Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: lg8HjYoZzeI+wzicoWYDo/rjsRUmcz7y8cqR7SCiYak=
Subject key identifier: 43:E3:F1:EB:AF:21:AD:78:02:00:77:72:27:FD:C7:65:EC:DF:36:2A
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019A4E86A0C6113544C65845901B162E9839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0879
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: Nt+45FSedbCA3lft/NLTSUEufkA6Nr4wcIjQ3ZuD6v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a0:c6:11:35:44:c6:58:45:90:1b:16:2e:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=43e3f1ebaf21ad780200777227fdc765ecdf362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:30:45:9f:a9:1c:b0:61:32:ff:68:c8:dd:
c9:b8:3d:ed:57:89:35:47:9b:88:37:59:50:5d:1d:
51:71:a1:f6:aa:6d:af:35:4a:9a:11:8a:7c:9d:76:
2a:73:f1:d2:ee:f0:1e:d9:d5:c2:04:a9:24:ba:66:
66:f1:85:7b:e6:b0:ba:08:02:8c:c7:8f:2d:62:53:
f4:1a:9a:76:63:5b:e6:5f:92:6a:23:b7:9c:f9:0a:
ef:f4:9b:45:ce:bb:ea:f8:20:0e:fa:ad:44:f9:89:
1d:58:89:43:61:f3:4e:d7:7b:75:67:71:51:9a:30:
20:67:bd:a2:df:74:a9:50:ae:62:3e:01:f9:e2:96:
73:15:fb:35:e0:11:58:df:ae:32:35:ef:12:57:ef:
4e:9f:ce:8e:1c:88:32:e0:da:b0:a6:f6:cd:b0:79:
33:e0:82:47:56:dc:52:ca:66:be:50:22:8c:30:2d:
c7:86:47:e7:02:0e:36:82:8f:b5:9f:e0:01:55:eb:
46:93:aa:93:19:c8:19:90:b5:11:b1:f7:33:3e:04:
fa:c8:60:67:72:30:ca:51:07:8f:42:a4:4d:86:e7:
6a:3f:2a:da:20:5e:c4:eb:14:d7:c1:fb:e8:ac:ca:
18:bf:51:34:5a:03:b2:c6:0d:bc:f6:89:74:a0:76:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:F1:EB:AF:21:AD:78:02:00:77:72:27:FD:C7:65:EC:DF:36:2A
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e1:f0:8e:98:0e:54:25:cd:39:2b:0b:6e:00:c5:59:7c:92:
f2:4a:0b:26:79:c2:02:68:b5:90:fc:ef:5a:a5:7b:73:9e:1b:
6a:71:d4:d5:64:7d:1f:f4:62:11:39:49:de:24:8a:07:49:d2:
df:55:13:4c:bc:11:4f:7c:06:da:da:c8:03:0a:70:5c:95:05:
82:93:17:ee:1e:50:33:91:60:bc:86:1d:0a:0b:c5:bd:aa:7d:
3a:48:b5:1b:f3:06:7e:b6:d9:90:9f:18:cf:4d:d0:0c:86:52:
fd:91:a8:6c:ca:a6:bc:10:94:86:10:27:29:95:8a:10:e1:f5:
3e:9f:08:34:ac:c7:ee:16:6a:d2:15:75:d5:ab:89:1b:be:ab:
76:6d:8c:f9:c2:4e:4e:1e:30:39:ec:cf:4c:33:4f:c8:7c:99:
48:ed:5d:a7:a0:95:2b:9a:d5:47:6a:8e:40:9b:b4:18:84:b1:
17:5a:37:4b:ac:18:b6:99:1d:f1:75:db:6a:a8:48:28:d5:b2:
31:e1:2a:46:21:fc:31:d1:a9:85:e1:ca:37:ec:e8:a5:02:b5:
53:93:c2:1e:1b:d2:67:c7:8a:b9:7b:52:5b:af:8f:24:82:58:
0b:30:1e:19:af:32:b4:f1:f5:aa:4f:d4:ad:00:4b:ba:6c:b2:
fd:30:3d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:01 2025 by rpki-client