Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: pvCFM93uvSh9N6a8fCRLHmL3yvCOtWo11yB+escohaE=
Subject key identifier: 05:38:1A:CB:DF:D5:34:05:6B:21:93:04:CF:00:74:BE:C6:A8:26:63
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 0199FCC64A985F5E9A18E064F585AD1B7BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 071F
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: oNJN4eM19x8qqkTdkCplJdaiXfPXRnzChv0/yvLzs0U=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4a:98:5f:5e:9a:18:e0:64:f5:85:ad:1b:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=05381acbdfd534056b219304cf0074bec6a82663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:44:97:ab:18:cd:42:fa:d2:3b:bb:77:de:
5f:30:64:19:0a:27:bd:c3:7e:07:3b:fe:00:b9:6d:
e3:a7:92:84:75:0b:11:77:e4:24:5d:59:c9:0f:61:
eb:1f:ef:d7:d4:b1:31:9a:26:93:07:25:a9:3b:9e:
28:a7:75:d4:bf:bb:f6:66:16:7b:51:b9:2a:b9:0f:
d6:2f:70:e6:79:a3:3f:cd:69:d8:e9:f3:a6:f4:69:
9a:63:25:99:ed:b8:8e:b2:5e:1d:61:d5:68:59:24:
a8:53:e0:db:ca:c8:6e:44:e5:2e:94:a3:79:c7:52:
75:b9:a6:b4:85:5f:d7:40:96:0d:60:6b:1b:53:d9:
01:2b:e0:c8:89:77:37:d5:1a:37:02:44:c2:88:92:
d6:3b:e9:5c:b7:ed:3d:d2:62:ee:b8:23:ae:d2:5e:
d3:1a:a2:8b:34:2c:a3:0f:ff:ba:68:c4:00:5c:58:
68:27:89:ac:e1:e7:c0:62:cb:ae:76:a7:60:e2:cd:
46:d0:7c:0e:e4:d9:d2:d2:3c:65:ba:a9:0f:93:56:
64:e2:5f:9f:02:31:47:37:62:b4:52:81:11:38:c8:
b0:2e:d6:c7:95:d5:68:07:d1:65:7c:03:16:1e:65:
cd:eb:41:d0:e4:71:09:56:4e:a8:74:7a:7f:d0:6b:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:1A:CB:DF:D5:34:05:6B:21:93:04:CF:00:74:BE:C6:A8:26:63
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:20:35:e1:40:70:81:11:a3:6a:b3:c9:74:b7:bf:e1:c1:
88:44:25:9c:7f:85:8a:8d:d5:3d:e2:d8:dc:97:35:d8:1e:a2:
35:5f:40:ec:39:4b:e2:93:9b:da:c8:d5:87:e3:5b:9f:0e:84:
d3:bd:af:5b:b7:4d:d3:1b:74:3b:85:a0:11:e3:14:d3:1c:1a:
ad:d7:f4:25:e2:39:e7:25:1f:e7:c7:ba:c6:ab:83:b3:bf:11:
fe:c8:f4:50:59:da:f6:a7:4a:3c:ec:4b:44:2f:d7:be:6a:f5:
eb:98:7b:c8:9d:d9:c6:15:99:b5:5f:ba:ad:66:9a:91:29:56:
6a:17:b0:85:d5:14:34:f5:1c:68:24:5d:49:70:69:46:39:05:
3b:46:26:01:d0:85:00:49:cd:94:da:f2:c7:a2:d2:2a:f6:86:
3e:a4:84:a2:04:af:b7:bd:00:ab:66:7f:03:59:11:26:c6:5a:
6a:f9:eb:cb:b3:48:45:16:3b:28:f0:a2:e6:04:85:1a:7b:38:
45:1a:07:9f:76:65:91:6b:5f:5d:6b:70:14:b5:d1:a0:96:9b:
00:19:68:db:65:36:e9:ad:bc:96:cb:e0:7a:78:32:73:b6:70:
38:d5:d2:b4:9c:b7:a1:cf:bc:f4:2c:c5:74:24:ef:cd:0c:03:
20:f5:90:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xkqYX16aGOBk9YWtG3upMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4
NTJjMDYwHhcNMjUxMDE5MTQwMTE3WhcNMjUxMDIwMTQwMTE3WjAzMTEwLwYDVQQD
EygwNTM4MWFjYmRmZDUzNDA1NmIyMTkzMDRjZjAwNzRiZWM2YTgyNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ZEl6sYzUL60ju7d95fMGQZCie9
w34HO/4AuW3jp5KEdQsRd+QkXVnJD2HrH+/X1LExmiaTByWpO54op3XUv7v2ZhZ7
UbkquQ/WL3DmeaM/zWnY6fOm9GmaYyWZ7biOsl4dYdVoWSSoU+DbyshuROUulKN5
x1J1uaa0hV/XQJYNYGsbU9kBK+DIiXc31Ro3AkTCiJLWO+lct+090mLuuCOu0l7T
GqKLNCyjD/+6aMQAXFhoJ4ms4efAYsuudqdg4s1G0HwO5NnS0jxluqkPk1Zk4l+f
AjFHN2K0UoEROMiwLtbHldVoB9FlfAMWHmXN60HQ5HEJVk6odHp/0GtIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU4Gsvf1TQFayGTBM8AdL7GqCZjMB8GA1UdIwQY
MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt
YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1
LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwIgNeFA
cIERo2qzyXS3v+HBiEQlnH+Fio3VPeLY3Jc12B6iNV9A7DlL4pOb2sjVh+Nbnw6E
072vW7dN0xt0O4WgEeMU0xwardf0JeI55yUf58e6xquDs78R/sj0UFna9qdKPOxL
RC/Xvmr165h7yJ3ZxhWZtV+6rWaakSlWahewhdUUNPUcaCRdSXBpRjkFO0YmAdCF
AEnNlNryx6LSKvaGPqSEogSvt70Aq2Z/A1kRJsZaavnry7NIRRY7KPCi5gSFGns4
RRoHn3ZlkWtfXWtwFLXRoJabABlo22U26a28lsvgengyc7ZwONXStJy3oc+89CzF
dCTvzQwDIPWQAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:25 2025 by rpki-client