Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: HtMG51Q1ca2T2SQXpvrFkpDQ9EgM1Pfh8aEnSUC7qNw=
Subject key identifier: DA:15:0E:F2:DE:3B:BF:FD:72:2A:F3:87:ED:B6:1D:40:23:4D:78:96
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019A4E86B0F181A0AA9CBBCDBC4F70ADD625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: sLA0xV44Yi6l0lqpfgqA8Ff56ZlXCLX8CO7xA1+4OrA=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b0:f1:81:a0:aa:9c:bb:cd:bc:4f:70:ad:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=da150ef2de3bbffd722af387edb61d40234d7896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:30:8b:74:e0:44:03:1b:52:d1:c2:ec:3c:
30:75:a6:90:41:97:02:c2:74:9a:14:39:a5:73:88:
a7:b8:16:d7:df:7e:18:df:be:74:96:50:1d:68:0e:
b8:26:4c:26:a9:27:75:61:12:db:66:8b:7c:f3:73:
98:78:9e:32:a2:b6:d9:71:df:fc:83:d5:dc:8a:07:
fd:90:16:9c:97:c1:54:79:7c:9c:9c:81:d6:ea:ba:
f4:09:39:c9:11:14:b8:ff:a2:be:2e:4a:a6:ec:d1:
f6:93:6f:70:6a:df:02:7f:28:18:2e:30:b6:4a:c9:
ba:7f:1c:d8:1d:b7:32:96:76:6b:3a:03:8e:ef:5b:
49:34:8c:a5:39:8c:df:87:11:00:08:76:9c:47:dc:
10:cf:be:e5:6e:b9:2d:a9:42:8d:e7:87:75:ab:ef:
92:f9:93:3b:52:a5:7f:d1:7a:04:95:27:40:e4:be:
e3:ea:72:12:96:62:08:5f:4c:8c:d9:a0:53:79:80:
76:48:d1:9c:7f:93:77:b3:48:ba:91:0a:65:90:69:
dc:68:94:52:aa:30:af:8a:a9:a0:e7:38:db:20:27:
58:8f:67:c5:89:9b:73:7e:c5:d8:0a:81:10:2f:74:
33:c4:b8:5d:4f:25:e9:a3:f0:df:2c:fa:1f:8b:0c:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:0E:F2:DE:3B:BF:FD:72:2A:F3:87:ED:B6:1D:40:23:4D:78:96
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:b9:4c:69:a7:fb:66:11:0e:5d:c7:0d:a1:94:a6:7f:a4:
34:8f:95:11:c7:f1:48:cd:77:74:f6:17:ff:4f:b8:f9:49:97:
35:1b:0c:91:a0:c7:30:05:cd:e6:e2:2f:65:44:eb:b0:7a:ca:
28:40:b9:8a:e5:b5:aa:f2:6b:ab:b7:5b:e8:4c:1c:da:6c:b5:
85:37:88:29:1f:6b:2f:20:df:2e:8e:06:5c:34:20:d2:62:b7:
a9:72:12:c0:4d:33:1c:06:30:cf:52:e3:17:e7:4f:23:7c:1e:
b8:fe:01:e7:bc:5f:7f:3b:fb:3e:23:4b:63:a7:2a:78:3b:0b:
b3:c4:3f:54:e1:b7:c5:0d:d4:5b:2f:24:c1:99:2d:c4:07:e0:
2f:1f:25:bf:e4:7a:0d:23:10:a5:93:e8:4a:4e:25:2d:75:8b:
06:76:94:80:a8:00:b4:f7:e6:b5:4d:1b:d7:96:0f:2b:a3:40:
b4:32:18:d9:37:97:1e:93:84:60:54:23:16:59:b8:03:51:0d:
f5:ec:00:d4:be:4f:83:22:2f:af:af:6b:a9:84:75:11:6d:b0:
68:e9:2b:1f:fe:b3:46:c8:72:64:b4:5c:c9:bd:63:44:cf:7e:
95:33:5f:4a:7a:cf:56:bf:f5:38:7e:ec:f3:29:b6:64:e0:d5:
ec:6e:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:06 2025 by rpki-client