
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: 7nuP55GmcM30C9G8A6x5WewQ6oPE98xA9PkbROTsnME=
Subject key identifier: B6:E1:FF:6B:D2:50:23:B0:1F:BD:B1:6D:62:AB:71:C9:C1:21:75:29
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01975CB7B47C5082997C92710AF963AE04D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 05C3
Signing time: Wed 11 Jun 2025 02:00:32 +0000
Manifest this update: Wed 11 Jun 2025 02:00:32 +0000
Manifest next update: Thu 12 Jun 2025 02:00:32 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: kBoI9yXx/fbLVuO1prKci7AyOOj0LTMbAwdkYz0K1TY=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:b4:7c:50:82:99:7c:92:71:0a:f9:63:ae:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jun 11 02:00:32 2025 GMT
Not After : Jun 12 02:00:32 2025 GMT
Subject: CN=b6e1ff6bd25023b01fbdb16d62ab71c9c1217529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:a8:af:9c:d8:67:8c:60:75:94:a7:56:f1:
fd:76:a5:f7:75:6e:21:f8:c9:b2:a4:11:96:05:16:
b6:5d:01:87:0c:77:c5:a9:52:d7:91:3c:f8:3c:bc:
e1:fa:95:26:c8:d2:49:4b:2d:91:13:17:0d:23:9c:
52:0b:07:8c:07:cd:c6:74:19:49:01:43:aa:aa:1a:
e8:77:87:a4:f1:53:9d:e5:28:a9:0d:ad:5d:77:42:
33:c6:75:85:72:6a:64:b8:ae:e9:30:9e:9f:2d:64:
83:6e:b1:e6:45:7f:68:1b:ed:a3:bc:0d:7f:7b:b3:
2b:63:e3:b9:a8:c1:94:e5:2e:08:c9:25:6e:e8:80:
54:ef:66:6f:8a:11:29:9b:9b:54:25:82:46:a0:70:
b8:e8:61:f1:c7:3d:98:73:65:fc:12:c2:e6:ca:c7:
3e:3a:e7:e1:18:2a:b7:48:47:76:32:5d:45:11:1c:
fe:cc:dd:04:95:3f:b5:11:3c:5c:e0:3c:10:46:5f:
3b:01:24:63:11:18:2e:5b:f9:66:a0:66:43:db:65:
89:46:8b:06:5c:6c:e9:4d:2e:e4:db:f8:21:92:99:
f8:42:3c:e5:5f:b1:d2:d5:20:d2:58:33:e4:78:38:
2d:65:1c:bc:00:12:66:17:d4:b3:c9:a2:fa:04:ce:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:FF:6B:D2:50:23:B0:1F:BD:B1:6D:62:AB:71:C9:C1:21:75:29
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ef:c2:ac:85:8d:74:f6:0a:1b:ae:95:40:92:13:f9:ed:91:
ed:55:99:f8:b5:44:a1:85:60:61:0f:c8:07:72:15:d0:0d:d3:
40:12:39:09:13:4f:ac:a7:82:58:84:1b:2d:06:df:77:00:21:
54:b3:10:d2:2d:6c:de:e3:4d:40:93:61:16:74:20:ff:31:ac:
c8:0c:80:52:9f:4d:cf:ec:6e:23:05:4c:81:50:54:ef:1a:70:
2d:1b:f6:6d:81:96:6f:ca:3c:a0:13:39:c4:5e:4f:d8:11:6c:
3f:91:9c:c2:58:38:8e:78:be:7f:13:ef:23:de:65:95:11:85:
6a:8f:6a:bf:f6:19:99:f6:9b:25:eb:88:5a:6b:15:24:ca:76:
6f:35:c7:e8:e5:64:22:91:0c:f6:49:c1:09:4f:46:a3:9a:38:
8d:f4:f1:4a:97:26:7a:d6:e0:ff:9b:17:30:a9:e8:eb:2f:7e:
f7:b7:5b:b2:b1:3b:65:65:8e:a4:e8:a7:65:36:5c:be:18:f4:
41:ca:0c:f4:55:4b:b7:bb:97:cf:02:45:88:d6:ee:af:f9:98:
e0:2b:96:19:ca:30:a7:3c:ff:b3:6c:48:12:45:af:48:27:88:
35:26:08:bb:61:3a:03:b9:10:34:17:21:39:37:06:e7:de:08:
b7:b9:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:15:46 2025 by rpki-client