Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: hgcOjN0LK+nJAn9xnphMCn1CThNc9tridk/095pFjf4=
Subject key identifier: FC:A1:3D:90:E9:1D:F6:92:2B:D3:05:B9:AE:C7:7D:51:3B:6A:78:7E
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 0198A12926CE8A888682B30A15B3A33FB33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 066B
Signing time: Wed 13 Aug 2025 02:01:25 +0000
Manifest this update: Wed 13 Aug 2025 02:01:25 +0000
Manifest next update: Thu 14 Aug 2025 02:01:25 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: 8K3AWlkqIyUY8Lot+sYzaC2XcoMZVicz5uWkjxWngxw=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:29:26:ce:8a:88:86:82:b3:0a:15:b3:a3:3f:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Aug 13 02:01:25 2025 GMT
Not After : Aug 14 02:01:25 2025 GMT
Subject: CN=fca13d90e91df6922bd305b9aec77d513b6a787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:e0:6c:49:d9:60:76:4a:10:8d:d5:77:3b:
5b:37:7b:e6:0b:79:ef:ba:43:70:93:77:0b:41:10:
eb:25:24:8e:06:12:33:66:f1:c3:6d:6d:cd:c0:29:
80:19:ee:a6:48:ca:80:09:e2:05:ac:33:37:11:f7:
5b:74:e0:2a:30:f1:20:a2:6a:ac:c1:53:2c:2f:1f:
4a:12:13:54:47:1c:d2:5b:70:c9:5e:3d:f8:72:81:
70:cc:a4:63:a0:06:21:c4:57:9c:9e:53:04:2a:fe:
37:07:31:5b:ab:77:46:1d:b1:39:42:b1:f4:f5:16:
57:31:1e:a4:a7:cb:8e:c6:fc:6a:58:77:45:ae:ae:
9a:9d:d3:73:e9:f5:c6:15:39:64:24:80:dd:d0:27:
c9:23:fc:76:5c:43:9f:dd:c2:e7:47:e1:29:e7:61:
9c:ee:2f:a1:09:c8:ee:9e:12:b2:5a:11:5c:67:39:
19:3f:c0:64:de:bf:5d:84:24:df:27:8d:60:96:2c:
e0:0e:23:5c:6c:0f:b2:34:fd:10:29:5b:14:d7:4b:
e8:91:e6:00:62:e7:b5:11:b4:3c:86:41:7a:aa:38:
40:6c:3f:71:f1:4e:99:8e:92:4e:a8:59:3d:c5:71:
fb:a4:00:db:51:f0:4b:8c:7b:29:5e:b6:ca:e5:b3:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:3D:90:E9:1D:F6:92:2B:D3:05:B9:AE:C7:7D:51:3B:6A:78:7E
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:89:f3:9d:66:e2:f4:7c:16:c1:83:6e:66:32:78:08:69:7c:
b7:7e:6c:97:54:e5:1d:21:0d:36:b3:8a:9f:af:9b:53:d1:d9:
e2:d9:51:b8:8b:ba:00:f9:43:74:cb:ad:92:95:40:67:b5:ae:
f3:cb:48:31:b5:89:5a:8a:0a:37:0a:cd:06:ed:0e:2b:07:4a:
11:69:bd:ce:a9:f7:83:c1:50:1c:23:62:3d:95:79:91:33:a3:
6f:64:8b:eb:72:04:c0:f6:a8:42:2c:aa:c4:e9:93:22:48:0f:
79:a6:c9:d8:1d:b2:80:de:60:10:70:8e:05:e4:45:5b:40:d5:
22:14:17:0f:6c:d1:50:d6:68:aa:58:d5:3f:39:be:8b:2a:15:
4a:5b:19:39:2e:1b:8d:cc:32:a7:9d:c7:9d:f8:9a:95:e2:7b:
98:e1:d8:0e:9e:05:40:84:f6:f4:ef:ba:82:5e:6f:1b:43:3d:
ab:4c:4b:5d:4e:06:af:74:f9:f1:b2:4f:26:d5:75:bb:09:2a:
84:d0:ca:eb:9d:df:e7:5d:20:f3:98:45:87:17:9a:bc:34:b9:
6c:13:39:c8:4c:80:f7:13:13:17:fc:aa:71:cd:07:aa:af:e8:
9a:88:df:ab:da:16:6e:a2:7c:1c:c4:06:a6:21:3f:3d:de:36:
c5:d8:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:41 2025 by rpki-client