Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: Vtmi/D/h6AjD6LMk/ys8+AW8+q4FwY8JfLtofYVPSgg=
Subject key identifier: A8:4E:5E:0C:85:F6:6C:9B:BD:ED:B4:0D:3C:07:0C:A5:B7:BD:02:6C
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019A4DE2468D07ABF59CE26F272CB8B3E90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0749
Signing time: Tue 04 Nov 2025 08:01:05 +0000
Manifest this update: Tue 04 Nov 2025 08:01:05 +0000
Manifest next update: Wed 05 Nov 2025 08:01:05 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: nAuXriSbOsD6shmuvttNgk2zx8HvEClOVXUuH/kymr4=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:46:8d:07:ab:f5:9c:e2:6f:27:2c:b8:b3:e9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Nov 4 08:01:05 2025 GMT
Not After : Nov 5 08:01:05 2025 GMT
Subject: CN=a84e5e0c85f66c9bbdedb40d3c070ca5b7bd026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:78:22:d1:ec:90:d9:a4:27:0e:fc:ea:89:
27:1d:9e:b0:93:df:be:9e:ae:fa:8c:95:4b:69:bf:
cf:48:2f:97:6c:e8:02:dc:24:6e:17:43:59:c7:62:
23:55:e6:2e:bf:54:2c:d0:ed:fc:68:f9:bc:a2:3a:
15:b9:74:49:41:6c:5b:83:9d:aa:b4:5a:2b:73:e2:
b4:62:33:59:59:b1:f7:d5:df:37:87:63:c5:95:0f:
bc:8c:09:a2:e2:69:87:58:dd:37:da:75:a9:ca:e9:
f8:15:c8:48:3a:d3:0c:ec:0b:a6:3b:7b:ec:00:c9:
c8:4c:ac:fd:a4:74:34:cb:65:c5:88:88:3b:dc:1f:
de:61:24:f7:9c:f5:ef:48:55:2d:f3:6a:f8:4c:66:
83:db:9c:4f:3d:54:14:75:0d:cf:76:03:9c:e2:1f:
e9:db:9f:21:de:ca:df:f8:b0:ae:4c:33:da:16:05:
e5:c6:1d:51:a3:df:33:ae:86:e4:8a:e5:54:6d:6b:
ae:f0:6a:bf:31:3a:d2:57:c9:57:28:30:5c:77:50:
80:26:38:f1:67:e3:49:dd:c1:7d:c3:da:83:88:0e:
f5:74:8f:d5:42:1a:5d:25:60:51:8a:67:71:db:e8:
13:70:cc:09:68:11:db:50:95:5a:07:1b:15:6a:9a:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:5E:0C:85:F6:6C:9B:BD:ED:B4:0D:3C:07:0C:A5:B7:BD:02:6C
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:ac:df:a7:79:33:84:28:39:dc:34:fa:cd:48:dc:3e:cf:
cc:67:8d:5e:48:1d:67:72:cb:91:45:ce:0f:72:19:b7:c4:1e:
5e:58:11:76:ab:4d:85:5c:51:f2:e7:a3:9c:84:79:a1:21:c9:
5e:3d:7e:69:94:b6:7e:a0:6c:3c:25:c1:09:30:ac:65:54:56:
d0:b4:b3:94:17:ad:d3:2d:9d:68:a2:49:79:ff:cc:59:07:69:
d5:e5:36:7b:88:79:db:6a:17:d6:c9:d4:ed:70:3a:1e:0a:ec:
2b:fa:44:4a:cc:63:33:47:f2:fe:64:a4:01:2e:21:41:1e:04:
24:90:a9:48:2d:8f:68:c0:18:e4:b9:b8:f5:f5:1a:9b:43:95:
58:90:2a:1d:25:17:87:91:2c:81:15:c4:00:7f:ff:f2:10:0d:
41:09:60:51:c5:05:c4:23:cc:25:8d:6b:d2:d5:c9:73:ef:bf:
89:17:68:c9:c1:83:04:d6:0b:22:1b:45:85:7b:49:48:38:64:
ef:37:54:4c:31:77:d7:aa:8d:3e:41:87:f5:b4:30:d2:00:80:
9c:4d:4a:c0:ce:ac:d4:e5:84:60:a7:2f:ad:8b:04:1b:09:60:
23:c7:24:35:ff:81:d8:ef:59:ce:5a:b0:a0:c9:84:19:75:de:
ae:29:75:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4kaNB6v1nOJvJyy4s+kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4
NTJjMDYwHhcNMjUxMTA0MDgwMTA1WhcNMjUxMTA1MDgwMTA1WjAzMTEwLwYDVQQD
EyhhODRlNWUwYzg1ZjY2YzliYmRlZGI0MGQzYzA3MGNhNWI3YmQwMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yp4ItHskNmkJw786oknHZ6wk9++
nq76jJVLab/PSC+XbOgC3CRuF0NZx2IjVeYuv1Qs0O38aPm8ojoVuXRJQWxbg52q
tForc+K0YjNZWbH31d83h2PFlQ+8jAmi4mmHWN032nWpyun4FchIOtMM7AumO3vs
AMnITKz9pHQ0y2XFiIg73B/eYST3nPXvSFUt82r4TGaD25xPPVQUdQ3PdgOc4h/p
258h3srf+LCuTDPaFgXlxh1Ro98zrobkiuVUbWuu8Gq/MTrSV8lXKDBcd1CAJjjx
Z+NJ3cF9w9qDiA71dI/VQhpdJWBRimdx2+gTcMwJaBHbUJVaBxsVaprJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhOXgyF9mybve20DTwHDKW3vQJsMB8GA1UdIwQY
MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt
YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1
LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEis36d5
M4QoOdw0+s1I3D7PzGeNXkgdZ3LLkUXOD3IZt8QeXlgRdqtNhVxR8uejnIR5oSHJ
Xj1+aZS2fqBsPCXBCTCsZVRW0LSzlBet0y2daKJJef/MWQdp1eU2e4h522oX1snU
7XA6HgrsK/pESsxjM0fy/mSkAS4hQR4EJJCpSC2PaMAY5Lm49fUam0OVWJAqHSUX
h5EsgRXEAH//8hANQQlgUcUFxCPMJY1r0tXJc++/iRdoycGDBNYLIhtFhXtJSDhk
7zdUTDF316qNPkGH9bQw0gCAnE1KwM6s1OWEYKcvrYsEGwlgI8ckNf+B2O9Zzlqw
oMmEGXXeril1jA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:38 2025 by rpki-client