Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: sSpjmAJ7rIZUnCkY+d3gd35gutPdzIWFWPFH9sIlhZU=
Subject key identifier: 17:39:DC:ED:E5:3D:B5:BF:BC:65:FA:84:A0:9C:B6:E4:4D:39:B7:94
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 019A4E18F14ACCA069B6F92AC48BF36F5286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 139F
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: gwqWvvAtJn2k3FQnuWTQxIhsjIBhlgcg1ZZHK7BygsU=)
2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f1:4a:cc:a0:69:b6:f9:2a:c4:8b:f3:6f:52:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=1739dcede53db5bfbc65fa84a09cb6e44d39b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:21:09:83:c1:c7:cb:1e:5c:db:44:4e:92:
7b:fa:24:22:25:0e:2a:90:6a:cb:d8:8d:8f:d2:d0:
70:a7:ec:f9:91:86:20:e2:a9:10:01:48:35:0d:50:
0d:d2:3e:d7:a6:eb:fa:7a:5c:e2:8a:49:e5:47:36:
3e:6b:39:24:a8:b9:57:1f:e6:a0:b9:63:f4:73:39:
99:f3:9f:ae:95:21:5e:81:fb:1e:ab:b2:a2:e7:d9:
a7:ea:05:95:21:96:7f:d4:f8:1b:f6:20:6f:0b:2a:
b0:08:ba:88:c0:46:c2:1d:99:b6:ed:5a:98:c0:18:
84:7f:bf:8e:53:3c:71:91:d0:26:c8:08:2b:31:b8:
2a:fa:e7:51:80:b8:4f:c5:73:a0:12:38:2b:37:b4:
6f:d5:01:91:18:1c:ff:e7:f0:17:95:b5:1c:74:c3:
a1:db:d4:d5:a3:1c:f6:03:1a:f3:79:7a:49:f8:87:
31:ee:4a:25:08:f1:7a:3b:ac:d3:a2:8b:f2:a2:a6:
42:c7:fb:b0:fe:e8:e7:81:82:ab:2d:a1:10:25:ed:
b4:f8:d9:39:a5:e8:fd:90:fe:7e:5e:2a:ce:8f:fe:
a3:98:67:e6:1b:35:b9:23:0a:f2:e5:f0:cc:46:b8:
a9:69:51:00:4a:c8:a7:7d:c9:68:e0:15:41:b7:ca:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:DC:ED:E5:3D:B5:BF:BC:65:FA:84:A0:9C:B6:E4:4D:39:B7:94
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b6:9c:7c:65:5a:5d:a5:30:2b:ed:ea:5d:fe:41:f6:b3:e2:
9f:41:4d:f0:af:79:d9:d2:8a:b3:2b:dd:65:a6:f3:e1:9a:4e:
1d:4d:ac:e1:ef:f7:06:3b:58:35:0d:0f:74:6e:32:7a:bf:00:
f4:6b:9f:b4:a0:d5:5e:45:83:99:2e:0a:66:d1:3b:d6:00:44:
4d:5f:8b:11:0b:35:6f:e3:01:72:83:d0:c1:87:a2:ba:74:62:
da:83:cf:34:71:15:fb:45:9b:16:38:70:f1:c3:6c:29:6e:0e:
18:67:fb:31:a2:4e:33:4e:cb:30:07:57:4c:e3:55:31:3e:3f:
cd:7f:ab:8f:03:ff:26:b2:01:75:02:58:e0:0b:4f:55:05:76:
72:81:a0:8b:21:b2:f8:4f:fb:2f:14:8c:5c:8d:19:df:42:11:
72:79:18:f3:db:e4:47:07:f7:ca:86:e6:cd:ae:8a:ef:21:41:
2f:72:02:47:28:24:28:3b:7d:45:9c:32:aa:a2:88:15:7f:77:
47:f2:cd:a1:40:dc:32:1c:ef:2b:47:b1:20:4c:e2:7f:ea:e6:
36:d1:bc:a8:e3:48:82:42:d6:08:6a:e9:a1:2d:76:27:a7:a0:
64:45:b4:a0:dd:0f:67:cc:12:7a:51:4d:36:bb:a3:36:78:57:
0f:91:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:15 2025 by rpki-client