Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: XyvFGBdhPG/cGoWJem3cEkI9RUEhszvZlle+6c2shik=
Subject key identifier: 39:43:0D:27:12:2A:EF:96:9B:7D:D0:3C:A5:FA:11:73:B1:F4:CD:EC
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0199FFFE2BC78474702BE35C710B83569C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0E0D
Signing time: Mon 20 Oct 2025 05:01:11 +0000
Manifest this update: Mon 20 Oct 2025 05:01:11 +0000
Manifest next update: Tue 21 Oct 2025 05:01:11 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: SCCn3ZjYVaTdirGnW8JhXquj5di5xJLdKUs74ccipbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:2b:c7:84:74:70:2b:e3:5c:71:0b:83:56:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Oct 20 05:01:11 2025 GMT
Not After : Oct 21 05:01:11 2025 GMT
Subject: CN=39430d27122aef969b7dd03ca5fa1173b1f4cdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:db:8b:16:9a:82:fc:85:61:36:ae:c4:45:
02:77:89:e3:47:df:90:a9:9e:9e:f3:aa:5c:e0:53:
76:84:a2:9a:47:c0:13:bb:06:e1:1f:93:9b:dd:85:
87:66:f7:00:36:95:4a:54:15:dc:86:7d:12:92:4b:
22:9d:3e:78:05:b8:39:be:f9:c6:c0:61:65:5c:40:
1d:36:8e:c5:06:b8:9b:13:b4:6c:4c:10:54:1b:c0:
2a:fd:17:c6:7a:28:cb:8d:7e:3f:89:3d:4a:0c:8c:
2f:78:bb:0a:f1:57:40:b6:ab:83:e1:dd:f2:06:d9:
f7:08:c8:3e:32:3a:31:f0:49:a4:5f:09:0d:0e:fe:
3b:24:82:a3:da:96:bb:bc:15:c5:59:74:83:bd:87:
83:a1:33:d7:b7:47:c6:f0:b5:b3:d1:b8:4d:09:e1:
41:d3:ca:68:40:7f:47:67:38:8b:7b:11:8b:5a:af:
0c:f4:a7:af:bd:f3:18:03:50:c4:e2:c0:82:4f:c6:
a8:e2:b0:c0:ac:78:96:e3:6c:ee:1b:86:f8:eb:c1:
68:d7:19:ac:62:a5:35:ed:98:3f:de:ac:dd:50:72:
d5:a5:34:f6:ac:c7:e6:49:52:e4:b5:7a:96:a7:3a:
d5:0f:0f:ef:83:e1:13:6d:ec:25:62:2f:27:76:92:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:0D:27:12:2A:EF:96:9B:7D:D0:3C:A5:FA:11:73:B1:F4:CD:EC
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:d1:5b:cf:19:ae:f7:9a:9e:c9:9c:53:d9:94:e5:ed:26:
1d:87:39:6d:a7:c4:00:f8:cd:6f:6c:d1:49:03:0f:a2:73:92:
6d:9b:6d:17:7c:28:11:0a:a2:57:60:8e:cf:76:ac:e0:25:92:
82:bf:a1:b0:58:00:35:25:31:97:fd:fb:75:45:3c:b0:53:9c:
bd:6f:7d:b2:f3:36:61:2c:35:38:0b:3e:6f:30:e8:e4:6a:ce:
ba:55:53:64:58:fd:da:51:a2:87:fc:a0:8a:60:cd:77:a5:95:
c7:ee:0e:3d:a1:60:f6:40:0e:01:9f:c3:98:ad:2b:3f:28:47:
a1:c9:2d:3b:4d:04:99:fe:ae:56:5e:16:7a:e5:2b:7a:1a:8a:
67:7b:21:0d:4c:5f:84:db:ef:9e:83:24:3b:4b:7c:a4:af:b4:
7f:33:d7:cd:6f:bd:1e:95:97:db:8b:1f:8a:d6:c3:09:69:9b:
3f:b8:e4:54:f7:a0:75:c8:ea:fc:b4:99:3c:b6:d4:f7:23:f4:
00:3b:cb:7b:ea:f3:ce:e8:8f:4a:6c:50:8d:e5:99:36:12:49:
83:e8:87:5a:d8:f5:58:37:79:c8:03:c7:e0:78:0c:66:31:5b:
c7:6e:1f:a4:fe:a1:17:51:82:07:96:01:5a:b1:72:99:f8:6d:
52:44:9a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//ivHhHRwK+NccQuDVpwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjUxMDIwMDUwMTExWhcNMjUxMDIxMDUwMTExWjAzMTEwLwYDVQQD
EygzOTQzMGQyNzEyMmFlZjk2OWI3ZGQwM2NhNWZhMTE3M2IxZjRjZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHbixaagvyFYTauxEUCd4njR9+Q
qZ6e86pc4FN2hKKaR8ATuwbhH5Ob3YWHZvcANpVKVBXchn0SkksinT54Bbg5vvnG
wGFlXEAdNo7FBribE7RsTBBUG8Aq/RfGeijLjX4/iT1KDIwveLsK8VdAtquD4d3y
Btn3CMg+Mjox8EmkXwkNDv47JIKj2pa7vBXFWXSDvYeDoTPXt0fG8LWz0bhNCeFB
08poQH9HZziLexGLWq8M9KevvfMYA1DE4sCCT8ao4rDArHiW42zuG4b468Fo1xms
YqU17Zg/3qzdUHLVpTT2rMfmSVLktXqWpzrVDw/vg+ETbewlYi8ndpIYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlDDScSKu+Wm33QPKX6EXOx9M3sMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlPRW88Z
rveansmcU9mU5e0mHYc5bafEAPjNb2zRSQMPonOSbZttF3woEQqiV2COz3as4CWS
gr+hsFgANSUxl/37dUU8sFOcvW99svM2YSw1OAs+bzDo5GrOulVTZFj92lGih/yg
imDNd6WVx+4OPaFg9kAOAZ/DmK0rPyhHocktO00Emf6uVl4WeuUrehqKZ3shDUxf
hNvvnoMkO0t8pK+0fzPXzW+9HpWX24sfitbDCWmbP7jkVPegdcjq/LSZPLbU9yP0
ADvLe+rzzuiPSmxQjeWZNhJJg+iHWtj1WDd5yAPH4HgMZjFbx24fpP6hF1GCB5YB
WrFymfhtUkSaTA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:55:41 2025 by rpki-client