Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: MxcY8EJgy6uxvTVloKZw0NZEuLZtV1fNWzfle7ynnk8=
Subject key identifier: 42:E7:25:95:2A:13:88:69:8E:65:48:2D:BD:3F:A5:AF:92:3C:51:0B
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0199FAD86CF755A61A9DA48D2832FA09255F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:51 +0000
Manifest this update: Sun 19 Oct 2025 05:01:51 +0000
Manifest next update: Mon 20 Oct 2025 05:01:51 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: p6qWCyxYvFumvGjCEcxkhaKq6/R59PtAupqdpMA3JLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:6c:f7:55:a6:1a:9d:a4:8d:28:32:fa:09:25:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Oct 19 05:01:51 2025 GMT
Not After : Oct 20 05:01:51 2025 GMT
Subject: CN=42e725952a1388698e65482dbd3fa5af923c510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:0b:1b:e5:2e:16:db:79:a7:9b:af:ba:17:
74:e3:ea:ab:c8:75:10:03:84:0c:11:89:2f:c6:3c:
0c:e9:d7:51:be:e8:5f:3f:40:1c:b4:02:dd:b6:ff:
4f:41:1a:7a:f1:87:3b:09:5a:f6:e6:a7:06:cb:9f:
d0:5b:1e:31:0f:94:9c:99:f5:7d:c2:78:9f:c9:31:
84:eb:59:8a:2a:62:19:ea:2f:4f:39:fe:33:bf:da:
a8:34:dc:48:fe:91:78:b8:26:30:92:17:70:4b:4a:
0b:1d:5b:76:d9:13:03:8e:ec:01:7b:a6:a7:b2:77:
8f:c2:bf:7d:5e:c3:d8:50:53:0d:eb:6b:87:91:dc:
52:e1:be:dc:d4:24:9b:5f:c8:17:7c:e7:c0:5c:01:
a9:74:d5:56:d0:5c:73:e7:77:f9:37:86:05:f8:88:
02:97:f0:d8:9d:85:fb:21:f9:d6:9c:0f:33:91:66:
0e:53:a8:e6:bd:46:5a:24:a6:4b:16:7b:8b:07:bb:
3f:e1:cb:66:b5:84:e0:03:58:53:43:bc:24:1a:b4:
68:dc:c2:23:62:41:58:48:18:54:91:2d:51:22:09:
93:83:96:d0:fa:8f:48:e0:52:3b:8c:9c:3c:a8:60:
3e:32:1e:09:ce:37:c7:5e:86:9a:d0:cb:f3:e6:47:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:25:95:2A:13:88:69:8E:65:48:2D:BD:3F:A5:AF:92:3C:51:0B
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:69:de:2a:36:d6:8a:a8:40:06:33:ac:9f:08:9c:34:d3:
93:79:62:72:58:33:45:c2:d3:c8:34:28:37:93:5f:32:0e:88:
62:ba:aa:be:00:90:a6:d1:1d:e6:f2:41:04:34:12:6e:31:4d:
d9:4c:54:93:a2:c1:94:b0:14:ae:37:fd:32:65:82:b3:7a:af:
f5:66:c8:8b:2d:68:73:a1:ac:71:96:b3:0b:b8:14:66:62:7a:
78:8c:0f:84:d3:37:81:6d:1d:09:c9:52:dd:b5:55:14:33:ea:
d3:7e:fd:26:01:a8:01:00:9a:52:0a:01:a0:f3:39:d2:1b:e5:
2e:80:8b:bd:5b:39:ca:d3:12:f6:6c:ba:54:1f:cb:3f:c2:9d:
45:a7:2e:44:9c:ca:0f:09:45:a0:37:8e:cd:54:79:c3:71:ba:
f9:a0:8a:93:86:0d:49:31:38:b0:c9:1f:a1:2d:b8:d7:03:70:
bf:b9:5d:2e:f5:cb:64:4d:49:b7:f0:a0:f6:86:ac:6d:a2:21:
14:d4:6d:27:fb:fe:6c:52:07:38:d5:b1:35:a1:82:ae:89:0d:
89:d2:57:ec:76:7d:b6:9a:44:4d:f4:a4:07:be:41:26:5a:a4:
ac:88:b8:7d:06:80:8f:64:5f:a9:64:7f:ed:62:95:89:0a:51:
08:fb:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:37 2025 by rpki-client