Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: qeFyzW8+DpRjq3+M8jBbRwg5nmbYivVGLwaXURt1Gyg=
Subject key identifier: 18:EB:BC:D4:DF:8E:F9:F1:DD:AE:72:4D:EA:77:43:C5:E8:13:CC:C3
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019A4EF42FDDB786C04A491A58DC2E1662CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 160B
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: +hZeb0btnVYufzSdpNzzcemkVwaM/cTdPHHE/6+BVEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2f:dd:b7:86:c0:4a:49:1a:58:dc:2e:16:62:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=18ebbcd4df8ef9f1ddae724dea7743c5e813ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:c2:30:bf:70:f5:10:99:14:32:fc:52:6d:
fb:d7:01:58:d2:a3:44:bf:55:11:46:ad:96:6d:69:
70:e3:dd:91:ba:5d:e2:7d:76:e9:dc:77:fd:df:84:
69:ed:cb:09:fe:45:de:66:10:10:f9:b0:87:9c:0a:
62:4d:d9:7a:88:05:6a:82:bd:b3:6c:21:59:43:3d:
76:b7:86:8b:17:b8:73:b5:5e:80:6a:7e:c8:d4:f5:
fc:72:ae:6d:c9:ff:f3:d6:93:9f:36:b5:60:ba:85:
9d:52:d3:e9:97:98:e6:d1:2a:60:3e:29:0a:87:2b:
b5:84:77:e0:75:5a:21:3b:3b:d6:a4:d7:21:b6:ca:
ba:b8:df:3b:06:58:2f:eb:68:0b:dc:6e:8d:e4:b1:
77:57:75:5c:68:26:88:09:40:44:7e:ec:d8:70:68:
06:84:6d:e3:01:eb:22:47:6a:d8:7a:20:56:c2:73:
0c:5d:3b:62:78:b1:c3:5f:02:72:43:08:55:ca:ce:
e1:47:c5:8e:ed:fc:fe:1b:ed:0e:71:77:a9:05:c4:
3a:b1:86:fe:34:64:47:72:49:29:1d:85:05:bd:e8:
91:07:02:63:0f:05:30:94:a0:34:aa:cb:67:89:ea:
eb:d9:85:10:31:a2:0e:1c:47:26:8f:f9:a3:cc:c1:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:BC:D4:DF:8E:F9:F1:DD:AE:72:4D:EA:77:43:C5:E8:13:CC:C3
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ad:27:57:3b:ef:64:06:8d:40:77:fe:23:62:07:e3:4f:56:
af:9c:06:47:08:7e:e0:0f:27:be:d5:83:2e:59:4c:24:ad:7a:
79:69:db:f5:7e:c9:eb:d8:ee:59:96:23:eb:98:4d:9a:72:9c:
b9:6d:ea:a0:f6:89:06:74:d4:c0:e2:be:76:e0:6d:8f:4e:e0:
45:3e:ea:12:c7:cb:8f:97:ae:65:5c:28:8c:6a:c4:1d:e2:66:
cc:3f:aa:50:98:4a:32:e1:f2:5f:b8:c7:b5:b0:f8:79:74:83:
de:97:10:4e:24:10:14:6e:58:22:27:40:db:8b:85:56:b8:61:
d0:b5:95:30:d7:87:69:a6:10:f2:8d:a6:b7:39:22:ee:a2:09:
db:db:2c:fc:d0:e2:03:fa:71:c5:35:e2:4b:6b:50:54:c9:18:
8a:5f:2a:f4:7d:2d:07:dd:1b:bf:dc:a5:9f:8d:d4:ac:9c:fc:
76:fb:88:68:b7:17:b6:92:46:47:93:56:66:55:3e:03:76:46:
15:fb:f9:0d:41:ea:44:5d:86:5d:45:2f:86:ba:1e:2d:38:26:
98:3e:2c:50:f0:ed:cf:92:e0:5a:fc:ad:b3:ef:cd:73:23:da:
b4:f4:e3:6a:7f:41:b4:11:9a:cb:ec:c8:1c:d7:e1:d2:49:9f:
9f:d0:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:15 2025 by rpki-client