Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: /wmuJf9y9BR0qNNJo0xGRodaGtRQH7Z/yQfayRwgyc4=
Subject key identifier: C0:FB:39:D5:D8:EF:3F:45:3A:32:99:1A:70:70:7F:A2:60:A2:68:B7
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 0198D54E96844B3A5E0A0D3B8D683D4A1FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0686
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: BiZOMgHzpUHRev3gIbaUIEisk6ukKICb+yBQi4j017Q=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:84:4b:3a:5e:0a:0d:3b:8d:68:3d:4a:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=c0fb39d5d8ef3f453a32991a70707fa260a268b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:a2:8e:a7:c2:a1:93:f1:73:c0:3e:6c:83:
77:ba:07:72:99:c4:a9:85:a8:b7:a0:52:ea:21:79:
d8:60:64:17:ae:14:cb:97:a8:87:78:e9:8e:b1:c1:
88:cf:a8:d3:90:4f:d3:06:62:d7:8b:83:34:63:62:
a3:10:d3:00:51:78:82:ae:40:32:fa:91:19:fc:b1:
d5:2f:e7:f6:cf:76:51:ae:a1:a6:a9:f9:76:0e:45:
25:6d:6d:89:8b:f9:f8:00:69:ff:bc:4b:01:1d:00:
df:ec:e7:ba:b3:74:b9:3d:d7:07:b4:dd:29:2e:7b:
c0:69:5a:87:9a:ff:d9:f6:4f:07:cb:b1:fb:c1:ad:
8c:75:5b:2f:53:ff:cd:16:9d:6a:8a:a7:26:63:bf:
b9:e4:3b:ac:34:7b:7e:17:88:87:a2:19:19:e0:13:
bf:18:c6:b4:43:b3:64:9a:9e:d3:41:81:1f:e1:b2:
e4:5f:a6:5e:c8:25:56:c0:10:be:7d:3e:6c:03:e5:
82:bb:c8:20:bc:29:55:0c:14:24:10:df:5a:e6:c3:
2d:f8:11:7b:5d:40:3a:c5:29:a2:42:90:ca:09:a4:
8b:ef:a6:32:13:7e:ea:a6:48:87:2b:84:0a:f5:8f:
3d:e9:8a:2b:15:b8:42:88:b6:2e:d9:2c:27:02:85:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:39:D5:D8:EF:3F:45:3A:32:99:1A:70:70:7F:A2:60:A2:68:B7
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b8:a0:b9:e1:fa:29:02:58:21:93:4f:2a:b2:5c:e6:52:39:
73:7f:96:90:4a:e2:e6:ad:0f:13:98:d4:90:66:2a:b4:61:a3:
fa:57:9d:b2:3e:f3:db:a2:d7:eb:06:cf:6f:42:a6:f4:c7:cd:
7d:f7:ce:76:63:52:69:5d:71:28:f0:0e:a7:a2:7b:3e:4c:37:
83:b8:da:b0:34:b4:3b:b8:74:98:08:6d:1f:2a:be:bc:6b:61:
db:9f:23:f6:05:f5:a5:fb:b3:b7:2c:e5:12:9f:1d:40:ca:47:
6f:be:57:22:c8:8e:16:f1:60:33:4c:69:02:95:58:b8:2f:02:
fd:c2:8d:ba:e7:80:bd:62:67:6a:1a:cc:ba:8f:05:a2:25:76:
1b:22:ee:76:04:d2:ba:e5:77:37:c3:b7:4c:be:99:1c:77:80:
49:18:05:a2:63:b2:82:99:3e:94:af:97:27:e5:60:6e:b0:64:
92:5b:f4:da:61:28:c9:e2:91:7e:47:f1:ca:4e:75:31:69:8b:
54:70:41:4d:1f:97:c7:d7:fc:51:63:f5:1b:e4:c8:c2:77:0c:
b9:d2:2b:87:88:3d:03:2b:11:73:31:46:75:78:2b:72:de:fc:
78:f5:13:99:db:5e:b8:7a:49:35:f1:2d:3c:13:fa:b3:6f:a4:
2d:f8:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:06 2025 by rpki-client