Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
File: U1hROBB5ZcOJ82e1Wr15K1Meuco.mft (raw, json)
Hash identifier: wgh2tM8CdHHNGzymHr2hTpsIc+kuOKwXmQOpWM3STjo=
Subject key identifier: BD:07:85:D0:08:CB:57:3E:D4:E4:2C:2B:CF:66:F9:8E:D2:78:FD:75
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial: 019A2A79FCC4623B5BF2FBA72DD979D06E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
Manifest number: 07E4
Signing time: Tue 28 Oct 2025 11:00:28 +0000
Manifest this update: Tue 28 Oct 2025 11:00:28 +0000
Manifest next update: Wed 29 Oct 2025 11:00:28 +0000
Files and hashes: 1: 9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa (hash: LLXaZp76DD3QRRqXxKgWM7+FKfHGkvTdFTOznhul5ME=)
2: U1hROBB5ZcOJ82e1Wr15K1Meuco.crl (hash: v1Eib1AiiKDzGTvYaJGWoMoa1Qly8UGGMEQemtTI3/w=)
3: trR0gOkOqLM9i33P9z5lDKAYVLA.roa (hash: yYJpYO73PDxpmBJL0VJQpTeNGi0zNN4BxZzYljkZajw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:fc:c4:62:3b:5b:f2:fb:a7:2d:d9:79:d0:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
Validity
Not Before: Oct 28 11:00:28 2025 GMT
Not After : Oct 29 11:00:28 2025 GMT
Subject: CN=bd0785d008cb573ed4e42c2bcf66f98ed278fd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:72:ac:d3:4c:d7:1c:9d:89:a1:17:bb:ff:
d3:db:5b:42:ac:9d:82:ad:3c:96:8a:0b:36:ae:9f:
fa:1e:8c:b1:d9:7b:ab:39:03:45:a2:39:f5:65:4c:
ad:c6:97:3e:65:0d:d4:34:b9:56:74:5d:6c:ab:4f:
10:dc:6b:e0:08:cb:5f:83:53:71:5b:5b:e2:ce:e9:
3d:8f:ff:ec:ee:7d:3e:dc:cf:eb:fe:09:e7:0b:07:
01:3f:80:f2:ca:1b:40:73:05:18:e4:38:c4:3f:e3:
aa:ff:ef:fd:84:0e:a7:0d:3d:e2:bd:ee:4b:4f:0b:
de:c5:df:72:43:24:0d:3b:96:f1:d1:3a:f0:20:e6:
85:93:e3:44:87:a9:5e:cf:6c:bc:73:13:67:69:44:
1c:49:5a:72:98:4c:ca:ff:ea:2e:18:24:3f:bf:ab:
5b:be:e1:b2:bd:17:21:1d:30:22:f9:55:cc:67:f6:
f2:36:68:62:cd:a4:9b:96:91:46:05:b2:df:6e:96:
1a:3c:98:94:69:19:c4:52:e0:8a:6b:00:9c:af:e1:
79:83:ca:e0:78:dc:b5:f4:58:54:fd:15:31:46:cc:
07:b7:4f:4c:59:19:b2:f8:db:f8:9c:26:d2:23:ea:
b8:10:1b:35:71:78:0d:aa:57:6f:c9:52:63:11:c9:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:85:D0:08:CB:57:3E:D4:E4:2C:2B:CF:66:F9:8E:D2:78:FD:75
X509v3 Authority Key Identifier:
keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dc:d1:89:77:f4:34:33:23:73:22:c3:db:89:d6:8f:85:9f:
70:e6:03:a0:55:88:89:62:88:06:e7:64:74:21:f1:6b:50:4c:
23:7d:f1:17:61:37:b8:09:d9:11:15:80:a4:d3:18:0e:59:4f:
d3:68:f8:d6:31:42:b6:a8:3a:f3:72:99:3f:df:fd:f5:26:fd:
bc:ac:e0:8e:55:90:41:51:10:70:a2:3c:50:84:1b:ff:df:18:
5a:39:20:4d:e6:25:b3:16:de:ba:5d:9a:9f:ca:39:0a:2d:4c:
6a:8d:86:65:24:03:66:4c:33:25:db:42:24:ad:5a:ab:9a:69:
ab:48:19:c9:b0:56:6e:99:bf:b4:89:c1:b4:1a:10:91:a3:ec:
a3:17:83:be:64:d7:3f:c9:0a:15:d4:51:b4:2e:7e:da:4e:f0:
3b:74:d6:c8:97:9b:ec:18:d3:94:a9:c3:bb:cd:b7:2c:cb:05:
2c:ec:88:52:d8:0f:f9:a2:f2:5a:0b:fe:8a:c2:86:54:bc:f8:
e4:9c:ec:f2:23:ca:ac:e2:33:01:cc:aa:f8:09:5c:93:38:3a:
0f:32:3a:e2:3b:7d:40:bb:6a:ea:1e:5d:76:cf:d7:81:be:89:
f7:3e:b6:f6:f5:eb:07:dc:37:f8:1f:b4:46:7a:7b:f5:8d:00:
da:ed:aa:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqefzEYjtb8vunLdl50G4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx
ZWI5Y2EwHhcNMjUxMDI4MTEwMDI4WhcNMjUxMDI5MTEwMDI4WjAzMTEwLwYDVQQD
EyhiZDA3ODVkMDA4Y2I1NzNlZDRlNDJjMmJjZjY2Zjk4ZWQyNzhmZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA649yrNNM1xydiaEXu//T21tCrJ2C
rTyWigs2rp/6Hoyx2XurOQNFojn1ZUytxpc+ZQ3UNLlWdF1sq08Q3GvgCMtfg1Nx
W1vizuk9j//s7n0+3M/r/gnnCwcBP4DyyhtAcwUY5DjEP+Oq/+/9hA6nDT3ive5L
Twvexd9yQyQNO5bx0TrwIOaFk+NEh6lez2y8cxNnaUQcSVpymEzK/+ouGCQ/v6tb
vuGyvRchHTAi+VXMZ/byNmhizaSblpFGBbLfbpYaPJiUaRnEUuCKawCcr+F5g8rg
eNy19FhU/RUxRswHt09MWRmy+Nv4nCbSI+q4EBs1cXgNqldvyVJjEclsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0HhdAIy1c+1OQsK89m+Y7SeP11MB8GA1UdIwQY
MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt
MTg1MGZmZjA0NDI1LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1
LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdzRiXf0
NDMjcyLD24nWj4WfcOYDoFWIiWKIBudkdCHxa1BMI33xF2E3uAnZERWApNMYDllP
02j41jFCtqg683KZP9/99Sb9vKzgjlWQQVEQcKI8UIQb/98YWjkgTeYlsxbeul2a
n8o5Ci1Mao2GZSQDZkwzJdtCJK1aq5ppq0gZybBWbpm/tInBtBoQkaPsoxeDvmTX
P8kKFdRRtC5+2k7wO3TWyJeb7BjTlKnDu823LMsFLOyIUtgP+aLyWgv+isKGVLz4
5Jzs8iPKrOIzAcyq+Alckzg6DzI64jt9QLtq6h5dds/Xgb6J9z629vXrB9w3+B+0
Rnp79Y0A2u2qsA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:37:04 2025 by rpki-client