Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: v+uwP0Y4n6JRzda2wqceKApluhGt9xVA+bmqHujVDNU=
Subject key identifier: 8D:FB:99:F1:0D:14:92:4E:2A:FB:03:90:8F:A6:E4:5C:75:8F:CC:5B
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01976A3CF5662C53A5889440D8824AEFF762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 05CA
Signing time: Fri 13 Jun 2025 17:01:09 +0000
Manifest this update: Fri 13 Jun 2025 17:01:09 +0000
Manifest next update: Sat 14 Jun 2025 17:01:09 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: BCACFryOHm9G8MUEHxmzWpL/CL1r7PY9uH0mFveBTs4=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:f5:66:2c:53:a5:88:94:40:d8:82:4a:ef:f7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jun 13 17:01:09 2025 GMT
Not After : Jun 14 17:01:09 2025 GMT
Subject: CN=8dfb99f10d14924e2afb03908fa6e45c758fcc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:15:75:2f:7a:a0:86:05:bb:09:16:0d:2b:
63:e9:f7:04:fa:3e:3a:0b:46:9e:5b:6b:22:d8:35:
ca:08:ce:62:8f:8b:1d:7e:6b:40:d8:01:59:dc:22:
8c:d6:d8:29:32:70:60:c6:20:19:c1:27:7d:55:52:
a6:20:13:88:b7:46:fb:5a:5a:10:e0:07:db:b2:92:
aa:df:17:24:f7:e4:0d:0a:dc:90:ca:37:19:87:90:
eb:b6:59:9f:9d:20:ae:e3:df:2d:6b:1c:d1:b3:2a:
5c:a0:b9:94:e5:25:14:03:0f:0b:6c:1a:40:84:43:
96:0d:60:bf:4b:e6:dc:e4:15:65:7c:25:81:1c:93:
ca:08:af:9d:09:d1:d8:44:ca:7a:9a:7b:18:0b:64:
48:c1:bf:92:a1:02:2e:d3:2d:96:f9:a4:4f:21:76:
45:6d:5c:a5:b5:11:ec:36:85:72:fd:3e:f4:00:bc:
1b:eb:0a:82:92:43:01:b3:d0:52:d8:e0:c4:89:e5:
a5:d3:22:4a:fc:be:f8:55:53:81:92:b4:30:2c:43:
13:5d:c8:87:b7:65:14:08:5d:15:81:bd:d7:b6:6e:
d7:42:23:b8:0d:3f:fe:f9:4f:74:00:cf:97:a1:b2:
02:89:b2:17:0f:7e:d7:0a:8d:db:4d:73:04:b9:ad:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:99:F1:0D:14:92:4E:2A:FB:03:90:8F:A6:E4:5C:75:8F:CC:5B
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:73:02:5a:12:f5:2b:41:cf:b4:1b:ae:43:04:2b:b9:e7:
99:0e:2a:71:76:06:49:6a:68:bc:c4:97:10:30:d5:d2:d8:5e:
19:d3:57:d1:5d:63:06:43:00:8c:4d:22:06:f6:f4:1d:ac:ed:
d4:a8:1c:27:fc:b4:3a:ae:85:51:3e:4d:fa:26:23:72:ed:00:
8e:04:ad:8c:2a:ef:33:59:6a:1f:09:a9:35:88:13:32:3a:78:
3d:c8:25:2c:ec:47:e0:e7:e4:d6:1f:fb:12:4c:fa:f3:ba:37:
64:53:ca:dd:68:29:f0:23:39:af:8e:b0:f1:45:94:9f:0c:00:
d0:cf:0d:5e:b5:48:73:46:01:04:aa:ee:37:5c:ed:86:f0:88:
b3:ae:ac:f9:e8:4b:86:eb:2b:1c:41:e9:61:a5:d8:1a:ca:dc:
3d:c6:fe:8e:82:c5:e3:22:17:52:b8:ed:40:ec:2c:bb:b1:b0:
6d:d6:3b:5d:49:ba:95:2e:33:5b:a4:6d:b1:c5:1d:a2:54:4f:
eb:42:b4:49:4c:ee:4e:43:1a:9c:e6:a4:ac:37:30:59:4a:2e:
77:3d:52:4f:f1:39:a0:c3:ad:1d:8b:91:8e:1f:43:98:b9:53:
96:2b:fe:63:c0:fd:4a:37:de:99:95:48:5b:15:ca:10:04:ab:
d1:d3:21:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPPVmLFOliJRA2IJK7/diMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYTEyNTg5MGE0YWYwOTI0NTVhYmM3YmI1YWJmZTQ4Y2Q4
NTJjMDYwHhcNMjUwNjEzMTcwMTA5WhcNMjUwNjE0MTcwMTA5WjAzMTEwLwYDVQQD
Eyg4ZGZiOTlmMTBkMTQ5MjRlMmFmYjAzOTA4ZmE2ZTQ1Yzc1OGZjYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPoVdS96oIYFuwkWDStj6fcE+j46
C0aeW2si2DXKCM5ij4sdfmtA2AFZ3CKM1tgpMnBgxiAZwSd9VVKmIBOIt0b7WloQ
4AfbspKq3xck9+QNCtyQyjcZh5DrtlmfnSCu498taxzRsypcoLmU5SUUAw8LbBpA
hEOWDWC/S+bc5BVlfCWBHJPKCK+dCdHYRMp6mnsYC2RIwb+SoQIu0y2W+aRPIXZF
bVyltRHsNoVy/T70ALwb6wqCkkMBs9BS2ODEieWl0yJK/L74VVOBkrQwLEMTXciH
t2UUCF0Vgb3Xtm7XQiO4DT/++U90AM+XobICibIXD37XCo3bTXMEua1sQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI37mfENFJJOKvsDkI+m5Fx1j8xbMB8GA1UdIwQY
MBaAFFOhJYkKSvCSRVq8e7Wr/kjNhSwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTkt
YzM4MzMwY2JkOTY1LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82MmZmNzEtYzRmMi00OTI5LTg4OTktYzM4MzMwY2JkOTY1
LzEvVTZFbGlRcEs4SkpGV3J4N3Rhdi1TTTJGTEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazJzAloS
9StBz7QbrkMEK7nnmQ4qcXYGSWpovMSXEDDV0theGdNX0V1jBkMAjE0iBvb0Hazt
1KgcJ/y0Oq6FUT5N+iYjcu0AjgStjCrvM1lqHwmpNYgTMjp4PcglLOxH4Ofk1h/7
Ekz687o3ZFPK3Wgp8CM5r46w8UWUnwwA0M8NXrVIc0YBBKruN1zthvCIs66s+ehL
husrHEHpYaXYGsrcPcb+joLF4yIXUrjtQOwsu7GwbdY7XUm6lS4zW6RtscUdolRP
60K0SUzuTkManOakrDcwWUoudz1ST/E5oMOtHYuRjh9DmLlTliv+Y8D9SjfemZVI
WxXKEASr0dMhcQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 21:48:12 2025 by rpki-client