Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: BcGRvNQM+62Ssa5m/kKRdwFd4lVktla0dLEoUNhhL7U=
Subject key identifier: A4:EC:CE:70:1D:A6:83:AD:AC:7F:9B:E8:B0:7A:B3:1E:35:06:F6:5C
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 01992255570B241D364306688C4ED2FA76A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 13B2
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: WcQbwY3tC5JFKZ6XnjyRSgbbnIAfzlqboy37+ja4XGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:57:0b:24:1d:36:43:06:68:8c:4e:d2:fa:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=a4ecce701da683adac7f9be8b07ab31e3506f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:bc:9a:3f:31:a8:62:fa:f6:6b:82:2f:3d:
1b:17:db:22:ae:e6:d3:71:af:7f:69:20:23:b7:8b:
c3:0d:a5:aa:05:27:17:bb:69:e0:79:51:f4:8d:92:
24:b6:5a:74:d4:7e:5b:b7:06:1a:50:f7:63:a4:39:
01:81:bc:80:fc:1e:cb:50:d0:92:6e:8c:1d:77:68:
e4:46:d0:7a:9a:20:3c:a8:cb:43:6a:4e:81:a7:c4:
fe:72:3a:7e:11:86:05:17:08:70:bc:10:48:b3:74:
64:37:e2:15:4f:ff:f2:75:85:a5:38:f9:32:5a:43:
77:6b:38:a7:75:88:cd:a8:d4:44:a5:c0:49:cc:8f:
82:f1:e5:3f:3f:4f:52:b9:99:13:c9:7d:d1:77:a0:
79:fb:8c:61:c4:fa:2a:61:31:32:7e:34:0e:a4:cb:
a0:d9:be:21:a5:1e:e7:93:3d:89:07:23:5d:77:cb:
82:54:3e:ea:61:0f:1d:53:58:c1:d0:87:de:d2:bc:
af:14:70:f5:81:21:19:98:d0:be:f3:43:0b:ef:c5:
b2:6e:f7:e6:bc:97:97:7d:11:24:50:1c:1c:65:94:
b9:37:98:1e:01:c4:e4:b2:bd:4c:a2:f1:a8:af:72:
37:0e:f6:a2:42:76:09:f4:45:e6:2d:f7:8d:b0:4f:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:CE:70:1D:A6:83:AD:AC:7F:9B:E8:B0:7A:B3:1E:35:06:F6:5C
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:05:1c:fd:ee:09:e6:17:6f:20:b6:86:47:04:4f:6d:32:8a:
0b:49:6f:7f:8f:d8:cf:dc:0b:a5:79:fe:de:4c:d7:5a:3d:89:
71:01:0b:07:72:df:f3:fd:ca:90:22:75:d7:67:ad:7b:af:83:
b1:0c:01:6f:52:d5:f4:5e:9a:56:03:e6:c4:78:43:39:0f:c1:
d6:82:a0:54:84:b6:44:00:dc:a5:82:dd:6d:3e:b7:bf:0a:61:
1f:f4:32:f2:2b:f6:3b:39:25:ce:94:a1:50:1c:dc:b5:bf:a3:
7a:32:75:09:d3:ba:ea:c5:cd:05:28:cb:e7:c4:1e:61:ef:50:
1c:7e:a4:1a:b3:d6:19:8c:31:5a:6e:86:9c:73:d5:0c:f3:0c:
7f:7b:0d:62:e9:38:3a:68:f1:15:c7:71:a8:d9:e0:5e:a0:2e:
bc:72:57:64:b2:30:5c:be:cb:be:c5:3b:5e:17:90:39:98:9a:
cf:b2:19:48:ce:9c:e7:8a:8a:12:72:2e:e9:47:ae:84:0b:2d:
84:06:0e:fe:2a:a2:52:61:63:40:9a:ce:e9:68:f9:3c:8f:25:
5f:b8:a0:45:0f:b3:bc:5d:1b:fc:09:bc:7a:75:ca:60:fb:2b:
1e:26:b7:f0:0d:56:1a:dc:05:b7:07:28:f5:7d:37:59:7c:e6:
49:57:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:59 2025 by rpki-client