Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: tIy9qtyw/+UAQ2bPXPnRDAzn/XMrGvIVc8ujSGHjT/4=
Subject key identifier: 3B:F0:C0:DB:12:0E:BF:C6:90:76:98:D3:08:8C:6F:1C:8A:4D:8B:25
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019A511978E0804B39F08052CFB50A487E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0E37
Signing time: Tue 04 Nov 2025 23:00:15 +0000
Manifest this update: Tue 04 Nov 2025 23:00:15 +0000
Manifest next update: Wed 05 Nov 2025 23:00:15 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: bOHDuyd4zHVr/ENRNggitwD+N6PMAJUD7dYg8R8ZmhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:78:e0:80:4b:39:f0:80:52:cf:b5:0a:48:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Nov 4 23:00:15 2025 GMT
Not After : Nov 5 23:00:15 2025 GMT
Subject: CN=3bf0c0db120ebfc6907698d3088c6f1c8a4d8b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:57:f5:ed:6b:b5:4e:02:8f:49:ee:8a:2d:
ce:7c:5f:24:8e:ec:b3:87:1a:44:54:df:86:e3:08:
f7:2d:f3:71:2a:3e:38:bb:6c:00:11:5d:fb:7e:c9:
3a:80:1b:01:2a:82:06:4e:d9:b9:1b:8f:86:6c:e6:
f3:2d:b5:b0:7e:0b:3b:1d:6c:45:ce:28:cc:a0:e7:
97:c5:1e:f1:5a:bf:60:c7:ae:98:75:39:a8:3b:8c:
2f:50:e5:c3:a0:9c:07:e7:ee:13:92:e9:90:7e:f7:
e0:88:ae:dc:c2:ff:19:78:3e:df:43:34:84:75:0e:
99:54:b0:0c:2f:07:47:69:23:31:38:4f:05:83:f8:
84:ab:c8:fc:6d:c0:f3:65:94:8f:01:61:ab:63:8e:
2b:7f:b5:f3:36:f8:0e:17:fa:f4:97:f5:19:38:c3:
fa:94:5b:12:00:b9:0f:10:88:c9:bf:03:45:59:8f:
85:c6:64:a2:ad:bc:5e:ac:ea:99:7e:4b:cc:73:b4:
19:59:a9:d7:95:8b:ce:f3:ce:4f:67:5b:fe:f0:6c:
81:f0:4a:0e:8b:ee:f2:9f:ca:b9:d5:0b:47:69:b7:
65:c2:80:e4:75:61:ae:2b:25:f9:7c:c7:c9:ee:94:
30:1f:98:a7:45:e4:37:a4:e7:73:d7:74:f4:90:e8:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:C0:DB:12:0E:BF:C6:90:76:98:D3:08:8C:6F:1C:8A:4D:8B:25
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:fc:e0:21:55:f1:ee:c2:47:51:d9:8a:79:b0:d3:89:dc:
25:33:74:69:95:fa:53:18:d9:eb:fd:3e:d3:da:a9:01:01:55:
43:ec:d6:1a:74:40:79:ca:59:c1:76:35:4a:06:be:cb:16:7a:
cf:11:67:2e:4c:bf:2d:24:e7:a8:e9:d6:a7:e0:3f:86:76:40:
58:be:d0:11:c6:77:a5:0a:bc:64:c3:85:72:9e:21:32:1e:01:
a5:40:97:d2:b3:e4:99:25:95:30:cd:a5:a8:5e:d6:4b:cc:c0:
17:9a:d0:92:7c:1f:e5:39:49:22:af:a4:ff:aa:12:85:df:d8:
51:5f:4f:80:c5:ab:8e:56:68:8a:10:8d:2f:04:37:7e:ad:9f:
ec:41:56:cc:e8:48:25:2b:08:df:d7:a6:b7:2e:93:b8:80:6f:
59:30:6f:5e:fb:82:39:5f:61:be:16:8a:7d:33:30:4e:8f:d5:
b7:32:c1:f7:f9:39:07:95:47:97:6b:d6:72:c8:a2:bb:18:7f:
ec:76:ef:17:3b:75:5f:29:7d:d1:6c:6c:22:45:81:58:a0:bf:
62:ba:72:50:f8:0b:3d:9d:f2:54:a5:14:8b:3a:03:53:0d:59:
bb:a9:89:5f:fa:cc:87:c3:23:83:63:64:41:8c:4e:84:93:d6:
86:b4:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:37 2025 by rpki-client