Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: v60F5ULX4Iz/WQ6D+x8lu7+ak5jsscLpTKl1fDLx3g8=
Subject key identifier: EC:20:B3:99:9E:61:D0:D4:CF:21:F0:BD:6D:69:5E:BF:EB:49:0D:21
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019A01B646E5BC79EFD6CA31E5CED2B74278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:01:54 +0000
Manifest this update: Mon 20 Oct 2025 13:01:54 +0000
Manifest next update: Tue 21 Oct 2025 13:01:54 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: XcKh8DyXOe2jTNd/qTkmFv2X6hfRzDXpPH84agOXu00=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:46:e5:bc:79:ef:d6:ca:31:e5:ce:d2:b7:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Oct 20 13:01:54 2025 GMT
Not After : Oct 21 13:01:54 2025 GMT
Subject: CN=ec20b3999e61d0d4cf21f0bd6d695ebfeb490d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:16:06:f3:16:a7:2c:5e:00:f7:15:09:d7:
f1:39:c5:5f:71:98:89:f7:ab:3e:c2:91:60:80:c4:
ec:07:5c:d2:f2:dc:e5:a4:14:cc:1c:55:49:5a:ee:
71:30:a2:28:61:62:16:86:a0:cc:cd:3a:3e:c4:2b:
ba:f5:37:a7:22:1f:57:f8:f7:a7:da:e8:6b:9f:9e:
01:a0:37:ac:9a:51:00:f4:3b:af:4d:52:4e:6f:5f:
21:52:d0:4c:44:9f:de:15:20:2c:3f:e3:51:67:dd:
b5:ee:5f:c2:aa:1c:d7:86:37:52:7f:14:78:77:f5:
78:7a:c1:33:0b:c2:94:91:d1:54:d1:26:30:32:b3:
97:76:74:9e:df:17:b6:50:d7:e6:e8:70:d9:cc:f6:
bc:fb:7e:8d:73:57:e1:61:6c:7d:9c:de:ad:81:46:
a6:4a:3e:8a:13:ad:34:80:8a:1c:1c:fa:9c:35:3b:
9d:5c:6a:d0:10:45:b1:32:75:73:e7:5f:76:9f:32:
ba:e8:47:a8:8c:b7:48:22:69:5c:64:03:82:69:83:
e3:fe:eb:69:34:e0:1a:3b:74:ac:48:70:34:bc:a9:
08:a0:04:1d:37:28:d3:c9:7c:06:98:10:65:73:58:
c2:a8:0e:6c:06:30:95:ce:ca:30:67:8b:d1:c6:85:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:B3:99:9E:61:D0:D4:CF:21:F0:BD:6D:69:5E:BF:EB:49:0D:21
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c2:15:e5:df:ab:87:dd:24:e3:f1:05:d0:aa:e5:4f:50:0c:
b3:13:29:1f:b1:01:aa:a5:00:d4:c5:67:7b:8b:35:98:a7:0a:
f6:87:99:c5:92:ba:a8:79:69:be:f4:11:e7:33:e9:e5:19:a9:
54:c6:e2:22:da:37:ff:5d:4e:ed:23:ef:0b:62:b7:dc:42:1b:
e0:80:fb:4c:11:b2:7e:ff:cf:94:37:50:73:85:41:06:45:ce:
7a:1e:63:ed:4c:99:bd:41:cf:31:9d:42:dd:1d:0c:e4:3c:3c:
a4:54:ec:34:71:a4:0d:70:df:90:5e:c5:86:57:c4:69:26:c6:
cc:15:61:97:a9:15:35:92:e2:c9:c7:83:8e:a5:0e:48:5e:d1:
09:63:ab:9a:40:f3:db:60:74:5e:b1:f4:08:c5:50:07:ed:a0:
ab:f6:f5:36:b8:aa:8b:f0:e2:ce:99:3c:cc:15:bf:03:64:3f:
d6:53:61:2f:ce:61:6d:6e:57:49:74:c7:40:66:a7:2d:08:5b:
f2:68:95:ad:bf:32:c5:0b:42:d4:d7:82:72:72:d1:00:06:62:
8a:2a:4e:7c:86:62:cf:9e:25:15:a6:e9:c0:af:83:46:ef:09:
fc:d6:fb:c7:11:59:52:39:ae:8e:64:e1:b7:dd:1c:a0:75:7b:
f8:7a:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:01 2025 by rpki-client