Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier: ipdmWTFSJ8E98VnxtoDKNgaBlQIEnibmHH/Y6xn4DEg=
Subject key identifier: 1C:9B:92:AD:E6:C6:30:D4:ED:13:81:B8:ED:89:A1:78:0A:3F:C6:8E
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial: 019A70DC6EDC07EEB948201D935DF6DD0095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: sGDsApWvyyryU+qPjBXqxjlNqSnHJytGVaH+UICiiDo=)
2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6e:dc:07:ee:b9:48:20:1d:93:5d:f6:dd:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=1c9b92ade6c630d4ed1381b8ed89a1780a3fc68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:95:64:5a:13:90:f6:ce:ee:bb:a2:75:35:
72:9c:4f:45:9c:69:59:d0:96:78:d8:1a:b0:5e:67:
47:b2:e4:ed:74:75:37:0a:8e:c3:7d:38:49:3a:a2:
e4:78:31:77:f7:74:bf:88:13:b9:68:c8:a4:cd:28:
e1:ba:69:a8:5b:8a:2f:d4:ef:34:96:1a:3b:b6:b1:
26:74:b7:5c:9a:71:db:53:a4:6f:c1:5f:3c:a4:31:
be:f6:86:8b:46:6e:63:25:0a:ed:02:a9:1e:ca:69:
52:5c:1d:52:9d:d4:4a:45:40:4c:af:a5:84:4d:31:
f2:95:ab:ff:a4:0d:0a:0f:9a:08:bf:33:ff:63:da:
b4:d7:f2:1f:16:9e:3c:e0:7d:e6:a2:09:00:a3:89:
e0:37:73:b4:93:84:64:4d:9d:54:36:a8:fe:2e:55:
94:6d:da:22:0a:1c:5b:ac:40:9d:02:41:f7:82:9e:
48:d0:4e:cc:2b:cf:51:be:21:7e:d8:26:4f:c2:e7:
ba:62:0d:cb:b7:c3:83:bf:80:4a:2f:e8:e1:5c:a0:
3a:41:a1:47:18:3d:5d:5d:b8:5e:3b:5d:c2:2a:7a:
45:79:25:2d:2d:5e:29:96:be:b2:ff:d1:c5:c3:e7:
04:2d:cd:3c:01:4e:64:f6:a6:c1:24:57:05:8b:e7:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:92:AD:E6:C6:30:D4:ED:13:81:B8:ED:89:A1:78:0A:3F:C6:8E
X509v3 Authority Key Identifier:
keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:22:f2:86:30:6f:f9:99:e5:ea:6a:39:1d:88:8a:bd:38:
98:26:62:6b:1a:9e:41:e5:23:60:81:44:99:24:49:b0:e5:be:
82:72:62:b6:56:30:91:32:29:40:b9:18:55:96:98:bf:5b:f4:
db:87:08:c6:46:92:aa:33:84:15:92:f2:b0:c4:4a:fe:54:be:
f5:0c:6a:5a:38:5a:a4:57:14:c6:ba:d3:a9:3b:5e:d0:91:c6:
c7:ea:20:ba:35:76:c5:52:5c:99:6a:92:ea:c6:e8:76:07:d6:
27:26:55:3f:13:1e:da:cb:5d:cb:bd:56:51:a2:4e:81:59:d3:
ac:98:82:37:af:44:0c:cf:c7:df:bb:e1:06:01:16:e0:ac:24:
db:9b:84:18:f7:24:c8:4d:49:64:ac:c4:6b:bd:26:19:41:f2:
24:01:35:7f:22:5c:39:d6:39:13:49:3f:05:cf:1e:66:14:cc:
d9:56:b1:a7:31:fe:2b:45:c7:79:86:35:a4:f1:af:11:cf:c9:
3a:10:ef:56:50:e3:fb:cb:8b:fa:68:13:ab:9b:b9:15:15:08:
35:d2:35:01:c0:27:ac:c2:eb:af:49:ca:e1:71:51:d4:25:4e:
75:0a:19:85:36:39:32:bb:65:64:24:15:0c:d7:d5:c6:43:ee:
11:84:c1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3G7cB+65SCAdk1323QCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz
YWUxMmUwHhcNMjUxMTExMDMwMTI1WhcNMjUxMTEyMDMwMTI1WjAzMTEwLwYDVQQD
EygxYzliOTJhZGU2YzYzMGQ0ZWQxMzgxYjhlZDg5YTE3ODBhM2ZjNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cGVZFoTkPbO7ruidTVynE9FnGlZ
0JZ42BqwXmdHsuTtdHU3Co7DfThJOqLkeDF393S/iBO5aMikzSjhummoW4ov1O80
lho7trEmdLdcmnHbU6RvwV88pDG+9oaLRm5jJQrtAqkeymlSXB1SndRKRUBMr6WE
TTHylav/pA0KD5oIvzP/Y9q01/IfFp484H3mogkAo4ngN3O0k4RkTZ1UNqj+LlWU
bdoiChxbrECdAkH3gp5I0E7MK89RviF+2CZPwue6Yg3Lt8ODv4BKL+jhXKA6QaFH
GD1dXbheO13CKnpFeSUtLV4plr6y/9HFw+cELc08AU5k9qbBJFcFi+eFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBybkq3mxjDU7ROBuO2JoXgKP8aOMB8GA1UdIwQY
MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt
ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0
LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMki8oYw
b/mZ5epqOR2Iir04mCZiaxqeQeUjYIFEmSRJsOW+gnJitlYwkTIpQLkYVZaYv1v0
24cIxkaSqjOEFZLysMRK/lS+9QxqWjhapFcUxrrTqTte0JHGx+ogujV2xVJcmWqS
6sbodgfWJyZVPxMe2stdy71WUaJOgVnTrJiCN69EDM/H37vhBgEW4Kwk25uEGPck
yE1JZKzEa70mGUHyJAE1fyJcOdY5E0k/Bc8eZhTM2VaxpzH+K0XHeYY1pPGvEc/J
OhDvVlDj+8uL+mgTq5u5FRUINdI1AcAnrMLrr0nK4XFR1CVOdQoZhTY5MrtlZCQV
DNfVxkPuEYTBCw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client