Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: g9apoQMh6BxlTYbs+d+fXSSgmvZEcDBUh8Z4YGXbd4I=
Subject key identifier: 1E:95:D7:B1:73:08:8A:72:3B:F5:FC:BD:4B:36:FB:6B:DF:51:54:23
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019A73382B3845CBF07519992BD4D1FCBAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:00:52 +0000
Manifest this update: Tue 11 Nov 2025 14:00:52 +0000
Manifest next update: Wed 12 Nov 2025 14:00:52 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: ai2tlqlvpoT6v7wXQQEAz8WAAgGalc/cfgF9q8auVvI=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2b:38:45:cb:f0:75:19:99:2b:d4:d1:fc:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Nov 11 14:00:52 2025 GMT
Not After : Nov 12 14:00:52 2025 GMT
Subject: CN=1e95d7b173088a723bf5fcbd4b36fb6bdf515423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:77:3b:b2:ae:98:e5:ec:6c:54:6b:ad:56:
d8:3a:2d:8a:b8:60:ff:98:ae:aa:3d:ba:cc:74:40:
db:0d:75:dc:99:96:c3:eb:8b:b3:81:d4:29:e6:57:
91:f8:1d:10:89:db:53:58:21:f1:fe:c7:ca:b4:7f:
52:57:1b:52:0e:13:cf:d6:99:d5:9a:3e:d0:68:27:
b5:cb:87:12:48:ad:75:f5:2a:80:29:60:3d:ac:5a:
50:f6:47:db:44:5c:bc:7a:57:93:5f:d4:35:81:7d:
a4:cf:2e:8f:3e:14:1d:47:e3:79:bd:ac:13:48:cc:
25:96:4a:f7:53:c9:a0:ab:7a:d8:c6:b0:d7:3a:d9:
30:14:40:42:91:70:ae:9c:f8:b8:41:bf:fc:17:3c:
3c:be:95:83:13:66:c6:c1:7d:8e:91:97:7d:e5:ad:
b4:d3:8c:f6:91:e5:23:0e:d0:66:0d:ae:ed:72:de:
83:7c:c6:c5:a6:0f:70:fb:5e:5c:e2:8a:30:3b:69:
9a:ba:e3:d3:da:3d:b0:2c:27:b1:8a:b1:0e:1b:64:
2d:b5:1c:e9:a6:96:b5:ac:d8:68:0d:e2:e7:ce:5c:
e8:95:66:8f:6e:4e:15:fc:55:08:c8:86:34:47:bc:
23:79:43:41:44:e0:f6:57:3f:4f:0d:08:3b:3e:95:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:D7:B1:73:08:8A:72:3B:F5:FC:BD:4B:36:FB:6B:DF:51:54:23
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:01:11:17:b3:0b:09:cb:01:ce:be:e3:23:70:77:96:65:07:
45:6f:e7:0c:1c:2a:6b:cb:e0:c6:c0:69:46:55:83:c8:9b:28:
58:45:b1:f3:1b:f0:7d:04:15:32:f6:35:4f:16:c8:8b:da:e3:
3f:cd:49:fb:52:04:d4:f2:4a:19:6e:f9:f7:a6:ee:26:21:6b:
b6:4e:e2:73:94:7d:f1:36:b8:e5:4e:c3:fa:39:56:f0:35:07:
35:1a:7e:1a:63:b6:2a:03:0b:57:50:6c:d8:67:21:25:99:9e:
56:81:38:75:0e:a2:8e:f7:c9:d5:57:c8:6e:1a:00:38:e0:ce:
5b:54:b4:2f:66:ae:ed:94:14:f3:d0:1e:36:de:d9:87:9f:2c:
40:ba:2e:cc:46:1b:a9:2e:3c:4f:59:3a:75:1f:5b:a8:57:04:
ac:4a:2d:44:21:ac:d4:11:a8:76:7a:34:3c:8b:7c:b3:11:49:
86:ee:b3:a0:33:1a:6d:99:8d:df:1d:37:a2:25:25:eb:95:05:
0f:e7:b4:46:d3:1a:2b:4b:41:73:d4:ff:bc:df:16:bd:b4:17:
ef:cf:04:27:c2:44:2c:20:f0:47:79:61:0b:29:30:c9:55:d0:
b8:c7:d0:f0:d2:8c:1d:be:96:07:b2:53:cc:82:09:c5:81:98:
ca:42:ce:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOCs4RcvwdRmZK9TR/Lq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4
YjlhNzYwHhcNMjUxMTExMTQwMDUyWhcNMjUxMTEyMTQwMDUyWjAzMTEwLwYDVQQD
EygxZTk1ZDdiMTczMDg4YTcyM2JmNWZjYmQ0YjM2ZmI2YmRmNTE1NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMR3O7KumOXsbFRrrVbYOi2KuGD/
mK6qPbrMdEDbDXXcmZbD64uzgdQp5leR+B0QidtTWCHx/sfKtH9SVxtSDhPP1pnV
mj7QaCe1y4cSSK119SqAKWA9rFpQ9kfbRFy8eleTX9Q1gX2kzy6PPhQdR+N5vawT
SMwllkr3U8mgq3rYxrDXOtkwFEBCkXCunPi4Qb/8Fzw8vpWDE2bGwX2OkZd95a20
04z2keUjDtBmDa7tct6DfMbFpg9w+15c4oowO2mauuPT2j2wLCexirEOG2QttRzp
ppa1rNhoDeLnzlzolWaPbk4V/FUIyIY0R7wjeUNBROD2Vz9PDQg7PpUy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6V17FzCIpyO/X8vUs2+2vfUVQjMB8GA1UdIwQY
MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt
YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy
LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAERF7ML
CcsBzr7jI3B3lmUHRW/nDBwqa8vgxsBpRlWDyJsoWEWx8xvwfQQVMvY1TxbIi9rj
P81J+1IE1PJKGW7596buJiFrtk7ic5R98Ta45U7D+jlW8DUHNRp+GmO2KgMLV1Bs
2GchJZmeVoE4dQ6ijvfJ1VfIbhoAOODOW1S0L2au7ZQU89AeNt7Zh58sQLouzEYb
qS48T1k6dR9bqFcErEotRCGs1BGodno0PIt8sxFJhu6zoDMabZmN3x03oiUl65UF
D+e0RtMaK0tBc9T/vN8WvbQX788EJ8JELCDwR3lhCykwyVXQuMfQ8NKMHb6WB7JT
zIIJxYGYykLOIw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:09 2025 by rpki-client