Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: AvDULZEf90VcrK9m8Skqz3TP+BDymtrqIYfYxCNI8NI=
Subject key identifier: 41:12:FF:1B:36:BD:61:35:B2:41:88:39:62:A1:93:2C:E9:BD:09:9F
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019A7293EA47E19D0C55380C74136EA283F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 075C
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: cgWodPXnfrTbe1pkBpnWz3RHRpTnTsltIAfRvAGCv6I=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ea:47:e1:9d:0c:55:38:0c:74:13:6e:a2:83:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=4112ff1b36bd6135b241883962a1932ce9bd099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:5b:7a:49:d1:dd:f0:c5:b3:a3:60:d6:65:
22:37:d3:04:b1:ca:bf:07:71:75:40:9b:19:f1:44:
b6:8c:73:4d:ad:5f:bb:21:a0:a3:d5:33:bb:af:c4:
c1:0b:2b:47:1c:6e:48:f0:fb:ce:eb:cf:a6:5b:8d:
e3:04:4e:ec:38:11:39:b2:11:db:eb:83:98:63:a0:
0e:cb:bf:a5:7f:16:e4:f5:23:fe:6d:1d:30:e0:74:
50:a6:fe:fc:13:80:2c:9d:7e:c7:5a:d4:70:7d:2d:
3e:5f:21:63:03:56:13:b5:88:66:64:0c:04:9a:53:
89:c8:97:b8:c9:0e:ff:cb:1b:19:d6:12:fd:01:88:
6e:de:4c:46:c3:0c:1c:ad:67:48:37:39:b0:65:8a:
d3:a3:18:a5:45:de:53:a5:4f:2c:f5:db:27:69:b2:
d5:3a:3f:25:59:32:d9:a4:a3:52:ae:63:28:1c:de:
5d:6e:0f:13:ad:7b:7a:fb:c0:41:fe:7f:31:66:31:
0a:68:9e:bb:1a:0e:c1:6a:c3:7b:e3:4a:32:ce:02:
30:b1:b5:6e:9c:d8:e4:4f:ff:0d:d6:59:96:75:0f:
88:76:f9:62:55:cd:63:0c:99:02:c8:aa:2c:1d:45:
72:4f:4e:1c:ec:6a:dc:bb:ec:32:09:48:db:02:5a:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:12:FF:1B:36:BD:61:35:B2:41:88:39:62:A1:93:2C:E9:BD:09:9F
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:14:f2:ae:3b:a4:f9:ed:39:40:5d:9a:a0:c1:51:f8:df:
01:73:b1:91:04:02:f5:76:94:24:e1:2b:ba:7f:36:2c:83:fd:
c0:b0:09:cb:f8:f0:0b:43:8c:49:05:f5:ea:fb:94:1d:38:6f:
17:de:ff:a6:f3:f1:a0:85:ee:4d:a6:87:60:6b:16:d4:dc:89:
ab:79:98:aa:2c:73:bb:8a:e9:53:a2:06:86:8e:5e:5a:3c:ad:
a5:ac:8a:fa:33:0a:79:63:97:7d:80:15:84:76:e0:2e:48:ab:
d6:38:66:d5:b3:0e:67:98:8b:c3:03:36:ea:d5:af:46:cb:31:
a2:bc:5c:f7:63:0c:f6:71:28:0e:f4:cc:3d:2a:6c:18:20:a4:
2f:63:90:85:82:72:af:09:7d:cb:a0:73:c3:c9:70:41:64:61:
e0:24:a7:68:13:e0:d5:c0:37:32:97:e8:73:ac:db:69:d0:81:
ab:ec:ba:57:0b:0b:fa:ef:ef:96:86:74:7a:94:05:1d:31:07:
fb:fd:29:9a:5e:12:80:e3:b2:5a:92:db:7d:5b:12:db:c5:b8:
4c:71:fc:b2:a8:19:af:35:40:06:01:a0:58:a0:71:13:c9:9f:
f6:a0:13:c9:80:e3:3f:c3:26:a2:d4:2f:27:7f:ca:66:28:d9:
c3:01:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:28 2025 by rpki-client