
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File: J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier: k7OuL2UFQNdrRehAOWzdUfpC3+7UYBCn93FxSJyJaKY=
Subject key identifier: 95:8F:45:A9:75:4A:6A:46:50:22:FD:CD:69:34:DA:BE:63:BC:41:D9
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer: /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial: 019A4DE167BC9C3D32F8B3AAD936339DC8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number: 0882
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: RVND4+aNbd4XC1EF4g/2hHk4xDU+6v8kTS2GMIbeDQU=)
2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:67:bc:9c:3d:32:f8:b3:aa:d9:36:33:9d:c8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=958f45a9754a6a465022fdcd6934dabe63bc41d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:fb:ad:e6:9a:7b:69:7f:9c:28:20:70:4e:
95:19:5c:50:a3:34:2c:09:fb:57:81:a7:b3:71:ea:
6a:3d:36:20:61:6a:5e:20:d3:a8:f8:ab:a2:17:13:
4e:c1:aa:38:4e:32:27:b0:65:96:c5:d7:1f:6d:fe:
f3:5f:dc:f6:e0:14:76:a3:bc:7d:58:ca:2e:6e:5a:
97:72:98:7a:9b:87:a5:28:5e:7f:4d:4e:c8:19:b0:
bd:34:ce:8a:f2:4a:98:7e:ba:c9:e9:e7:bc:bf:bf:
76:e4:a1:fa:60:f7:dd:74:ca:25:eb:05:d2:29:ca:
86:37:1b:15:1e:4f:33:b0:49:a5:c1:e9:1d:a3:ac:
f1:9d:89:72:1f:a7:76:e9:02:0d:1a:33:f4:17:b1:
9e:37:5a:96:ae:68:22:8a:7e:f9:86:a0:99:45:99:
1b:60:6d:2c:5d:86:1f:17:1b:04:d9:2e:e1:13:00:
86:a1:b7:4d:7c:b1:b9:42:61:24:0e:68:f5:1d:22:
aa:cd:23:9b:4d:57:6a:2d:99:e4:33:35:bf:0f:a8:
ba:cb:8f:43:83:d8:35:b1:8e:8b:70:31:c3:a6:e4:
dc:5f:0c:bd:3f:7a:ec:61:45:dd:33:1b:03:9d:e1:
26:e7:3c:79:30:d1:c9:31:a5:c2:cd:77:a9:7d:21:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:45:A9:75:4A:6A:46:50:22:FD:CD:69:34:DA:BE:63:BC:41:D9
X509v3 Authority Key Identifier:
keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:05:37:da:16:1a:9d:f9:4f:0f:d4:12:f0:f8:36:c0:51:99:
40:b0:57:68:f5:ce:83:f9:cc:96:86:c1:01:61:17:22:56:f6:
4b:6c:d6:f9:89:87:68:6d:ad:6b:3c:a7:88:46:d4:70:10:da:
bc:8b:9b:d0:9e:88:70:7a:9e:71:66:3d:97:73:3a:14:74:e3:
5f:56:c9:82:6a:bd:2b:51:97:f3:28:6c:07:90:e3:c7:78:0d:
9e:dc:15:f3:be:ac:31:c5:f7:7d:dc:fc:50:d4:c4:4c:8f:11:
08:c5:ed:51:81:86:71:1b:62:88:7c:dc:65:39:81:09:ec:a6:
19:90:a8:78:6f:b8:bc:7e:f6:31:36:0c:4e:3f:46:17:bb:d7:
1d:5a:a6:71:c5:1d:60:af:b7:26:66:0d:00:a9:21:67:da:12:
ec:3c:d2:be:44:f7:63:9c:09:ec:ef:01:7c:83:43:91:12:b9:
00:c7:78:6b:37:1e:f9:38:24:8c:22:0c:d7:8d:ea:bc:3c:19:
5d:b3:9f:2a:1d:a8:f9:7f:44:1d:18:07:bb:a4:3d:f4:07:bd:
91:d3:9e:8f:c9:36:15:9f:17:1d:87:2a:87:43:18:d0:92:54:
25:ef:b6:5f:15:ac:8a:15:28:c5:ca:5e:23:01:e3:1c:31:a1:
25:8e:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:44 2025 by rpki-client