Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: Tir7l4wOsj6Thso8ieJQIb5gZOOhNZvKj4wnACw7cwA=
Subject key identifier: 0D:09:26:6E:07:F9:92:92:B1:46:9D:E7:4F:79:20:CF:CE:E2:49:1E
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 019A19869D33CC9C3A1C60B4A2223CDD7894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 1432
Signing time: Sat 25 Oct 2025 04:00:43 +0000
Manifest this update: Sat 25 Oct 2025 04:00:43 +0000
Manifest next update: Sun 26 Oct 2025 04:00:43 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: PLlUZ/B3K8RiSCvrhUP9ecTkndAOeFR7MASHVG8QBGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:9d:33:cc:9c:3a:1c:60:b4:a2:22:3c:dd:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Oct 25 04:00:43 2025 GMT
Not After : Oct 26 04:00:43 2025 GMT
Subject: CN=0d09266e07f99292b1469de74f7920cfcee2491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:b4:5b:5e:65:bb:f3:ac:08:4e:43:df:4d:
db:ae:73:b3:a0:bd:80:6a:ef:c8:64:b9:ec:5e:50:
c5:e5:50:72:1d:e7:e1:ab:e4:b7:fe:a4:cf:93:ce:
26:9d:e9:b4:b6:56:3f:4e:a5:d9:ce:b0:1e:d5:ef:
20:8e:73:2c:f8:82:78:f6:f6:ec:0a:67:88:f6:64:
15:1a:db:b8:6a:4a:a1:b8:fb:e4:89:7f:d1:86:69:
b0:18:55:b5:9c:6f:ef:16:8e:02:fd:c5:6d:31:f0:
94:30:06:7b:9e:96:0a:31:b8:58:85:20:69:de:b1:
f5:95:84:d2:d5:16:a8:76:2e:87:b4:15:95:05:84:
29:dc:14:5c:f4:09:37:19:d2:87:10:66:07:f6:0d:
81:2b:2c:4b:75:e1:33:89:4e:ba:32:b1:fa:82:b9:
36:20:ee:7f:1f:b5:5d:1d:ef:ff:37:15:34:5c:a6:
76:31:95:ac:cc:36:49:14:0c:74:12:63:f2:2e:92:
ee:9d:05:13:e9:0c:04:c0:c8:07:a9:6f:aa:e8:79:
18:c0:7b:9e:25:bb:c6:ed:07:83:75:1e:08:dc:b5:
47:9b:27:23:6a:09:17:4a:02:2e:03:51:7f:83:a9:
e6:9f:83:17:ae:05:b1:23:0a:f1:10:50:6d:39:c7:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:26:6E:07:F9:92:92:B1:46:9D:E7:4F:79:20:CF:CE:E2:49:1E
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:d9:80:00:15:3c:07:fb:d1:42:4c:ad:ed:91:f3:eb:1c:
24:1b:d4:3a:32:62:c7:64:50:6f:eb:be:5e:4c:0f:5a:f1:78:
e2:3b:7a:da:8c:59:f3:e1:ca:ad:66:f1:1b:e6:d3:8e:96:3c:
b6:55:d1:58:4e:88:7e:45:29:ae:95:84:e3:68:57:d0:ea:39:
f8:5d:98:5a:30:e2:01:f7:64:d6:1c:19:12:1f:cd:51:02:9f:
38:16:1c:ef:20:a9:e8:50:88:20:3f:33:1a:e1:1f:a1:f3:e2:
41:d7:46:b0:6b:d7:0f:21:fe:ad:77:f2:ce:c5:bb:19:15:f1:
13:c7:a1:8e:4d:91:2b:47:94:9a:da:68:8b:4c:80:85:59:14:
45:a6:9e:1c:af:f5:cd:69:f3:55:a9:c4:c0:16:6b:c4:5d:63:
93:af:6c:ff:c3:2d:29:ba:33:20:6e:a2:58:c4:37:95:72:4d:
1d:34:29:29:ed:0d:3f:a2:99:7f:0f:d0:bc:58:8f:4f:14:ca:
6a:76:3c:05:d5:f8:c7:7f:9b:3b:af:95:ba:76:06:3a:75:e5:
4a:d9:fa:26:2e:32:3a:95:ed:d1:62:84:db:07:f1:b4:ac:02:
e4:3a:b2:3b:26:1e:4c:23:03:96:8b:49:81:d4:b7:ed:08:47:
f5:8e:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:14:19 2025 by rpki-client