Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: oS4bjoU368GpMobkqqxqRSgpTobZdoY22utKPLlIyuc=
Subject key identifier: EB:51:F5:35:AE:54:BB:22:0D:76:ED:70:EB:E5:79:FF:8D:8F:96:5F
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0199FC8F4D8D2E8E97B94B48735B0AF578F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 1423
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: f45qZw5rEnu/mDcrHqGracUV2lzQzG2rvltRjxpYq/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4d:8d:2e:8e:97:b9:4b:48:73:5b:0a:f5:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=eb51f535ae54bb220d76ed70ebe579ff8d8f965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:96:ca:8b:09:16:20:98:4a:56:14:16:7f:
a0:27:d2:ca:0f:58:63:b2:cd:15:a7:5d:32:80:50:
e9:b2:51:00:83:38:23:e0:be:f4:b0:92:25:68:07:
dc:e8:8a:ea:35:86:cc:97:58:b9:02:11:6b:23:12:
69:76:d1:de:4c:f9:bb:ae:ed:90:d4:49:26:e1:33:
90:a9:2b:e5:d3:1d:cb:6c:7e:5b:de:d7:07:48:d9:
3b:69:db:28:eb:91:ee:7a:fa:f7:b5:81:38:df:c5:
d5:72:70:e8:b6:d4:01:7b:c2:11:fc:ab:7e:b3:43:
5c:89:99:17:05:9c:68:f6:46:e0:09:f1:10:ba:b8:
1b:41:8a:90:4a:9c:58:a2:4f:9b:be:82:ad:7d:61:
84:c6:40:c8:30:96:5b:3d:2d:26:da:18:2f:29:43:
37:31:e2:ef:19:47:15:3a:db:3f:ef:c9:0d:2b:5d:
f2:ba:7e:f0:e5:7f:4a:1f:2a:64:c8:7f:24:9a:fb:
03:79:ac:96:7b:f0:e7:2e:dd:49:b2:ba:73:e1:5c:
e5:b2:bd:ac:9d:01:dd:25:c7:23:ad:d5:29:e6:c2:
f1:6a:55:d0:eb:ae:23:c3:54:93:10:a0:77:ec:0b:
37:66:81:67:45:12:0d:b4:88:bf:83:cb:62:31:95:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:F5:35:AE:54:BB:22:0D:76:ED:70:EB:E5:79:FF:8D:8F:96:5F
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dc:10:6e:49:39:1a:d6:c7:0e:ff:3b:f4:b9:4f:51:bb:f5:
7b:8d:b1:6e:c6:f8:cf:d6:86:1f:c3:a8:4c:7d:c8:21:9c:d1:
0a:b3:9b:9f:a0:fb:bb:8b:f4:09:7b:4d:5a:e1:cf:3b:b7:34:
20:45:8b:8f:b9:4f:f3:8a:59:37:f9:66:42:40:13:65:a7:a6:
0d:40:41:35:f7:7a:4b:1a:69:e0:57:1b:6f:f6:50:3f:98:c9:
9f:0d:2d:e4:d8:eb:b9:cf:3b:d1:83:c6:79:72:6a:71:02:f7:
1f:7a:6e:f5:29:b6:3c:32:49:02:b0:ca:c3:b7:bd:ba:9a:25:
2c:0f:5c:1f:fd:35:3c:f0:f0:3a:6f:8d:bb:4d:78:5c:a3:79:
de:04:88:5c:4f:92:24:ca:93:8c:41:1d:ce:73:44:94:ed:4e:
5d:23:dc:0f:43:68:0c:29:e0:04:4d:4b:65:c9:8e:46:e9:6f:
0e:87:c4:0c:52:77:a5:35:ef:d9:c0:3f:ac:45:0e:f3:9f:e0:
8f:46:25:09:22:08:e6:19:fb:a0:dc:8c:47:97:91:1f:85:f8:
10:ed:68:6d:66:84:2f:bc:b9:1f:7b:bd:00:8d:04:0f:ce:8f:
0a:c5:0c:01:c5:ed:14:56:df:d5:de:21:61:65:8d:9c:fd:e1:
a1:ce:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:13 2025 by rpki-client