Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: OpFsKAOKA2qWp7Lqn4DvBq7lyy9v+yVJrL256emsSj4=
Subject key identifier: 78:7C:21:1B:8A:ED:50:EF:C8:8D:17:63:F1:15:CC:88:1C:A5:0A:4C
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0196C9F2844299C9DDBDDDD318895DDC4E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 14:00:36 +0000
Manifest this update: Tue 13 May 2025 14:00:36 +0000
Manifest next update: Wed 14 May 2025 14:00:36 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: bul1amK4ByVDDTbGjYZQ0xIGMm8jj+PXGv77bsOTDOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:84:42:99:c9:dd:bd:dd:d3:18:89:5d:dc:4e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: May 13 14:00:36 2025 GMT
Not After : May 14 14:00:36 2025 GMT
Subject: CN=787c211b8aed50efc88d1763f115cc881ca50a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:57:8f:02:91:92:f4:65:75:73:a3:03:2e:
67:0e:fd:f8:a5:6a:cf:56:bd:9c:a6:0e:81:9d:6b:
a0:32:4a:62:c1:62:89:5b:28:2b:6e:c7:56:f3:ee:
7a:3d:69:eb:b3:01:82:ee:f2:07:72:e4:dd:67:cf:
80:65:bc:03:e2:86:cb:4f:67:a6:8e:08:7c:92:88:
bf:d2:42:f3:b1:e7:c3:0b:71:dc:8b:0a:42:d3:6a:
9e:b9:95:4b:6a:2a:4a:10:d7:7d:16:48:d4:56:00:
7d:7a:7a:5a:95:46:92:9d:71:62:48:56:e0:22:f9:
cd:26:e2:20:a3:9b:d4:cd:37:b2:26:7f:cc:b2:f4:
54:99:76:15:46:31:ab:67:9b:1f:d3:09:e4:ef:d2:
33:33:4b:c3:31:51:59:a9:bc:1f:f4:60:95:e9:87:
de:0d:a6:ed:4a:fc:59:d8:7b:f3:bd:72:73:9f:0b:
21:bc:83:d7:93:35:ea:53:8a:68:70:4a:2d:3a:d6:
1e:81:81:15:b7:b1:f9:90:3d:0d:a8:cd:fc:87:00:
6b:09:7b:72:3e:0a:f0:f1:df:7e:21:19:10:90:d3:
e9:81:bf:57:ef:09:50:d0:a4:54:b2:8a:b5:89:86:
19:0a:b6:dc:6c:62:31:9d:7a:dc:5b:78:7f:33:9b:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:21:1B:8A:ED:50:EF:C8:8D:17:63:F1:15:CC:88:1C:A5:0A:4C
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:ff:c4:13:9d:fe:0c:9a:6b:8f:ec:58:c8:44:da:64:89:
c8:c7:f0:96:f2:60:09:08:16:9a:6f:4f:7b:5b:f5:78:f8:8c:
f4:ba:02:38:de:6d:95:0d:31:14:87:cd:e6:98:8d:0b:b4:0a:
9b:46:ec:4d:62:89:ee:73:94:e3:fd:35:0a:78:33:f5:f0:e2:
1c:cb:29:de:f7:57:3a:2a:ed:0a:c2:78:26:ee:26:a0:45:3e:
2c:dd:a0:fb:b4:db:14:f1:ff:e6:59:9c:40:f0:7f:09:cf:98:
36:56:d8:ef:e9:f5:6a:dd:6e:00:18:14:d6:ce:c2:b4:6b:e7:
68:c0:d5:3a:49:56:d1:04:a9:c4:37:41:74:54:36:21:1b:00:
a2:3e:d9:e6:89:1c:70:10:95:c2:f5:5d:42:5b:17:80:2c:38:
a6:7d:d8:77:c3:af:1e:bb:f8:92:01:3b:77:32:3a:77:fa:e5:
1f:37:21:42:59:3f:60:84:6d:48:71:78:60:03:38:ca:45:72:
72:ff:b1:53:2b:01:3f:5e:f8:74:38:19:8e:b3:ca:dd:53:cb:
0c:85:1a:db:23:7d:5f:84:ba:bc:fb:ad:ea:57:4b:3c:6c:d5:
0a:70:df:90:a3:a9:03:87:67:56:fe:37:07:89:81:32:8e:40:
bd:53:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:24:45 2025 by rpki-client