Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: HuuGYp0jbFjo016vVnt7VmPg5qVR/ykn5IHf0eh7FC8=
Subject key identifier: E9:22:37:AE:6A:B9:C5:35:01:EE:00:48:BB:07:DF:40:53:08:9E:CE
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0197CA951955CA0F1F78BFF9EA591022C06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 1300
Signing time: Wed 02 Jul 2025 10:00:58 +0000
Manifest this update: Wed 02 Jul 2025 10:00:58 +0000
Manifest next update: Thu 03 Jul 2025 10:00:58 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: ZRG1L9BHU6P4m6ARvwfZjnwQUrJOrgVzcDe19cM2zP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:19:55:ca:0f:1f:78:bf:f9:ea:59:10:22:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Jul 2 10:00:58 2025 GMT
Not After : Jul 3 10:00:58 2025 GMT
Subject: CN=e92237ae6ab9c53501ee0048bb07df4053089ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:8b:7d:b0:b0:42:0e:d1:18:1d:73:9f:a1:
07:31:4e:0d:44:94:54:94:29:72:b6:0e:31:cc:94:
f4:51:40:72:c8:27:72:03:0f:20:57:29:e8:58:6f:
ec:c9:ad:67:a2:17:82:4f:5f:6d:76:96:fc:ed:d8:
4d:14:1e:9c:28:51:7c:4e:ee:5a:90:ff:14:1e:24:
14:07:df:ef:e7:b2:d2:2a:43:22:e0:c5:e7:37:b9:
a2:cf:b9:32:b3:a5:24:23:bf:8f:f2:b5:d3:64:83:
5e:6c:cb:bf:b4:ff:3f:45:63:9e:56:70:bd:a8:06:
16:ca:24:11:7f:ec:f2:6c:30:9d:e1:7e:c2:ad:94:
76:6e:eb:24:aa:12:f0:8b:1e:a8:e9:50:b7:77:36:
5d:60:83:52:16:88:db:52:51:81:d6:a7:ab:c9:27:
e8:db:ea:57:79:cb:65:b7:13:d4:72:2f:b2:d6:c6:
bd:d3:16:8c:79:aa:33:6b:72:36:96:ef:70:60:23:
af:bc:59:48:ab:a9:8c:9b:68:b6:da:0a:ef:25:c0:
0c:8f:e0:bb:64:f6:d4:ea:d9:ff:b0:98:0a:5c:6b:
23:57:72:37:30:63:94:47:e9:7c:1c:73:69:14:ba:
d9:22:ff:48:f2:4b:e6:75:33:04:d6:8a:6e:a2:56:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:37:AE:6A:B9:C5:35:01:EE:00:48:BB:07:DF:40:53:08:9E:CE
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:81:ef:2f:6a:36:78:9e:03:18:59:32:f7:bd:b9:e2:34:5f:
f2:4b:d5:21:46:9b:76:c4:70:ce:c7:4f:68:ce:a3:c1:07:93:
22:f4:44:07:1e:57:53:85:7e:8a:c8:4f:af:a0:94:40:ed:21:
22:0d:04:e4:4a:b1:38:da:9a:47:3e:5c:fb:9e:4a:44:67:b6:
ee:d8:66:8b:b1:f5:b5:0c:cf:81:c5:02:e9:68:77:73:07:6a:
7b:8d:9f:1d:cf:c9:6f:6a:08:0d:2b:21:d7:97:40:d2:1e:f7:
7c:23:42:79:bd:33:b1:8b:6d:31:37:5c:88:a0:64:02:c9:3e:
1d:59:d3:f1:cd:d7:07:ea:63:62:8b:c7:9a:db:64:4c:0c:ef:
ab:47:b3:4a:28:c6:b2:b8:6e:11:8a:39:70:ac:d7:c5:59:49:
56:43:43:20:eb:50:64:fa:a3:9b:2c:ee:e9:43:21:09:0a:be:
9e:39:cd:16:29:da:62:72:41:18:71:c9:41:0a:0c:ac:3b:a0:
0f:62:c8:d5:ce:4e:ad:03:92:48:8b:b6:c5:00:3b:32:3c:d2:
91:53:df:62:79:2f:41:f2:f1:bd:74:1f:d6:c7:3e:10:53:17:
cc:da:cb:ef:d8:d9:19:ad:68:90:68:02:6c:51:ee:4c:2f:03:
16:1f:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:09:54 2025 by rpki-client