Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier: NrWMFxUo10ROoqR+crUQv59PBan4uFMZlzPLfcY6hgo=
Subject key identifier: 79:0E:17:B4:84:EB:6F:07:BF:E2:52:A5:8B:AF:08:2C:3B:7B:5F:3E
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial: 019A70A537C9DC31F7FFFB8952C7C2A8EA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number: 0894
Signing time: Tue 11 Nov 2025 02:01:07 +0000
Manifest this update: Tue 11 Nov 2025 02:01:07 +0000
Manifest next update: Wed 12 Nov 2025 02:01:07 +0000
Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: IGqtF+XYA4BJUbfJfe9WdBu486Ijg+qt5FLrYwWsXmg=)
2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:37:c9:dc:31:f7:ff:fb:89:52:c7:c2:a8:ea:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Validity
Not Before: Nov 11 02:01:07 2025 GMT
Not After : Nov 12 02:01:07 2025 GMT
Subject: CN=790e17b484eb6f07bfe252a58baf082c3b7b5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:f8:bd:bc:ef:9a:7d:50:2a:54:2f:c1:37:
5f:9d:37:4c:8c:4f:92:8f:4e:96:be:25:e7:b5:62:
ae:cb:81:75:a6:bc:21:b2:34:c8:ef:5e:71:4f:2e:
dd:7f:a4:30:94:6e:c5:0a:4b:42:87:2f:99:1d:ff:
b5:10:50:e6:5a:59:45:de:4b:26:2d:58:4a:9a:22:
38:11:78:eb:59:66:27:a5:ed:86:c5:8a:b7:81:75:
d3:7a:2c:60:67:a3:0d:2b:18:6b:98:e1:6e:b4:6a:
b9:b8:cf:d9:fe:d4:ab:6e:a9:5e:64:f1:d5:86:2e:
5e:92:0d:36:86:fb:8d:15:08:ca:9f:a4:e8:fe:14:
48:14:c3:b4:22:dd:9e:df:01:6e:a0:43:cb:41:ce:
65:61:78:fe:df:09:32:6c:28:cf:74:a2:58:a8:80:
7b:5d:d9:71:1f:c7:73:9f:e9:c6:2a:05:89:43:dd:
98:44:bd:39:95:8b:06:5e:ed:62:62:24:9c:48:17:
b6:5b:69:6e:c8:4a:39:0e:65:74:f8:03:f5:3b:49:
0a:a7:14:ec:81:83:80:e2:44:13:24:3f:71:5e:a7:
85:33:d2:9a:d7:7e:ad:0f:53:21:b2:76:06:ee:ab:
3e:0a:3c:fd:1f:2b:29:e8:65:26:89:43:58:22:65:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:17:B4:84:EB:6F:07:BF:E2:52:A5:8B:AF:08:2C:3B:7B:5F:3E
X509v3 Authority Key Identifier:
keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:d0:ab:e2:75:91:c0:22:56:6f:fc:a6:48:e8:0a:33:f4:66:
c5:ca:27:a8:3d:3c:8d:17:44:29:d6:cf:44:11:ea:1a:f4:d2:
54:63:6c:18:ff:05:69:26:f5:95:d8:65:e3:c7:5f:cd:b2:50:
66:bc:93:4b:43:5a:88:f4:11:14:eb:5d:66:e5:0a:da:31:5d:
8d:d6:10:44:9f:66:b2:bb:e6:88:26:dc:b8:13:fa:b2:d7:61:
8d:c1:96:40:40:3c:65:e5:6d:fb:c3:6a:f9:0a:be:db:80:26:
ad:e9:56:ad:17:11:e6:2c:e3:65:23:a8:bb:bd:b7:99:cf:7a:
2f:56:06:91:a0:2c:08:81:11:b0:52:6b:3e:a5:da:32:9e:71:
70:f5:72:20:2e:29:4d:a0:e2:bf:01:4f:89:46:fe:7d:c7:a4:
75:e0:9a:31:3d:b4:3c:ef:be:2c:69:33:a3:63:42:91:41:0f:
2a:94:db:cc:94:3a:7e:43:07:5f:f8:32:75:64:ac:6f:3d:57:
16:54:2f:da:1e:41:36:d1:34:0b:94:ac:a3:93:65:aa:37:8e:
eb:de:07:39:de:d1:0b:fe:81:90:8c:51:d4:47:24:ba:41:31:
c1:0d:3b:03:0d:ee:b0:32:f9:87:bf:9c:84:0b:44:7c:f3:ae:
2c:00:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:23 2025 by rpki-client