Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: gXnNgfbMOSHyr3vB3lHmBzNlbkZ0yJmO4uN5NWoebKQ=
Subject key identifier: 0A:C8:D7:53:C8:BA:5B:05:4C:42:75:41:A0:2F:21:6E:AF:52:BA:CF
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0198D705A4BFF715A3B8C4858F35704F8D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 138B
Signing time: Sat 23 Aug 2025 13:02:07 +0000
Manifest this update: Sat 23 Aug 2025 13:02:07 +0000
Manifest next update: Sun 24 Aug 2025 13:02:07 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: HYrm8Yxc8osXcdbXhqDS8gx8ViYLVb9svekNptaAOLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a4:bf:f7:15:a3:b8:c4:85:8f:35:70:4f:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Aug 23 13:02:07 2025 GMT
Not After : Aug 24 13:02:07 2025 GMT
Subject: CN=0ac8d753c8ba5b054c427541a02f216eaf52bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:8b:68:e4:c5:04:b7:a8:0f:56:d7:c8:fe:
30:43:32:ea:7d:ef:52:ec:35:a2:08:3a:42:ce:34:
3d:e3:3c:66:79:e1:ce:36:ec:fd:21:09:3f:56:ac:
b3:b1:b7:fd:9b:2c:1e:7a:6d:d9:69:c3:b0:fa:7b:
2a:6e:72:85:72:5d:c2:d7:d7:93:94:de:db:cd:75:
e7:5b:5f:2b:2f:74:85:33:cf:69:2e:d7:ed:6b:0f:
6d:34:35:df:c3:ca:af:e1:26:79:77:ad:70:1e:92:
66:bb:0a:74:89:60:ff:83:c9:c8:f8:1c:96:8d:fe:
c0:1b:1a:1c:e4:69:cc:7b:b1:c6:fc:f5:f6:7c:0f:
2e:4b:ca:01:b0:4b:40:f5:92:32:c0:fc:3e:06:bc:
6e:63:20:e6:a7:98:85:dd:6a:77:f9:ee:2f:b5:e4:
b6:32:82:21:77:77:52:3e:cc:15:ad:a5:22:77:09:
6b:14:25:ff:96:26:33:28:3f:df:1f:83:82:ad:a9:
c3:7e:d5:12:5f:14:a0:2e:73:a4:b5:5a:77:ec:62:
b2:20:23:b6:c1:8d:7a:dd:bd:b0:6a:cb:4b:61:75:
f5:ce:7d:bf:3f:09:2c:55:db:91:5e:ce:21:65:08:
fd:bb:cf:14:b3:62:f8:69:68:07:b8:d3:fd:78:eb:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:D7:53:C8:BA:5B:05:4C:42:75:41:A0:2F:21:6E:AF:52:BA:CF
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:31:1d:b8:54:28:ba:16:15:c6:8e:5f:a3:37:da:6f:ef:
bd:31:63:36:90:b0:60:0d:05:12:22:9e:38:c7:0a:06:c9:55:
3d:0c:76:c7:7b:49:df:ab:49:82:ef:63:c5:9c:c5:e3:54:02:
d1:28:3d:e1:16:a3:39:fc:d6:53:02:3a:1a:85:33:1b:45:57:
b3:8f:01:ec:14:73:1d:38:af:74:63:e5:7d:0b:72:f5:f9:3d:
2c:9d:d0:87:2c:4b:cf:c8:a6:ac:47:37:89:e3:fb:12:e7:ca:
c1:02:d6:15:cc:b6:db:79:19:23:b9:fb:cb:50:56:0a:a2:41:
66:94:89:e5:1b:9f:05:6f:f6:14:ab:5a:8a:6d:06:70:55:e2:
2a:70:61:9c:72:4f:05:4e:9f:26:78:78:4d:5c:55:4f:62:fb:
6c:2b:8b:84:b5:3e:f3:a2:24:65:1b:e8:10:47:9e:c2:e7:a7:
2f:11:45:8f:2a:fe:b5:83:00:15:30:b1:2e:07:56:0f:df:2b:
11:04:4b:41:f8:53:33:27:f2:12:27:9d:1a:2a:50:de:67:37:
5c:55:f4:76:a2:e2:7d:79:20:04:72:3e:7e:92:25:46:87:2d:
78:b7:3a:59:39:5c:9e:a5:2f:57:ab:f2:e8:d7:d3:ac:18:f4:
90:b9:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:52 2025 by rpki-client