Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier: 23SQyva26UQU6EbQPHVt4YPoJ1Si52sKSg2X2ZKYJBQ=
Subject key identifier: 4F:E4:98:91:B2:39:D7:98:4F:9B:85:08:FB:41:A0:2F:F3:16:9A:73
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial: 019935DBF88540C6A137FD9B0D9128FC4EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number: 07F1
Signing time: Wed 10 Sep 2025 23:00:32 +0000
Manifest this update: Wed 10 Sep 2025 23:00:32 +0000
Manifest next update: Thu 11 Sep 2025 23:00:32 +0000
Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: 9yfvIeub7H7mtpRVYoJecQOobsPlTnNBAeSrpjkc/Ro=)
2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:db:f8:85:40:c6:a1:37:fd:9b:0d:91:28:fc:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Validity
Not Before: Sep 10 23:00:32 2025 GMT
Not After : Sep 11 23:00:32 2025 GMT
Subject: CN=4fe49891b239d7984f9b8508fb41a02ff3169a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:63:89:f5:31:44:c9:48:6e:70:44:f7:77:
aa:ed:d3:95:56:fc:51:a5:0b:4c:a4:f0:13:e4:ff:
70:74:53:d8:7d:ef:87:09:5b:33:08:94:1d:4c:e7:
90:f9:09:a7:85:f0:ce:79:f0:c7:a9:0d:08:9d:3e:
88:08:84:d7:52:df:52:81:45:fb:31:ac:4f:09:d4:
0c:75:f8:6a:1f:6b:14:98:55:a5:72:04:88:4c:80:
59:e1:a6:bd:d8:2f:32:b7:96:1a:de:e2:29:90:d4:
1a:c0:62:bb:bf:95:e1:74:5c:57:85:b9:3c:e0:d3:
e4:87:74:10:e3:8f:19:c9:16:23:97:30:90:81:24:
ee:a2:8a:71:5a:61:1e:e2:be:de:57:96:23:b6:1b:
85:33:77:6a:aa:f6:c2:76:9c:30:a4:7c:a3:2f:f8:
20:36:9c:9e:bc:52:e5:09:9b:02:55:a6:9b:5d:d2:
16:b5:4c:05:9e:1e:7d:7a:56:7b:18:04:a0:94:bd:
fb:80:d4:9c:b9:84:d3:ed:b0:36:2e:c8:51:e4:07:
ac:99:36:41:f2:58:e8:cf:11:ec:f1:b3:69:21:b5:
2c:2d:73:be:c5:93:92:a4:32:c0:dd:18:1a:6c:4b:
e0:a6:1c:bb:27:5b:88:e6:bc:e5:3f:d9:8d:69:5e:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:98:91:B2:39:D7:98:4F:9B:85:08:FB:41:A0:2F:F3:16:9A:73
X509v3 Authority Key Identifier:
keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1c:d0:75:5b:8e:e6:ae:15:3b:54:c2:96:04:16:5c:a0:2e:
5b:1c:82:95:69:bc:ba:de:18:c7:76:93:20:30:7e:b7:a9:3f:
e8:c8:ff:1d:df:b7:49:e0:52:62:c0:bd:8a:07:32:57:cb:e9:
c4:dd:6c:e3:5d:ab:ea:5c:ff:26:3e:b0:96:d6:ce:b8:5c:96:
5a:ee:a3:c3:14:de:68:5a:2b:e0:b3:bc:cc:f4:54:21:b4:02:
69:02:fc:0c:e0:c5:48:b1:17:e4:f0:79:e7:64:da:28:78:98:
92:70:af:8d:b4:4a:bc:fd:e6:14:fe:38:86:34:34:e7:74:6c:
ae:33:86:ea:47:08:5c:76:d8:51:a5:27:a9:b6:10:ca:33:19:
f4:89:a6:2b:b5:72:8e:76:a1:c5:82:d2:3f:39:44:e9:be:a7:
0b:8b:9c:c6:95:58:7b:29:bc:88:cd:ed:8f:9a:00:4c:04:19:
f2:c3:ca:57:fc:44:bb:3c:b6:2e:bf:9e:16:76:fe:cb:3c:26:
6e:1b:68:f8:c6:94:b3:01:02:c4:ca:b9:02:72:f1:c7:f2:b4:
f6:82:f8:95:51:08:0c:02:fb:ab:b4:d6:b7:bf:32:1f:ff:ef:
65:99:96:35:66:ff:4e:ab:e3:c1:63:9a:f1:09:f7:20:c8:9b:
bb:ea:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:55:09 2025 by rpki-client