Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: 23ItPQVh28m6kgnSNYcr6N+uGLlLoCyiXsgY2JUFNBA=
Subject key identifier: F8:6D:C6:89:F4:A3:0D:D5:A2:39:94:10:4E:14:1D:97:DA:2E:2B:74
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 019A51197708257D31C94671C51537EF8A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 23:00:14 +0000
Manifest this update: Tue 04 Nov 2025 23:00:14 +0000
Manifest next update: Wed 05 Nov 2025 23:00:14 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: BwMxmNb0wF0OgePmWdiBZcAHUAgNowlU4yjLv8L2wD8=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:77:08:25:7d:31:c9:46:71:c5:15:37:ef:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Nov 4 23:00:14 2025 GMT
Not After : Nov 5 23:00:14 2025 GMT
Subject: CN=f86dc689f4a30dd5a23994104e141d97da2e2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:b8:99:a0:a8:1e:30:a4:20:f9:eb:36:4c:
74:a9:a4:67:c1:ed:a9:be:33:6a:04:0a:a7:b2:dd:
04:70:e2:89:36:d2:a2:7e:ad:a7:27:94:4b:65:f9:
dc:e0:d0:18:4b:e2:4f:14:8e:cb:e8:b7:9b:ab:e1:
54:a8:b7:7a:10:73:2a:a4:f1:3f:71:3c:7d:4e:28:
a8:79:40:d6:3f:12:46:6c:03:eb:f9:61:da:7d:03:
3c:04:e3:ef:3f:43:8a:0f:72:48:fe:9f:db:65:36:
91:a9:5f:6a:82:5e:04:dd:d9:08:35:0a:32:95:20:
57:a5:53:3e:1b:00:1f:ab:35:12:ce:d1:db:c3:37:
16:ec:a7:91:f3:92:c7:93:da:3e:65:d3:c4:94:39:
51:32:02:02:ef:5a:7a:1b:68:b2:97:77:04:f6:ac:
f3:34:77:81:8d:ff:ff:32:f4:5c:13:37:1a:75:d1:
d4:5b:26:a7:75:5e:e6:1b:c3:a6:06:3d:6e:c3:f8:
42:f5:26:d4:59:10:fa:5e:43:6b:af:62:5b:07:d8:
17:8e:34:ff:a2:1c:8c:04:7b:ec:a9:dc:39:2b:9b:
37:3e:12:2b:2f:6f:3f:3b:ac:38:f7:43:7d:f8:87:
58:24:2c:1c:ca:ba:2e:79:6b:6d:b9:66:53:79:07:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:C6:89:F4:A3:0D:D5:A2:39:94:10:4E:14:1D:97:DA:2E:2B:74
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:00:a1:08:18:81:71:9c:5e:75:7e:52:b1:68:f5:5d:49:
7f:05:19:e6:9f:64:b0:89:ff:7f:58:be:a7:fd:a7:48:35:1c:
ac:25:20:50:66:1d:fe:19:8e:59:d1:f0:0f:81:fb:a6:16:6b:
b3:5b:7b:96:3b:92:ba:69:fc:b2:91:ac:cf:00:42:0e:5c:74:
15:a5:70:9e:1f:04:2a:2f:cd:e6:77:fb:a7:f5:ad:b7:0b:7a:
3d:e3:42:29:44:55:1a:f3:79:e7:7b:66:a2:43:6e:f3:5f:84:
6f:51:ff:76:3f:9d:15:32:de:a5:6c:0e:a0:e7:d4:6b:a9:57:
31:26:3a:b8:b1:7a:33:d4:3e:f0:55:69:94:36:48:ae:ce:27:
ac:d9:20:c0:15:e3:0a:43:55:ba:11:78:fb:cb:92:19:fd:79:
c4:19:78:42:36:ec:f5:6b:85:fe:a4:5f:d2:e5:49:70:03:3f:
0d:6e:f7:c1:3f:a1:02:20:7a:03:0b:10:af:f5:09:90:47:2d:
b1:1d:16:f3:37:c5:31:18:94:25:93:d4:48:36:28:52:69:d2:
73:21:78:08:ff:33:68:bd:c1:3d:eb:44:b3:52:3d:72:25:ef:
91:da:b6:c1:85:b8:8b:f6:c5:db:b2:de:e3:b9:20:e2:ba:b9:
c7:94:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:53 2025 by rpki-client