Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: pXy/0/1qR9inv6QiO/viIVDD+hLft9Y8lkeLVKZervg=
Subject key identifier: 50:A1:2A:B8:F7:B9:09:E3:1F:CB:5C:DE:FE:A5:14:61:AD:F0:1E:F2
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 0197BE913B5833CA7833EECF8EBD55895D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 02:01:18 +0000
Manifest this update: Mon 30 Jun 2025 02:01:18 +0000
Manifest next update: Tue 01 Jul 2025 02:01:18 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: 5QHRRheHcVl/OaMYwKQQR+ufe4kENdVfQEuijmBLUSE=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:91:3b:58:33:ca:78:33:ee:cf:8e:bd:55:89:5d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Jun 30 02:01:18 2025 GMT
Not After : Jul 1 02:01:18 2025 GMT
Subject: CN=50a12ab8f7b909e31fcb5cdefea51461adf01ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:4f:b2:11:a1:7e:bc:65:2b:c6:0d:ef:d4:
ed:6f:48:a5:3b:8b:51:e6:c2:34:e6:5c:f1:0f:1d:
6b:f9:eb:d4:8a:c5:38:00:50:31:dd:61:80:4c:ce:
1c:94:15:f9:41:5e:c5:7a:d9:d6:ea:95:30:7f:a6:
15:04:d8:d0:10:5e:89:db:91:59:7c:67:9d:46:4c:
51:c3:ca:50:1a:32:61:a6:5e:dc:7b:40:bf:52:9a:
27:4f:b9:36:4e:9a:e0:5e:fa:5e:06:24:4f:47:12:
6a:34:87:a9:4c:86:e8:c6:6b:e4:77:ed:bf:51:04:
f2:6b:ef:c8:57:3d:8b:a7:9f:2f:b8:1a:79:24:62:
da:30:f3:6d:73:07:4a:13:88:bf:4c:bd:bd:ce:92:
90:7e:c4:9f:a3:9f:09:6b:6e:6b:42:03:a9:77:b6:
16:7b:15:ec:a9:42:5c:19:79:1a:5a:7c:b0:ca:54:
8a:0e:c2:4b:76:19:46:e6:5d:26:bd:8c:21:7a:bb:
a6:58:36:74:36:c7:3c:7f:cc:a9:0c:22:6d:55:4d:
d6:4d:be:13:94:53:00:fa:15:2b:e5:8d:ef:97:bb:
79:c8:c0:1e:59:22:90:62:9f:70:99:89:6f:a0:f6:
33:e9:6e:f8:93:bd:15:d8:8f:ea:47:5d:bc:6c:16:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:2A:B8:F7:B9:09:E3:1F:CB:5C:DE:FE:A5:14:61:AD:F0:1E:F2
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:47:5c:e0:44:79:a3:5d:01:48:59:27:07:81:7b:b4:46:
26:f2:bd:ed:c3:a3:f3:de:00:73:47:9d:b7:a7:01:87:fd:a4:
fe:50:ea:ce:00:84:4e:bf:0b:5c:db:fb:7b:2f:52:68:71:2e:
dc:03:2c:29:59:0a:3b:43:78:f8:5a:1c:cc:b9:7c:56:5d:14:
d6:58:e2:3c:08:88:5b:fb:b1:61:f2:ac:a2:d4:8d:cf:e1:14:
db:e5:22:0c:a0:56:ce:64:01:38:5e:70:95:71:4e:59:03:42:
c9:5d:f4:a5:de:84:e2:e3:80:ad:b4:fa:78:50:2e:0d:5c:4a:
31:dd:cc:1d:cf:bd:bd:f7:e5:42:bb:b1:f8:61:5a:9f:1f:8a:
de:37:26:eb:cd:95:06:08:3c:8c:30:53:6f:18:15:0b:8d:91:
f2:21:6d:f5:35:cd:6d:82:8f:36:29:50:1a:1d:a3:ed:e3:1c:
ed:5a:0e:de:69:aa:78:a6:c9:81:9e:96:ff:0a:c2:ff:21:15:
17:82:7e:de:ba:59:1c:6d:3e:14:d6:17:64:22:4c:be:83:1b:
a6:2c:78:31:76:c6:47:2d:de:57:1f:ff:a3:36:f4:56:9a:3f:
13:35:7d:e5:73:c6:f1:eb:53:e7:18:62:82:89:28:87:19:b6:
8d:86:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:57:13 2025 by rpki-client