Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: I9IOc3g+ooGs+0X3phVVsjleBhyIOiYeHaGhlKkQKMY=
Subject key identifier: 8B:3B:88:55:08:0A:66:AC:14:F5:E7:7C:96:12:79:46:16:EA:11:BF
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 019771BF6442DA0A566C565029B12FC3F834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 12D2
Signing time: Sun 15 Jun 2025 04:00:57 +0000
Manifest this update: Sun 15 Jun 2025 04:00:57 +0000
Manifest next update: Mon 16 Jun 2025 04:00:57 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: KzlzDMKF6oPUr0Krpf5E8RsnCvSOnZIUCzgfXsA8zYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:64:42:da:0a:56:6c:56:50:29:b1:2f:c3:f8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Jun 15 04:00:57 2025 GMT
Not After : Jun 16 04:00:57 2025 GMT
Subject: CN=8b3b8855080a66ac14f5e77c9612794616ea11bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:ff:8a:c9:93:ec:4e:bb:14:97:e1:38:2d:
99:3d:ba:fa:a2:e2:40:be:95:33:e4:21:7b:61:0c:
cd:ca:e7:37:9e:cc:36:4c:dc:6f:c1:ef:28:ea:bb:
a2:5e:b7:60:d7:a2:0d:84:b7:0b:e8:57:46:5a:f4:
36:53:d4:98:49:b3:0c:50:10:f8:ce:91:e0:09:21:
db:a0:3d:22:30:f4:56:14:c2:f6:9f:28:92:a9:30:
00:f3:aa:32:b5:1e:5d:aa:59:7d:dd:c1:03:f0:d1:
79:bc:20:bc:7a:ba:63:f9:0e:1b:11:25:33:01:db:
c4:1e:e1:d1:16:33:44:c7:ee:bd:7f:1a:79:84:9e:
6d:d1:34:89:ff:70:77:83:71:82:35:49:a6:e6:7a:
7d:f2:51:9b:b3:b2:67:67:fb:9a:2a:c0:56:56:c8:
24:ce:ab:95:34:ad:44:ef:e4:76:e6:19:8c:29:3b:
b4:47:2b:44:69:12:f2:bd:b3:94:fc:3f:7e:2c:cb:
9d:59:27:14:c8:52:24:c9:b6:0d:31:8f:81:2e:94:
f5:99:42:c2:29:68:6c:28:e3:9f:ed:52:81:9a:dd:
3b:1c:91:96:85:41:a4:83:8b:38:ee:05:44:c7:16:
8e:30:81:a9:00:f9:8f:41:d6:e5:30:79:1d:ad:07:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:88:55:08:0A:66:AC:14:F5:E7:7C:96:12:79:46:16:EA:11:BF
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:4e:16:d2:cc:c1:c9:94:96:92:bb:e2:9d:f6:28:66:1e:
d8:7d:67:03:9c:23:d6:19:95:b8:8a:ff:cf:4b:e2:d6:f8:d2:
24:d7:82:db:0c:29:42:74:6c:f8:09:aa:18:a4:78:2e:8e:36:
c1:1b:53:17:91:50:ca:06:4a:78:7c:f7:f7:33:5c:fe:c8:c7:
02:48:fa:85:b4:c7:0a:0b:b1:a0:56:70:f4:55:a0:0f:cf:31:
c5:e9:0c:b5:26:59:ed:4e:0f:19:7b:fd:9d:2c:dd:c8:b7:e7:
4b:9b:28:30:49:6a:04:d2:e6:c0:6c:43:b6:1a:74:26:e0:7c:
84:07:f5:15:08:db:2c:eb:c1:36:1c:98:b5:20:4c:dc:e5:4c:
68:08:ca:06:81:2b:f9:13:5c:09:74:3d:68:0c:2f:0d:77:86:
51:96:0a:06:e2:5d:dc:c1:45:f2:5f:f5:9b:1b:c0:e7:a2:c9:
e7:bd:fa:ae:db:39:0e:b9:50:a5:81:b1:9e:36:cd:f2:43:cb:
1e:0a:06:ce:b2:9f:90:da:05:20:9b:42:00:b4:07:ce:79:ad:
27:0b:ef:9b:43:cf:86:15:ea:80:25:df:e0:59:1a:ac:32:b0:
08:0a:7b:2c:36:40:5e:72:d9:a8:87:33:a3:43:0f:98:03:af:
0c:0e:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:32 2025 by rpki-client