:a0:da:d7:6c:3b:c3:0c:
54:dc:dd:88:6e:e1:9f:d5:e1:95:11:c6:77:44:8f:
2c:27:18:d4:02:b5:8c:9c:82:8d:31:d1:b7:2c:f8:
9e:c1:f6:cc:f6:a0:52:4a:95:b0:b7:3a:09:26:a6:
6b:56:62:5b:8e:0a:e7:18:96:1b:3d:56:cf:38:14:
c1:a2:58:2c:e0:8b:39:37:3c:1f:e0:91:86:29:94:
03:4e:68:83:25:e0:e2:11:c2:97:43:f5:52:7f:9b:
b6:f4:b6:2c:ea:d8:11:02:16:ff:0a:86:cd:c5:02:
8f:8a:a3:fa:92:90:ea:dc:5a:95:93:e8:ed:87:96:
91:d6:1d:36:85:cf:93:53:bf:c5:9e:a2:5a:cd:9a:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:5C:C3:64:8B:55:2F:DB:DA:FC:AA:14:32:7B:E4:A9:C1:67:5D
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:26:fd:c1:5f:98:79:cd:e5:e0:a5:eb:31:96:d1:0d:87:9f:
ca:d6:cf:43:24:ea:00:9b:db:6b:27:df:9b:24:93:91:29:2c:
e0:7a:83:a0:79:8f:27:e4:4c:7e:72:6c:ac:a5:ef:8e:3b:6d:
5e:02:b1:5b:56:f3:d1:c1:30:3b:89:31:c0:d1:f6:a8:4e:38:
55:df:e1:b2:2a:7a:aa:8e:e2:eb:87:ed:6b:a0:25:c7:37:60:
27:88:c7:d9:0f:9f:5f:a1:be:ce:94:a2:67:ae:2f:f8:ac:fb:
b6:f4:e5:52:25:4b:6b:5a:5b:a6:20:95:09:9c:61:8d:dd:28:
a9:68:e4:5b:24:5d:f0:75:df:72:38:55:1e:40:76:6f:e4:ce:
3a:a4:6f:b3:a7:64:29:00:d9:88:1d:d5:71:bc:06:3a:2a:03:
c1:38:04:86:ad:d7:85:bd:29:f8:3f:ef:55:87:d5:4a:9f:e5:
4a:99:6c:69:4b:c5:2f:cc:48:3c:db:26:59:28:bc:18:22:40:
f2:c0:ca:55:25:35:23:d2:88:4d:d2:c6:0a:88:16:a0:37:9f:
bb:99:35:6a:03:6e:e4:76:52:ca:6c:6a:8c:ad:b7:43:3b:4b:
07:0f:e0:57:0d:8d:51:c3:42:a2:87:6d:d0:e8:74:34:1e:66:
13:76:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:44:22 2025 by rpki-client