Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: iEMN2zA6nkrpRJT/vnraaxZkrMR9OBv6noj/qFQOcNE=
Subject key identifier: 87:7E:0A:E7:8E:EF:D2:F6:F0:AC:FC:B0:66:E3:96:29:DC:5C:46:E9
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 019845BF56383AAA769A0405866A3B2006B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 08:00:23 +0000
Manifest this update: Sat 26 Jul 2025 08:00:23 +0000
Manifest next update: Sun 27 Jul 2025 08:00:23 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: Gkij5qeh/CDvo9Q5YmZmuLGclXs/JeLrbBBGMJjtTVc=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:56:38:3a:aa:76:9a:04:05:86:6a:3b:20:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Jul 26 08:00:23 2025 GMT
Not After : Jul 27 08:00:23 2025 GMT
Subject: CN=877e0ae78eefd2f6f0acfcb066e39629dc5c46e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:5e:f0:96:cd:aa:97:64:16:ed:bf:a2:ce:
85:f9:30:01:e4:ef:31:4c:8c:ee:ae:c7:f0:b4:53:
88:a2:c3:5e:56:1f:ee:d5:96:01:c8:55:1d:7c:93:
79:8c:c5:ca:df:40:0e:9c:ae:7c:0e:94:2c:61:4e:
df:9e:69:ca:5e:38:8c:c6:ec:31:67:9c:e7:b8:49:
74:63:d5:44:8d:b9:78:7c:7f:37:61:4d:82:12:43:
90:9e:03:66:af:d2:14:d2:9a:a7:26:eb:82:2e:e9:
fc:81:bc:c9:e6:aa:5f:08:ff:92:03:0e:33:4b:bb:
a8:e6:1f:fa:72:0d:8c:87:b5:a1:b5:1a:0b:67:cb:
ea:2a:2f:ce:27:f8:44:76:62:1c:4b:32:f9:c5:35:
35:66:e9:b2:1c:c6:8b:69:5b:df:fc:51:df:4b:da:
91:e1:d4:bc:f4:18:57:48:6d:3d:7d:26:cc:04:7a:
5c:8f:c4:f7:97:74:54:bb:2c:d6:4c:54:75:da:e9:
a7:33:6f:39:9d:61:f6:c9:e0:11:ce:0a:8e:b6:ef:
d9:ea:05:9e:e5:78:ed:5e:fb:7c:e7:b6:b4:6b:ee:
67:90:f4:2f:3e:bc:e3:b9:33:72:92:ae:36:4c:76:
40:8a:e2:c4:9f:09:43:77:ec:a8:b2:c2:4d:5d:93:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:0A:E7:8E:EF:D2:F6:F0:AC:FC:B0:66:E3:96:29:DC:5C:46:E9
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:5c:a9:6b:7e:5b:06:9d:e9:3f:36:df:fc:17:66:4b:4d:
e9:20:69:17:8b:91:34:b5:b6:68:2c:ec:b0:9c:d6:65:3d:be:
9c:43:ca:dd:2b:bf:08:c7:90:89:de:24:8c:d4:ce:b1:61:40:
1d:63:90:5d:2c:78:60:ca:6a:90:6c:be:70:44:15:35:9b:fd:
35:da:2e:49:65:22:d1:6a:68:d7:99:0a:1d:94:0f:b5:97:eb:
d5:c7:e0:20:d5:18:f5:62:64:3d:b7:6a:57:72:b0:c6:8e:1c:
9a:a5:86:c3:f2:79:a4:ff:c6:ef:99:60:55:18:1c:08:a9:2c:
2f:96:52:b9:70:8e:f2:96:b5:86:1f:f5:75:da:8e:10:06:49:
85:78:9c:c9:a4:3d:f3:08:da:c0:e6:1b:e1:27:32:93:7d:79:
a2:1a:a9:35:b7:7f:02:04:e3:ef:01:13:ec:37:4c:c7:b2:5e:
fa:32:f4:52:75:0f:4d:57:e6:22:f0:6b:98:0d:c5:da:aa:05:
2c:52:d6:2a:56:67:cc:77:06:b1:fd:69:f7:1e:75:ef:65:03:
7e:64:d6:d9:72:30:87:f1:91:f0:fb:2f:22:13:b7:c0:a2:df:
b6:e6:2d:ae:be:e2:2b:56:41:e0:70:f3:91:a6:8c:71:c1:04:
c8:a1:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:17 2025 by rpki-client