Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier: cOIlsvRldR4z3IBm5shYKBh08Oye+jpCJJx8YoByaQU=
Subject key identifier: 71:FD:9B:6B:DC:C2:5E:BE:B8:22:14:CE:E7:8A:E2:19:BA:CA:D1:B4
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial: 019A029124B22C90E50523CDB242A62B0822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number: 085B
Signing time: Mon 20 Oct 2025 17:00:57 +0000
Manifest this update: Mon 20 Oct 2025 17:00:57 +0000
Manifest next update: Tue 21 Oct 2025 17:00:57 +0000
Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: ut9ZrE/0QfImtlRVTawfCr8r7ILI+56e+e1n8xcImIs=)
2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:24:b2:2c:90:e5:05:23:cd:b2:42:a6:2b:08:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Validity
Not Before: Oct 20 17:00:57 2025 GMT
Not After : Oct 21 17:00:57 2025 GMT
Subject: CN=71fd9b6bdcc25ebeb82214cee78ae219bacad1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:f2:c8:16:65:3b:e5:ec:1a:67:a6:3f:29:
5c:14:e1:23:5e:6e:30:85:57:80:95:ed:d1:f3:21:
da:36:1d:c7:6c:10:d1:8b:2e:e9:e9:c6:b7:5a:82:
1b:9b:27:15:05:23:f0:62:ab:c0:40:14:4e:20:fb:
2e:87:53:da:80:63:35:3b:64:8d:a2:14:d9:45:ba:
b9:de:c7:fc:e2:7f:ef:96:87:54:be:b0:68:0c:e0:
af:7e:c4:20:90:fe:75:3b:31:78:e9:ba:d2:84:cd:
36:2b:8d:de:0e:95:f2:73:58:a6:60:79:ef:d7:81:
38:b4:ae:05:3d:17:a9:c1:8f:a4:ce:0e:db:c7:21:
88:55:d9:19:82:dd:15:ac:b4:45:a0:9c:99:a0:78:
8c:1d:7a:d6:d9:93:d6:42:b3:83:eb:a7:d3:e6:95:
4d:05:24:1c:98:0f:48:af:70:b8:5f:7f:62:f4:7b:
6b:21:d0:fd:96:51:66:45:eb:b7:06:16:4f:9d:e1:
19:ee:f4:e2:4c:68:e1:cd:13:e2:23:54:a4:8c:e7:
e9:4c:c4:91:50:50:be:df:7b:8d:9b:27:86:54:c9:
0c:b9:47:ec:2e:a9:bf:dc:03:a7:26:6e:33:ae:93:
03:f0:84:7c:01:6c:bd:2e:5d:c5:bb:6f:a2:d7:77:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:9B:6B:DC:C2:5E:BE:B8:22:14:CE:E7:8A:E2:19:BA:CA:D1:B4
X509v3 Authority Key Identifier:
keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fd:c6:44:b5:d9:66:e3:73:27:b9:ff:e3:09:2d:d8:72:03:
55:ee:8b:a5:0d:60:f0:06:e7:b9:ba:c2:20:74:fa:64:c2:df:
73:b1:23:11:d8:bc:ca:cf:75:fe:29:e0:7b:b0:f3:33:8e:30:
4d:22:20:86:0b:6e:3d:b0:f1:a7:fd:b7:e5:e8:2e:8f:a7:53:
ee:71:a3:2e:77:a4:23:e5:ce:15:07:c1:fa:36:20:2f:92:04:
d0:f9:35:eb:7d:94:62:1c:20:e8:2b:fc:49:f8:77:5c:56:2f:
b4:36:0e:fe:5e:df:e7:6f:cb:3d:0c:ee:a1:8b:b5:e6:6b:fe:
85:1c:81:cc:9f:b0:0d:55:b8:36:67:1d:b5:ba:ed:62:cc:05:
bd:d8:b3:c7:e1:17:2b:8e:4f:21:b7:e8:7a:5a:9f:64:db:95:
88:78:f4:8c:bd:5b:37:dc:53:9e:d6:bc:d7:e5:69:9b:3b:d8:
3a:fb:52:27:eb:19:db:63:c3:15:fd:1f:50:ea:dd:65:dc:cb:
9c:9d:12:be:59:d3:ab:36:a4:dc:89:e0:51:88:45:2f:98:6f:
f8:83:44:b5:5b:47:53:62:d4:02:d6:62:2a:cf:8f:12:ca:9d:
3d:14:91:fc:97:41:9f:c4:2a:2d:cc:c0:da:73:12:8d:8d:32:
29:71:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:07:10 2025 by rpki-client