Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File: ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier: RGyI4tV3K9FjCOGR2T/HxwgRgJtcANGhbqIbtqIzoSQ=
Subject key identifier: 74:A6:C0:A5:86:5E:93:3A:7E:C2:3D:69:E2:ED:38:19:1D:AD:59:92
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial: 019A73A68C91B1E39FC96E5A3D3C3F7BF424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number: 05AD
Signing time: Tue 11 Nov 2025 16:01:25 +0000
Manifest this update: Tue 11 Nov 2025 16:01:25 +0000
Manifest next update: Wed 12 Nov 2025 16:01:25 +0000
Files and hashes: 1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: BH9Y1ovqlkReQOFc59ux5i5OI7XmFRfl3EudKM0rJ2g=)
2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:8c:91:b1:e3:9f:c9:6e:5a:3d:3c:3f:7b:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Validity
Not Before: Nov 11 16:01:25 2025 GMT
Not After : Nov 12 16:01:25 2025 GMT
Subject: CN=74a6c0a5865e933a7ec23d69e2ed38191dad5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:71:26:1a:d7:f6:e9:df:b6:24:1e:71:22:
98:f5:a2:83:f6:e3:18:91:9f:7e:3f:f5:8e:8b:50:
45:5a:87:8a:f4:4b:ca:20:28:2d:ee:9b:f5:0f:11:
0f:2d:45:df:e0:0e:bf:41:bd:34:69:4b:24:43:54:
50:5a:38:a4:52:dd:6f:eb:cd:48:bb:e7:7e:5c:e1:
7a:a1:f7:e5:e1:ce:7a:fd:8b:62:a2:c3:59:b6:dc:
0e:5a:d8:81:08:f0:02:ab:84:70:a8:d2:21:b9:a0:
32:8a:8b:c0:99:1e:ea:2c:5e:75:64:e4:8d:cb:3d:
dc:4a:dd:f5:b2:8b:b0:87:25:f3:18:7c:89:94:57:
ed:34:d0:d1:bc:a6:3a:b3:83:2f:91:9d:41:87:81:
cd:38:68:9b:4c:86:6e:7a:8b:3d:6f:24:1c:75:82:
88:62:51:4b:fb:79:84:1c:bb:a2:d3:ed:0a:7a:ed:
ff:8c:22:53:42:05:b5:a7:67:c5:99:fd:58:fa:16:
17:da:97:8a:35:ef:bd:fc:4e:04:9b:25:7b:32:cd:
81:2b:9f:18:d0:ef:0b:a4:6d:ad:47:f2:f3:c6:35:
f9:71:88:44:ff:a3:f3:22:1b:fc:3d:87:aa:81:d8:
25:12:64:3a:f5:29:36:f5:85:f5:d2:e1:6c:50:01:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:C0:A5:86:5E:93:3A:7E:C2:3D:69:E2:ED:38:19:1D:AD:59:92
X509v3 Authority Key Identifier:
keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:85:8d:de:1b:33:67:8b:77:25:5b:01:78:bc:12:03:2e:
70:df:fc:e2:82:e6:bd:b7:39:02:5c:04:a8:9e:25:9c:26:e6:
c1:55:ee:b2:ee:75:15:aa:0f:f2:a2:47:50:b6:2c:ea:00:48:
48:2a:6e:9c:6a:bb:ee:41:40:d1:2c:2d:08:95:dc:9f:75:ab:
d9:17:84:3b:52:45:08:75:76:ef:0b:52:3f:54:0a:5b:0b:0e:
1d:eb:25:53:92:3a:55:f2:c9:a3:d1:40:c5:42:70:a2:72:bc:
cf:42:40:c4:be:3f:ad:bb:0e:d8:79:da:c0:37:04:24:e5:fb:
9c:b4:33:be:39:b2:8a:11:b6:33:b9:b8:89:23:27:0d:97:09:
41:c3:47:b5:85:f0:38:15:50:59:7e:2a:22:97:eb:dd:9b:58:
95:fe:e2:46:f7:4b:e9:fc:73:59:67:93:97:cd:d7:94:9f:58:
c4:66:51:a6:e8:a6:86:92:dd:ea:2a:cc:33:e8:04:a3:ca:fb:
99:d9:a9:bc:0b:d8:a6:a5:57:a7:0a:88:52:bc:38:d9:6a:09:
7c:5f:c2:52:41:2b:19:30:8f:02:82:fd:b4:8f:83:09:91:6f:
e6:e9:8e:41:97:9b:f8:2b:c2:c9:3c:8d:27:b7:17:18:8e:fc:
7c:04:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client