Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: w5RiEzzBXgTtiTQZJYAjYPYdV/3thtQrVldIAjPbnrE=
Subject key identifier: 01:92:B7:93:36:47:E3:C9:89:82:F6:FC:EF:CA:E3:96:C0:D6:97:D8
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 01988F903C1DC5A9465414B69B870E68F514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 1366
Signing time: Sat 09 Aug 2025 16:00:51 +0000
Manifest this update: Sat 09 Aug 2025 16:00:51 +0000
Manifest next update: Sun 10 Aug 2025 16:00:51 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: XBEgo7s7ONVm976Vd4yP0Vit9Jm3McPaRmR66PqKINI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:3c:1d:c5:a9:46:54:14:b6:9b:87:0e:68:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Aug 9 16:00:51 2025 GMT
Not After : Aug 10 16:00:51 2025 GMT
Subject: CN=0192b7933647e3c98982f6fcefcae396c0d697d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:98:d4:42:ed:8c:ed:72:8b:be:4f:8d:dc:
6e:a0:73:2d:88:69:59:f2:4e:88:db:f2:14:f1:86:
18:71:7e:7c:65:38:0b:f3:3a:a1:1d:6f:b3:79:1a:
ad:1a:a2:a1:27:f0:bc:be:40:46:45:c6:2f:7c:a6:
60:39:bb:81:55:2a:78:ee:36:07:6b:16:15:d9:5f:
1d:6a:8d:61:c4:c3:5f:09:f1:21:19:57:28:68:9e:
c7:f6:fd:1b:7e:43:29:b7:ed:e4:34:e7:a8:33:ee:
d3:66:99:5f:36:b1:7f:de:e0:b9:a2:ae:88:b6:59:
b2:49:30:8c:d1:57:68:69:30:ac:f7:cf:5e:ba:5a:
ea:16:32:0a:37:af:3b:76:b4:7d:35:c6:f6:c7:6c:
1c:96:52:48:77:21:6e:25:9d:0a:7c:1f:b3:f0:e1:
58:2a:15:14:24:40:ba:3d:bb:2d:16:a9:73:70:37:
e7:cd:65:db:15:f3:b1:11:4b:99:19:5c:31:cd:2d:
21:9a:3c:bb:76:c9:50:4d:b2:26:a5:97:97:74:be:
08:d7:fd:8f:dc:b6:0b:14:c5:45:0e:ab:b5:24:51:
19:0d:85:8a:5e:e5:46:db:b2:8f:ae:8b:b0:e4:bf:
30:fc:ef:a8:b4:61:29:0b:a0:96:19:10:57:05:82:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:B7:93:36:47:E3:C9:89:82:F6:FC:EF:CA:E3:96:C0:D6:97:D8
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:d0:ea:93:df:04:22:67:6e:f8:04:c8:a3:48:79:6a:a3:
cd:e2:d2:24:99:bb:9d:22:97:ad:5b:a3:fc:f0:95:40:cc:6d:
b4:52:e0:02:29:0e:6b:d2:25:78:3f:00:8d:37:10:75:58:70:
8c:81:71:e4:c7:4e:e6:b9:35:7a:8b:ea:a1:f8:72:2d:35:3e:
e0:77:fd:56:ea:25:41:d4:de:f5:23:1e:b2:82:69:51:8e:d5:
f7:d9:f3:6c:c3:63:81:11:24:5f:f2:6d:27:19:e8:34:a3:29:
26:8c:3b:20:18:3a:0c:d8:26:ae:b2:ff:7f:5d:ed:9f:cd:ad:
e2:05:35:3a:73:44:04:89:dd:6d:55:22:23:8f:3b:06:b7:99:
eb:3f:58:54:ed:5d:92:84:a1:bc:c3:6c:ec:c5:7b:a4:c7:0d:
96:9e:3f:2a:28:1e:81:7f:2d:7f:36:bb:38:24:a9:8a:85:a3:
f1:08:2c:76:66:82:b9:9e:6b:bf:75:c9:9c:d2:ff:e5:c7:aa:
02:16:ef:af:24:a3:7d:1e:4a:76:2f:0b:f6:aa:e0:d3:fb:b2:
d2:66:62:73:21:3b:65:e5:f3:d9:6c:07:fb:59:7b:b9:31:04:
2d:15:74:cd:63:ac:a2:ce:76:be:7e:f7:33:36:43:2d:81:ab:
e6:b8:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:46 2025 by rpki-client