Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: QXADJEVqdSy3MS3lth6xDZrTav8onf+FpyJ6l/gBinU=
Subject key identifier: FD:3B:E7:7D:42:6C:BE:C8:7F:92:60:F7:96:D2:DD:E4:22:FA:5E:9D
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 0199FE104865BDB72C90B060CFE426046908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: QYo0LPZu9q2nFB0oC2PWrNzSA+DHauHF/cmkc8CB3O4=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:48:65:bd:b7:2c:90:b0:60:cf:e4:26:04:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=fd3be77d426cbec87f9260f796d2dde422fa5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:88:ee:20:e4:5b:6f:3c:30:d6:fa:8b:ff:
b9:67:7a:0b:7a:35:37:98:1e:c3:18:aa:e4:d5:28:
68:fd:24:8c:89:6a:17:08:c2:33:a5:1d:c5:65:9b:
aa:bb:57:06:89:33:a4:71:bf:98:73:59:ee:39:cc:
f0:49:f7:e4:5c:fc:3e:43:7d:e3:69:5b:3d:bf:98:
57:a9:97:1a:bd:95:97:ce:b0:91:59:e5:69:23:4f:
b4:31:0c:7b:1e:e9:66:87:6c:4c:2d:d3:99:64:91:
9f:17:7c:4f:65:48:9f:62:cd:91:80:cf:c4:8e:5a:
e1:38:cf:fd:6e:11:60:89:5a:0e:1a:08:21:57:e0:
c5:96:9d:ae:0f:15:74:d3:ba:7b:4c:eb:bf:86:5c:
af:8d:0b:a0:32:a0:35:20:53:34:02:7f:c3:bf:1e:
fe:ae:ae:0d:2c:ca:6d:db:7f:68:fd:35:55:a3:bb:
1b:73:ca:44:4b:8e:9f:41:5b:cd:88:c7:81:df:55:
b1:1a:6c:38:5b:76:14:e9:94:19:15:e8:ba:79:0b:
89:69:3c:55:ac:7e:6a:63:06:7b:b7:ba:b0:99:54:
53:d6:b2:31:85:e4:e5:6b:c4:2b:a7:28:58:f1:d7:
ec:06:5a:87:70:d4:2c:e6:dc:73:3a:f9:9b:03:ba:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3B:E7:7D:42:6C:BE:C8:7F:92:60:F7:96:D2:DD:E4:22:FA:5E:9D
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:91:66:cb:79:17:6e:8b:0b:96:8e:7e:ea:69:9c:e9:ab:
8d:3d:1a:71:a9:c2:a8:ab:1f:61:44:a2:33:06:9d:58:c6:eb:
ee:a1:93:f9:16:6a:22:59:4e:f7:5f:c4:8a:e1:11:ec:b6:b3:
19:aa:db:b1:59:60:2d:c5:2c:65:37:b5:2a:b7:04:3f:18:0b:
21:8e:33:bb:ff:1a:38:b0:e3:11:db:7a:7f:af:26:a4:59:4c:
f6:86:7e:cf:88:e3:9a:46:5f:86:06:d7:4b:21:cc:44:e9:10:
e2:f6:e1:8a:e5:28:50:75:28:d5:aa:1f:20:c6:6e:80:4d:43:
1c:08:00:a5:c6:1a:55:64:41:83:d7:51:e7:ee:a4:eb:9e:bf:
43:03:d0:1c:6a:30:ca:04:d0:c3:f6:27:8d:75:5c:2f:8c:fe:
3d:20:9f:40:d2:6a:e3:5f:38:4a:5c:6c:b9:3b:0a:af:b5:6f:
45:eb:f8:d2:b5:85:12:c2:4b:fd:cf:c0:a6:2d:fe:30:ec:28:
73:de:be:3e:3b:d1:f7:a2:cd:25:3d:01:a4:0a:61:aa:92:5b:
ee:86:8c:ee:a6:34:c3:b0:39:d0:77:12:eb:e7:02:0a:9d:3a:
c5:16:f6:a3:7f:49:66:b2:ff:d9:76:d4:35:2c:e0:dd:8b:3f:
3d:44:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:19 2025 by rpki-client