Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: vfeTdte1gjJYkLT1AXqLdDP+999G0PtOsNXddsdS/y4=
Subject key identifier: 6C:82:6D:53:0D:65:F4:FE:58:07:8E:67:1E:6C:B4:17:8E:EC:6C:37
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 0199221E452BDE018051B08C4FBBA197B3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 03:00:33 +0000
Manifest this update: Sun 07 Sep 2025 03:00:33 +0000
Manifest next update: Mon 08 Sep 2025 03:00:33 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: NX+BPTniuTDj3YfFaY8XMVJSOqGnGmrhcR0DYWBnbUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:45:2b:de:01:80:51:b0:8c:4f:bb:a1:97:b3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Sep 7 03:00:33 2025 GMT
Not After : Sep 8 03:00:33 2025 GMT
Subject: CN=6c826d530d65f4fe58078e671e6cb4178eec6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:fc:65:9b:11:86:4a:85:9f:d1:8c:f7:87:
6a:e0:37:4a:68:0f:ee:8d:90:41:ad:f2:14:45:a4:
25:7d:eb:5e:20:86:3f:3d:3b:f3:bf:9d:b8:66:ca:
b7:a0:a2:90:f2:37:ba:a4:f7:98:ed:9f:f4:e2:01:
0e:42:6e:6d:52:56:90:11:1b:0c:5a:8d:fd:a5:b5:
ca:e1:0d:4c:f7:d9:9f:a0:7b:bb:d0:a2:b4:7e:35:
ba:33:dc:bc:a1:f4:d7:ea:81:b7:06:54:3f:51:71:
3f:38:0c:0b:a5:05:29:2a:68:21:38:2a:e2:1f:56:
83:75:89:93:93:c0:2f:b3:a6:36:5c:c8:33:dc:68:
4d:f4:b1:80:f3:4a:ab:f5:71:31:24:59:54:c2:81:
4a:24:fa:c6:44:4e:ad:04:6f:4a:f4:2e:9a:06:b8:
9d:ef:7d:b0:71:d8:7a:c8:95:02:d2:a3:2e:64:05:
cc:a2:4e:aa:72:3d:45:1d:f6:1a:21:b3:3c:a5:89:
3d:a6:11:b2:57:84:68:58:0b:1d:42:f4:5e:cd:fb:
f1:78:3d:5b:dc:e4:41:9c:98:1b:19:61:33:8a:09:
96:59:64:80:8a:44:27:ae:0f:42:c5:7f:e8:ce:98:
3f:9a:8f:3f:a1:3f:50:7b:02:b4:5f:f7:47:34:1b:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:6D:53:0D:65:F4:FE:58:07:8E:67:1E:6C:B4:17:8E:EC:6C:37
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:37:5d:10:16:dd:73:0c:08:0d:b0:1a:3b:bc:a5:b1:df:47:
af:90:76:31:6c:a7:92:d6:b4:f3:a7:8e:8c:0d:d0:7a:44:a8:
da:0f:c6:30:47:7c:53:b8:0e:de:b9:34:bf:f0:34:ca:f1:d4:
de:2a:c9:f9:02:c3:78:0b:e7:e1:ab:a4:f4:cd:a9:4c:c4:a2:
d0:05:9b:9c:cf:05:ff:21:37:a0:1f:90:17:3c:e8:b1:cc:29:
2e:5e:12:3f:4e:67:7e:3c:7a:4e:7f:e4:35:92:c6:98:cc:c2:
fd:42:a2:6b:1b:b9:e6:7a:a8:77:0f:c4:c7:ba:46:9c:f4:d7:
20:38:63:08:ec:9c:af:66:98:6e:4f:b8:eb:72:04:23:e7:2d:
15:eb:b3:b0:66:59:ee:ba:98:f4:7b:f5:cc:b3:24:cc:35:1c:
d1:e0:2b:16:0a:db:cd:2b:c0:e7:b1:6f:c5:e2:2c:08:44:e3:
ce:a5:89:b2:29:aa:52:ce:b3:dc:19:bb:e1:db:13:d1:ed:6a:
e7:f6:78:61:97:9e:5d:61:c6:1f:b4:c2:ef:23:ac:73:c8:28:
b2:e8:d7:f8:42:ba:6f:2d:28:49:06:6a:65:93:c7:3d:fc:b6:
1d:1e:e7:19:5f:e5:02:ad:dd:12:63:57:06:58:e2:a8:71:5d:
50:e6:83:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHkUr3gGAUbCMT7uhl7PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA1MmI3YTY3OGZhYTA5N2RjYmU2NTQ3MTcwYzkxNTJi
NDZjZjEwHhcNMjUwOTA3MDMwMDMzWhcNMjUwOTA4MDMwMDMzWjAzMTEwLwYDVQQD
Eyg2YzgyNmQ1MzBkNjVmNGZlNTgwNzhlNjcxZTZjYjQxNzhlZWM2YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS38ZZsRhkqFn9GM94dq4DdKaA/u
jZBBrfIURaQlfeteIIY/PTvzv524Zsq3oKKQ8je6pPeY7Z/04gEOQm5tUlaQERsM
Wo39pbXK4Q1M99mfoHu70KK0fjW6M9y8ofTX6oG3BlQ/UXE/OAwLpQUpKmghOCri
H1aDdYmTk8Avs6Y2XMgz3GhN9LGA80qr9XExJFlUwoFKJPrGRE6tBG9K9C6aBrid
732wcdh6yJUC0qMuZAXMok6qcj1FHfYaIbM8pYk9phGyV4RoWAsdQvRezfvxeD1b
3ORBnJgbGWEzigmWWWSAikQnrg9CxX/ozpg/mo8/oT9QewK0X/dHNBsFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyCbVMNZfT+WAeOZx5stBeO7Gw3MB8GA1UdIwQY
MBaAFDJQUremePqgl9y+ZUcXDJFStGzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxCU3Q2WjQtcUNYM0w1bFJ4Y01rVkswYlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yZmQwMjMtZTY0Ni00MDZhLTg0YTUt
YmI2OTQ1YTE2ZmU3LzEvTWxCU3Q2WjQtcUNYM0w1bFJ4Y01rVkswYlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yZmQwMjMtZTY0Ni00MDZhLTg0YTUtYmI2OTQ1YTE2ZmU3
LzEvTWxCU3Q2WjQtcUNYM0w1bFJ4Y01rVkswYlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjddEBbd
cwwIDbAaO7ylsd9Hr5B2MWynkta086eOjA3QekSo2g/GMEd8U7gO3rk0v/A0yvHU
3irJ+QLDeAvn4auk9M2pTMSi0AWbnM8F/yE3oB+QFzzoscwpLl4SP05nfjx6Tn/k
NZLGmMzC/UKiaxu55nqodw/Ex7pGnPTXIDhjCOycr2aYbk+463IEI+ctFeuzsGZZ
7rqY9Hv1zLMkzDUc0eArFgrbzSvA57FvxeIsCETjzqWJsimqUs6z3Bm74dsT0e1q
5/Z4YZeeXWHGH7TC7yOsc8gosujX+EK6by0oSQZqZZPHPfy2HR7nGV/lAq3dEmNX
BljiqHFdUOaDTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:20 2025 by rpki-client