Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: DA0UMWzpJaXJmuFTZuEggQ6yTp1FI1RyhAGPQEeHJjU=
Subject key identifier: AD:D2:F7:34:68:5E:B0:A9:07:FE:92:FF:73:57:67:E7:0A:74:3A:7A
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0197B7455ED7D1BE1541385DF3E94A9BE4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 12F6
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: RmjLoY+r0Igfp3s71wa2qua0UQwHqQXYYcKNUCq6FfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5e:d7:d1:be:15:41:38:5d:f3:e9:4a:9b:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=add2f734685eb0a907fe92ff735767e70a743a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:03:bd:05:0a:1c:2c:15:0e:df:d0:35:ab:
36:51:ee:78:e9:a5:2f:24:fa:01:bd:a1:7c:1e:9f:
88:19:37:46:7a:d4:7f:c2:6d:f2:4a:f9:ab:1d:1f:
8a:62:b0:53:ff:96:4b:ed:d0:d6:10:d0:8e:ae:73:
f0:15:17:05:68:9f:26:5e:12:5d:a8:aa:63:63:f2:
40:58:17:1a:21:dc:59:b5:11:a6:40:ab:13:69:df:
b1:21:9e:27:b4:b6:e9:8a:84:35:e1:06:e1:07:00:
0e:0b:c6:17:3a:82:fb:1c:b3:ff:0c:46:64:7b:a7:
18:28:99:0e:98:9c:e3:20:76:8e:bf:78:9f:f5:51:
ae:e7:aa:72:2c:55:9b:6b:73:98:a3:c5:69:0d:7b:
66:28:dc:06:2a:e6:ab:48:25:69:6f:de:b4:d6:ff:
f3:68:1d:9e:91:d4:cb:22:79:72:bf:da:b5:8c:9f:
f6:fc:d3:00:97:5b:14:52:32:0c:b6:8b:bd:57:f6:
c4:23:24:bc:c1:34:bd:53:88:dc:84:7d:b7:76:f7:
19:81:01:ba:98:1d:85:3f:a4:0c:a7:ae:d6:42:77:
06:3f:2b:ab:e5:15:dd:05:1d:61:1d:62:4a:aa:94:
17:e9:2c:b4:b6:14:bf:25:0e:8a:4b:33:35:6a:07:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:F7:34:68:5E:B0:A9:07:FE:92:FF:73:57:67:E7:0A:74:3A:7A
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:01:52:63:b8:1c:88:d9:15:4c:19:72:b4:2c:31:7c:4f:
e6:0f:2c:d7:e9:01:7b:dc:aa:51:e4:7f:60:e1:9b:ae:a1:83:
4d:0c:f0:25:b4:b3:a6:48:0b:b1:e3:55:31:e3:ac:fc:17:c3:
ac:93:3a:71:01:29:58:f0:cb:2e:b4:c5:53:b1:5d:5b:45:c1:
24:d3:bc:05:d7:b1:2e:97:3f:bb:93:51:d3:0b:3f:24:0f:b4:
c3:2b:af:b5:98:78:d9:72:fa:06:a0:9f:8d:24:4e:56:1c:59:
fd:72:85:b7:35:15:03:e5:28:b5:8c:a5:a1:3b:74:3d:70:3b:
03:97:1b:b3:d8:68:cd:09:10:13:1f:4f:6e:45:69:79:f3:e9:
df:af:84:ab:b2:c2:07:5c:c8:5a:68:69:b0:cd:76:95:a9:ed:
9c:08:e3:d5:23:34:d2:21:62:eb:a7:57:ba:93:98:21:a9:56:
03:d0:1b:8b:bf:78:f3:41:83:34:1d:84:14:b4:3a:e6:3f:d0:
4e:49:bc:ba:74:a7:1a:c8:ff:13:9a:1f:ea:78:21:d0:b0:99:
fb:de:5c:3a:64:cd:f2:c5:92:27:d8:a9:95:15:d6:23:04:6a:
38:6b:b9:0e:88:27:7a:2a:4e:8e:39:28:f1:0c:f9:90:38:ac:
05:21:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client