Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: 8XWpR2NVV/PRZcl28oCEkhI7U5w7hNUcD2WxnC15LeE=
Subject key identifier: 1A:1F:31:FB:01:66:F2:FB:D0:A9:C0:B4:B2:D3:AF:BF:19:CA:C2:28
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019777C10235A243B9F32B3096AA4E5BE53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 08:00:27 +0000
Manifest this update: Mon 16 Jun 2025 08:00:27 +0000
Manifest next update: Tue 17 Jun 2025 08:00:27 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: km6QMDq/gm8NxBV/qBFQG3SAe+1ENwCKMB4l6AZAEQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:02:35:a2:43:b9:f3:2b:30:96:aa:4e:5b:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Jun 16 08:00:27 2025 GMT
Not After : Jun 17 08:00:27 2025 GMT
Subject: CN=1a1f31fb0166f2fbd0a9c0b4b2d3afbf19cac228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:8b:5c:12:e4:e9:43:2b:8e:89:83:32:ce:
ac:e8:1f:18:7d:51:ea:11:64:55:fd:6d:61:b0:07:
34:89:e5:ca:cf:25:02:8f:72:89:16:43:b1:73:a5:
83:ae:46:01:c1:0f:61:16:35:4d:3c:80:db:88:03:
fa:5b:d7:13:16:3f:e3:0e:bf:bd:44:d4:c0:81:4e:
8d:d5:f2:17:ca:fa:82:81:ac:6d:ae:42:4d:1f:02:
1b:bf:9d:dd:14:ac:99:8a:49:5f:d7:5d:d5:90:47:
f3:05:d5:95:9f:fb:6d:44:8d:34:80:ac:0d:e0:23:
a4:75:59:85:32:25:cb:10:ca:70:21:d0:55:67:2f:
08:c4:52:39:73:df:59:7a:f0:50:e8:82:a2:80:bc:
06:fd:f5:bc:a4:94:0b:44:82:23:e5:5a:d9:66:c7:
15:a7:3e:d1:5b:53:2f:00:44:a0:dc:99:90:98:6f:
ed:47:5e:4e:81:ea:8d:63:93:f2:c7:61:9b:dd:41:
fe:87:2d:14:01:ec:66:f8:5f:a8:70:02:b7:02:12:
e3:44:0d:e3:a0:1e:cc:48:f8:61:ac:e3:a5:ce:44:
cf:ea:c5:41:bc:36:cb:11:93:7a:a5:53:c6:47:f0:
30:c6:75:a8:34:5d:b3:52:ea:13:97:f2:ee:60:bd:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:31:FB:01:66:F2:FB:D0:A9:C0:B4:B2:D3:AF:BF:19:CA:C2:28
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:26:1d:c6:52:c8:3d:73:4a:8b:a1:37:c0:c4:85:26:de:5f:
f9:94:d0:9d:de:32:3e:1d:9a:96:cb:b7:07:bc:3a:6b:e7:70:
37:df:e2:1d:d8:5b:1f:4a:5a:80:53:28:ac:a6:dd:a2:70:9f:
bd:88:07:45:e6:07:c6:91:3a:a0:e4:9e:2f:3e:18:7c:11:5b:
d9:e9:e7:d9:2a:d5:23:5a:66:e2:76:36:20:49:9f:51:fe:a3:
3e:e0:a5:0b:81:ff:0e:e5:98:70:bc:8a:fd:99:b6:30:0a:23:
6e:73:44:a0:3d:cf:c0:34:5a:37:5c:9d:d8:4c:a9:a3:8a:a4:
6e:ca:0b:08:19:eb:a4:56:f5:63:dc:79:32:ff:08:74:48:70:
d7:83:2e:a9:00:02:31:2f:87:5b:8d:3d:7f:19:b8:83:7d:ec:
09:e4:4b:29:38:8c:34:58:27:64:7b:6b:bd:c8:a1:15:ec:42:
ba:86:dc:e0:74:14:3e:0a:e6:be:a3:b7:04:ff:21:cd:2a:c7:
74:95:a9:1c:4d:f0:6d:98:32:26:58:fc:8e:8e:8c:c2:e1:98:
e2:a1:6e:91:2c:5f:d1:0b:ce:ad:97:1f:cb:b9:f8:73:eb:c7:
01:ba:7c:b0:03:d2:99:47:c0:a9:0e:36:4c:d4:64:44:8b:f8:
f4:f3:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:36 2025 by rpki-client