Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: GIc97HIck2/IrqKUkUz1ii3thZQMWyX4m9Mm2Zgcgsg=
Subject key identifier: 57:71:31:67:3A:1B:40:62:8F:C7:00:E2:F5:B7:B3:79:63:9C:D4:6C
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0197B77C927BF667557B2EB2F378BD40AED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: U22FIoM2EtPunKYicp1xjwMBZflHqdlvfU1lIs3mlNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:92:7b:f6:67:55:7b:2e:b2:f3:78:bd:40:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=577131673a1b40628fc700e2f5b7b379639cd46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:ff:3b:4d:89:59:c9:00:d2:07:61:d4:05:
d0:99:3e:b1:f5:cd:e2:91:2f:66:b6:52:70:86:3a:
6d:28:63:8c:28:a6:2d:c4:e6:d1:fb:40:d5:98:9f:
96:93:49:09:8e:4e:3a:2a:60:85:ce:f0:c9:41:fb:
0b:83:eb:a1:8c:ec:34:07:3a:b7:2c:92:35:5b:3c:
c8:91:22:3e:73:9a:7b:a5:1e:45:50:b0:c1:bd:f1:
a2:dc:88:96:2b:cf:b3:57:20:79:91:0f:98:9d:ee:
8f:91:1d:41:04:ae:a7:4d:b8:7e:ee:d4:75:46:79:
0f:09:45:0a:66:d5:98:73:79:e7:dc:01:2a:bb:59:
7d:06:92:b2:48:da:95:a0:6c:52:3d:76:e6:23:44:
32:36:49:91:cc:26:c3:ea:33:e5:d1:5f:4c:cc:a1:
fd:c3:c7:76:89:a8:01:29:fb:d3:86:ef:46:bc:5e:
24:46:eb:12:f3:fc:b7:5d:28:79:80:76:d7:77:3f:
48:1d:8e:ef:e6:53:8f:c1:e5:97:8e:39:4f:09:0b:
04:23:5a:fb:09:36:b1:16:bf:9c:8d:59:e6:1f:5f:
42:3e:c4:1f:a7:a4:91:a1:0a:62:fa:0f:24:83:62:
06:e1:c6:ff:fe:97:a3:d6:3c:12:22:98:f1:07:61:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:31:67:3A:1B:40:62:8F:C7:00:E2:F5:B7:B3:79:63:9C:D4:6C
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f9:21:c0:e9:e5:bc:16:df:09:5e:18:78:ae:09:c2:49:bb:
3c:3c:2e:e1:f8:15:a4:d7:a5:e9:8d:52:bc:ad:c9:66:96:e9:
b5:95:13:de:66:41:ba:0d:d2:e1:66:a1:55:d7:86:74:de:d3:
01:39:7d:6a:35:81:d4:d1:10:d2:20:eb:c5:8d:e2:a2:15:57:
a2:21:3d:45:a3:cd:ba:31:1c:63:ee:77:9b:d6:c1:97:ad:87:
81:55:6f:f2:2d:24:f8:8b:d1:8c:9c:a4:7e:5c:fc:57:56:e0:
b7:66:99:e6:72:59:bd:67:0b:c5:80:53:53:7e:6b:cf:4b:b5:
1c:06:c6:a6:28:f1:d2:a2:36:56:41:f5:a1:37:7f:45:5e:5d:
ef:bf:f0:6e:ab:55:33:1f:d1:5d:ff:da:9c:92:4a:27:ec:2c:
46:2e:86:c2:01:95:f8:8f:b8:b4:7b:40:a4:0b:36:87:13:39:
15:85:10:4b:4f:46:fd:73:e2:82:29:0f:01:1e:e6:7b:13:b2:
38:3c:26:6d:5b:e6:95:1d:0f:a5:b5:46:aa:17:0c:3e:6b:fe:
c7:0e:12:de:20:e6:8a:a3:a8:89:ce:c8:44:a8:7b:da:e4:a9:
b0:00:ce:2e:43:bf:32:75:f3:f1:a3:51:3a:1d:a4:37:f3:00:
12:9d:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:42 2025 by rpki-client