Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: E86w9qQtvQxJDJF+IOoM6QAqDmzq8L+9JH5TnOIS/lo=
Subject key identifier: 5A:78:AA:F7:16:FB:FB:3A:84:75:B0:01:B3:5D:BF:04:32:5B:F0:39
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 0199228CF47D07C9F5296820C8FF83D45DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 06AE
Signing time: Sun 07 Sep 2025 05:01:26 +0000
Manifest this update: Sun 07 Sep 2025 05:01:26 +0000
Manifest next update: Mon 08 Sep 2025 05:01:26 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: 7MRN6RcObCs9pPkoDPb7R3KNgWXPJB2jlUSoks80rjo=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f4:7d:07:c9:f5:29:68:20:c8:ff:83:d4:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Sep 7 05:01:26 2025 GMT
Not After : Sep 8 05:01:26 2025 GMT
Subject: CN=5a78aaf716fbfb3a8475b001b35dbf04325bf039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:73:00:b6:39:6e:b0:75:3a:f9:a4:3e:18:
72:b8:b2:c5:44:07:23:77:f3:29:fc:31:bc:dc:af:
ff:8c:df:43:66:78:8d:4b:4e:07:ba:f3:ba:86:e4:
2a:99:cc:cc:37:f4:28:14:83:30:fb:31:8f:7f:7a:
d1:50:aa:f9:c9:c6:0b:e8:04:10:ac:3f:f9:e6:ad:
63:19:a6:ee:ba:c7:e5:91:e8:5d:84:48:bd:57:2b:
98:a1:59:59:6f:5f:a0:9c:85:c5:2b:3b:09:90:cd:
d7:c8:bb:ba:84:ad:54:77:c5:6c:2f:dc:49:59:db:
8d:2d:e4:30:aa:27:fa:17:f0:59:56:ba:a1:38:86:
60:ee:f1:0d:79:95:46:c2:94:d5:92:64:7a:ec:23:
16:9a:d2:f3:08:f3:b7:86:89:34:18:cf:80:c3:84:
f1:ab:04:22:4c:fe:fb:52:e4:27:a1:48:f1:4c:d1:
48:02:fa:e6:d2:60:07:2c:5f:73:57:3c:43:f8:12:
71:17:00:c6:70:08:96:d9:ff:d2:a6:7c:07:90:75:
f9:94:33:ce:8d:24:65:42:9d:6c:33:64:7c:73:27:
6f:f1:34:db:36:37:4a:79:b8:7e:05:d1:7d:37:4e:
53:7b:b6:f3:8e:d2:d4:c4:c4:80:9d:bc:d8:de:9a:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:AA:F7:16:FB:FB:3A:84:75:B0:01:B3:5D:BF:04:32:5B:F0:39
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:65:67:58:2e:6b:14:d2:a1:41:de:19:43:0b:a0:be:37:
09:8c:f8:b5:4f:c8:3a:7c:a0:39:59:b7:5b:4f:4d:51:c4:8c:
10:b1:27:4a:58:1c:53:19:2d:ee:77:9a:45:84:0c:e9:d9:ab:
ec:00:2c:6f:3d:57:08:86:97:28:39:28:ab:4a:dd:71:28:48:
ed:62:f6:a0:b4:de:d6:95:f3:8b:35:e1:fa:2f:5a:10:ae:b0:
d7:ad:f1:16:3a:f7:64:ca:90:da:63:0f:e3:49:1c:4c:27:a1:
d6:5b:5b:ff:f0:64:9c:83:b1:af:93:64:44:ac:fe:0c:8d:f1:
67:c5:eb:9a:39:b2:c6:47:17:f3:9e:a1:b1:c4:79:91:39:6a:
6d:c6:01:65:9c:ae:1c:17:8e:f5:3e:90:db:77:35:13:4d:aa:
07:74:2a:86:11:f9:8a:51:44:46:75:9c:64:d9:39:58:16:42:
6c:f8:71:49:b3:55:10:a5:31:fc:eb:3b:ee:1b:20:b8:7f:c1:
b0:24:be:29:34:67:39:5d:98:e8:8d:47:8f:c9:49:cf:33:02:
a5:77:87:75:2c:67:74:e4:3b:f2:ce:cf:59:90:f6:10:39:88:
0f:59:87:cd:86:8c:70:df:6a:90:78:c1:c5:3c:24:11:a8:57:
c9:9b:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:09 2025 by rpki-client