Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
File: U1hROBB5ZcOJ82e1Wr15K1Meuco.mft (raw, json)
Hash identifier: fU7W41V6fEGlJpNtAZ15yWOWayuqqffbmGOoOA4DI14=
Subject key identifier: 67:74:CE:20:59:DB:2B:38:2D:2C:EC:E2:A3:45:7E:A8:C8:48:65:E8
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial: 019A530805DF85BAAB0BA1DBE8EC61809F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
Manifest number: 07F9
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: 9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa (hash: LLXaZp76DD3QRRqXxKgWM7+FKfHGkvTdFTOznhul5ME=)
2: U1hROBB5ZcOJ82e1Wr15K1Meuco.crl (hash: GL5e2nC7kMWd72blRMrRnWeNY4wltdQM/N8ZW0mrMpM=)
3: trR0gOkOqLM9i33P9z5lDKAYVLA.roa (hash: yYJpYO73PDxpmBJL0VJQpTeNGi0zNN4BxZzYljkZajw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:05:df:85:ba:ab:0b:a1:db:e8:ec:61:80:9f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=6774ce2059db2b382d2cece2a3457ea8c84865e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:ad:61:27:88:6f:73:75:d0:29:11:5b:ce:
85:49:99:85:43:c0:ae:71:2a:d3:04:32:37:47:b1:
59:74:c4:18:ed:22:5b:13:c3:57:02:48:00:43:46:
0d:cf:ef:ec:b2:8d:f2:44:d4:66:42:5e:94:61:a2:
52:c8:4e:27:3c:d4:51:38:b6:c8:19:21:6d:e6:43:
e9:92:47:08:35:b7:e6:2f:ca:a6:d8:96:aa:25:dd:
78:8b:14:df:70:12:f5:60:e8:00:0c:c3:97:b4:13:
13:0b:90:cb:a2:f3:d5:4a:a4:db:e4:9f:00:0f:dc:
23:84:88:84:ed:44:cb:a9:fc:40:10:26:4b:aa:74:
54:e1:d2:37:39:f5:06:1b:c3:12:b7:70:cd:c1:61:
c3:a1:54:96:43:6f:d9:1e:f1:be:eb:25:cb:06:76:
89:c4:02:2c:dd:d8:24:c0:4d:0d:cd:c9:76:1e:3e:
7b:36:41:df:76:b8:f2:83:4d:77:0c:b2:2d:8f:0e:
82:17:4a:ac:70:2a:57:fb:a6:c8:1a:2b:24:da:4c:
e1:7e:50:71:ab:4a:6a:8a:42:a6:76:4c:67:9c:3a:
61:db:2d:fe:28:66:54:15:35:59:6d:31:aa:fe:4b:
c9:ff:93:27:1d:a8:b3:1f:a6:1e:7e:87:a3:e1:77:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:CE:20:59:DB:2B:38:2D:2C:EC:E2:A3:45:7E:A8:C8:48:65:E8
X509v3 Authority Key Identifier:
keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:42:3d:41:cc:74:7a:b4:8a:b1:7f:f3:c7:ae:3c:0e:19:
8c:dc:a3:dc:67:8d:5a:a2:f3:a9:cd:c8:7a:2b:b1:ee:8e:2e:
63:ed:0b:ce:ee:a5:d7:54:2a:90:ba:7d:3a:58:24:b8:c2:95:
03:a4:42:1c:8c:7b:d6:ae:fa:22:69:da:06:23:e0:3d:ac:39:
27:d6:65:23:c8:63:8e:a5:80:da:e3:80:4d:fb:34:c7:02:ce:
1f:95:17:32:43:ea:f2:79:f8:f3:08:e8:24:fc:0d:81:24:0a:
0d:49:f9:d0:c8:40:3a:0d:1b:d9:8d:d3:f7:4d:8c:cd:2e:6d:
ae:8c:99:73:15:6a:8d:b9:02:c2:75:e0:20:9f:82:d8:e0:bb:
64:dd:d9:4f:b9:c1:1e:1a:04:0b:cf:bf:6f:d8:0d:ed:25:77:
aa:19:cb:29:bd:31:20:12:da:d3:b0:20:bf:5a:81:38:84:a9:
46:46:42:be:20:bc:a6:df:c3:c8:be:c1:86:d4:8d:3f:4d:91:
95:3e:95:fd:3d:5b:a0:8b:5a:b4:1b:69:df:79:c1:e0:82:28:
84:d6:32:bb:c1:a2:77:86:97:bb:db:84:a5:c1:3d:41:0b:1c:
aa:8a:bc:ba:c7:e9:f0:8b:e1:3c:39:ce:67:16:33:8b:d7:db:
6c:03:aa:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCAXfhbqrC6Hb6OxhgJ+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx
ZWI5Y2EwHhcNMjUxMTA1MDgwMDI1WhcNMjUxMTA2MDgwMDI1WjAzMTEwLwYDVQQD
Eyg2Nzc0Y2UyMDU5ZGIyYjM4MmQyY2VjZTJhMzQ1N2VhOGM4NDg2NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P+tYSeIb3N10CkRW86FSZmFQ8Cu
cSrTBDI3R7FZdMQY7SJbE8NXAkgAQ0YNz+/sso3yRNRmQl6UYaJSyE4nPNRROLbI
GSFt5kPpkkcINbfmL8qm2JaqJd14ixTfcBL1YOgADMOXtBMTC5DLovPVSqTb5J8A
D9wjhIiE7UTLqfxAECZLqnRU4dI3OfUGG8MSt3DNwWHDoVSWQ2/ZHvG+6yXLBnaJ
xAIs3dgkwE0Nzcl2Hj57NkHfdrjyg013DLItjw6CF0qscCpX+6bIGisk2kzhflBx
q0pqikKmdkxnnDph2y3+KGZUFTVZbTGq/kvJ/5MnHaizH6Yefoej4XdcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd0ziBZ2ys4LSzs4qNFfqjISGXoMB8GA1UdIwQY
MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt
MTg1MGZmZjA0NDI1LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1
LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgVCPUHM
dHq0irF/88euPA4ZjNyj3GeNWqLzqc3Ieiux7o4uY+0Lzu6l11QqkLp9OlgkuMKV
A6RCHIx71q76ImnaBiPgPaw5J9ZlI8hjjqWA2uOATfs0xwLOH5UXMkPq8nn48wjo
JPwNgSQKDUn50MhAOg0b2Y3T902MzS5troyZcxVqjbkCwnXgIJ+C2OC7ZN3ZT7nB
HhoEC8+/b9gN7SV3qhnLKb0xIBLa07Agv1qBOISpRkZCviC8pt/DyL7BhtSNP02R
lT6V/T1boItatBtp33nB4IIohNYyu8Gid4aXu9uEpcE9QQscqoq8usfp8IvhPDnO
ZxYzi9fbbAOqjA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:03 2025 by rpki-client