Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: tsK+lUJtAqskK4Yy28PQzRFuTOy+Z+DKcxZFhlZsZf8=
Subject key identifier: 74:8A:25:C2:0F:07:4C:78:A8:CD:00:E9:5F:C7:65:5E:C4:3B:17:48
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019A714A2D96731872F67C41402F8B945699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 160D
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: hl5wcuQo/v8C5tzwDiDwHVrFNdnlKTpguGcZzwBgBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2d:96:73:18:72:f6:7c:41:40:2f:8b:94:56:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=748a25c20f074c78a8cd00e95fc7655ec43b1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:52:cf:eb:55:b0:e1:7c:83:31:58:07:78:
fd:de:02:09:85:b3:96:e1:94:32:58:ec:33:e3:25:
67:2b:95:5e:71:0d:d3:b2:ba:05:e1:e4:37:ba:37:
f7:76:f3:0a:2e:a3:b4:c7:91:0a:6e:7e:0a:3b:b8:
c3:f8:17:14:9c:44:7b:c5:2f:90:ad:fe:75:bd:e1:
6a:c5:aa:e6:14:37:a9:8e:49:ac:5a:ce:9d:91:7e:
c4:1a:d3:00:2f:e3:67:60:6c:99:90:81:34:ad:61:
de:df:8e:6f:78:32:b5:d5:79:dd:ca:22:df:a7:02:
fb:c9:ba:62:f8:9f:70:fb:05:ed:4b:cd:53:dd:41:
07:09:2e:9e:35:11:05:5e:09:7e:04:7e:4d:86:22:
74:07:bc:27:46:53:3a:30:2a:c2:91:0e:1e:87:0b:
f1:cf:b5:f6:af:4a:c8:a7:03:7c:77:94:eb:70:81:
b0:ac:34:f9:03:fe:c3:e9:67:4b:77:7d:2d:b4:fc:
e2:80:ea:94:ed:03:ca:d4:a6:a4:29:a5:ae:a1:f2:
f3:86:ed:b3:47:4c:9c:97:32:32:6f:c0:91:be:50:
b5:89:15:6b:0e:a6:39:24:44:51:15:8c:9a:24:9b:
f5:e2:5f:73:bb:8b:44:ef:b7:a8:ee:af:3f:3e:ad:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:25:C2:0F:07:4C:78:A8:CD:00:E9:5F:C7:65:5E:C4:3B:17:48
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:59:39:88:1c:5c:7f:6d:91:e1:67:ad:a7:08:c1:e1:b9:
7d:0b:4e:fd:05:de:85:92:06:52:c4:a5:f6:18:49:85:c2:18:
10:26:a3:23:43:40:55:56:1c:45:bb:21:52:65:6f:fd:bd:f8:
8b:54:7a:57:b8:92:7d:0c:78:65:14:ae:32:28:07:56:c1:fc:
9a:d0:be:cb:89:23:8f:3c:3c:2f:d0:fd:f1:ea:3f:f8:08:26:
12:69:38:6d:d2:de:99:9b:0e:5e:2b:99:5f:2e:b4:46:0c:92:
e0:83:8c:e3:1c:02:38:34:0a:a5:82:60:33:de:5b:7e:95:4d:
7d:5a:b6:ca:a9:b2:6a:64:27:64:f7:ff:90:18:40:9a:66:ab:
e5:99:40:02:77:46:33:7c:1c:91:65:5e:0a:00:c2:16:40:12:
72:c0:9e:8e:80:bd:90:2b:92:38:83:e5:9f:0a:23:28:7d:b0:
f4:12:ae:f1:0f:77:e4:e3:4f:fa:cf:0a:73:ef:c4:9b:2a:6d:
68:db:35:16:53:82:bd:65:57:57:24:ec:06:b8:cb:fd:a1:77:
be:e6:49:69:3c:42:31:84:7a:c5:fe:5a:c8:b4:00:9c:97:cf:
37:f9:44:01:c9:19:e5:64:32:10:19:c9:2d:56:c8:5c:81:a2:
11:a6:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:17 2025 by rpki-client