Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: xynORoDdjSAyaKNVBQ0x6fJv74crA3IOdJIBAc3c/sY=
Subject key identifier: 69:F8:33:35:B8:8C:79:5E:D1:A1:03:D5:17:ED:F8:A2:2A:3F:61:A9
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 019A24AF1DBFE7BDC123C8ABC47E2202C28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 08:00:47 +0000
Manifest this update: Mon 27 Oct 2025 08:00:47 +0000
Manifest next update: Tue 28 Oct 2025 08:00:47 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: 378t6bRq4RZnWq6IxP5hKcvjr4wSubvubiajE5hB5KE=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:1d:bf:e7:bd:c1:23:c8:ab:c4:7e:22:02:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Oct 27 08:00:47 2025 GMT
Not After : Oct 28 08:00:47 2025 GMT
Subject: CN=69f83335b88c795ed1a103d517edf8a22a3f61a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:95:a8:69:03:7a:df:cc:77:67:10:2b:f0:
9e:75:84:11:3a:71:64:85:e3:ed:a5:ea:35:a0:fc:
03:41:fc:4e:34:61:02:80:70:0b:af:ff:d3:df:b4:
b7:65:da:8e:b6:2d:5d:60:dd:33:ae:34:f0:fc:13:
cd:b5:4f:0a:de:07:fb:af:86:27:cc:19:32:19:a5:
a8:09:3b:68:fe:28:4e:f2:1a:67:13:d7:d7:77:39:
31:a6:9c:2c:47:4d:08:0b:c7:09:9e:f7:b3:7a:a5:
9b:f8:53:2c:9f:64:ca:92:9f:db:08:fe:1c:bd:50:
64:96:9d:39:f6:ac:7a:44:c1:ac:5b:02:94:f3:db:
81:6e:cf:d8:f2:b3:31:8b:f8:f3:40:aa:e5:4d:a9:
48:00:01:33:f9:2e:ae:a4:8f:df:fe:c6:84:a3:f0:
d7:16:d8:82:c4:ac:e4:3a:ee:2b:62:b7:f1:eb:43:
fe:6f:b6:c4:8b:02:f2:f5:4c:91:77:08:31:94:9b:
b9:a0:c1:e4:c2:ae:3e:78:65:75:86:e1:09:5a:2f:
e4:43:5c:3e:10:7e:fd:98:01:a3:12:03:36:1d:72:
d8:77:10:a6:34:e5:7c:c5:07:5c:51:44:51:c6:e6:
79:8a:3b:2c:d6:d4:f0:5a:c4:0f:e5:ff:74:4b:c5:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:33:35:B8:8C:79:5E:D1:A1:03:D5:17:ED:F8:A2:2A:3F:61:A9
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:34:18:e1:e8:b9:45:86:80:60:02:b1:8c:e8:88:c1:ef:
e9:f9:bf:ed:30:21:f7:93:e1:fb:b5:e6:c5:9f:b4:51:37:19:
c6:ca:c6:46:1d:c8:d2:58:95:d7:94:a1:09:3f:64:b7:5a:27:
39:ee:99:11:6f:5f:0a:53:ad:ee:5e:cc:68:58:03:1b:d0:df:
f0:bd:80:8f:c1:76:a9:6e:a6:96:f5:61:00:aa:64:90:19:cf:
7a:f2:4f:d8:67:02:6c:bc:5e:04:2e:f7:f0:2d:b5:e7:f7:93:
a8:9a:a6:68:64:d5:cb:40:78:e8:71:e6:b5:5e:44:8c:49:1b:
ce:12:16:ee:ac:05:9d:00:20:f8:16:ad:7c:e6:f3:14:fc:a0:
ea:aa:01:e0:53:46:67:3f:72:b6:d9:e2:9a:5b:84:38:e9:82:
3e:c1:61:ad:cf:a9:72:61:c7:53:6e:c9:86:88:db:5f:06:7e:
54:ac:76:49:09:de:e9:b0:b7:39:26:1b:d3:4a:66:de:05:7e:
c9:78:3c:98:3a:c2:60:6a:2a:fa:e9:48:be:ba:41:95:1a:b5:
fb:97:83:55:43:b9:e1:52:54:f9:ab:d8:c7:21:4f:5b:35:ff:
0e:c3:6c:e3:3a:4a:a9:f9:56:e4:dc:9b:13:08:78:53:88:46:
04:e6:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:17:47 2025 by rpki-client