Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: O81PxfVyCoKnTYYHPhGRBP0Gw/y0qFLHX200nBi2VEQ=
Subject key identifier: 92:5A:A0:74:BC:B3:64:E7:B0:64:FF:63:42:61:4F:B0:4F:D8:C8:1D
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 01988DD8E2B7AF770086C4C8BCE6D521F221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 08:00:57 +0000
Manifest this update: Sat 09 Aug 2025 08:00:57 +0000
Manifest next update: Sun 10 Aug 2025 08:00:57 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: LPryx+3gnn4LT6LzkFd07tFx7DuxJ3GjtrEg/+Nat3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:e2:b7:af:77:00:86:c4:c8:bc:e6:d5:21:f2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Aug 9 08:00:57 2025 GMT
Not After : Aug 10 08:00:57 2025 GMT
Subject: CN=925aa074bcb364e7b064ff6342614fb04fd8c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:09:e0:5e:a1:4e:9f:fc:f6:78:02:fa:37:
54:0a:45:e1:e5:11:e0:96:7d:a4:6c:84:00:88:e9:
f4:aa:6b:d6:ab:d9:4e:da:97:3c:51:10:78:10:0d:
ad:96:5b:37:11:43:0b:06:92:ac:36:9f:88:59:62:
33:63:d6:ac:e7:6e:2d:07:2b:dc:28:80:f3:d1:e4:
ae:74:b3:86:90:24:e2:d7:31:8a:1b:a0:49:1f:08:
0e:4f:36:32:10:30:02:30:7d:b3:b6:cd:96:a2:4c:
b2:c7:51:a6:27:6c:cc:00:7b:33:2b:ef:c0:46:46:
e5:39:c6:e3:9a:6d:6e:ed:0d:01:f4:8f:2d:4c:43:
36:96:ed:f9:fa:56:bb:3f:f2:4d:9a:9f:41:5e:96:
78:63:fc:f4:76:9d:7e:3c:75:a8:d9:3d:0c:88:f0:
47:20:3c:e5:85:ba:b1:b1:fd:a8:d1:a8:43:87:b3:
cc:14:d9:cd:56:b4:6e:49:98:e3:4c:7e:c5:12:a6:
88:77:49:3b:98:b8:b9:96:a7:d1:c9:96:fc:a4:6c:
0c:c9:17:a2:95:b9:f9:fb:4f:7b:fa:5b:05:6a:20:
a1:89:0c:9b:6b:94:e8:ad:03:84:19:42:f6:87:3c:
d1:02:c6:c1:62:84:cf:31:b3:fa:6b:07:10:cd:7b:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:A0:74:BC:B3:64:E7:B0:64:FF:63:42:61:4F:B0:4F:D8:C8:1D
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:93:bf:76:9f:7c:b5:c7:b8:86:0a:e0:85:92:ab:c2:6b:
67:fc:0b:9d:58:4f:97:17:0f:05:ee:f1:a6:8f:4d:86:2e:27:
7b:37:a2:f9:36:81:b2:23:9f:fa:db:0c:d6:61:2e:48:a5:7c:
8f:3d:d0:25:bc:4f:9f:36:99:bb:05:3e:91:03:13:83:9f:4f:
05:ed:f5:5a:29:f9:e6:23:da:32:72:09:a7:36:00:e4:ff:9e:
a7:bb:96:3f:07:a3:52:b2:e8:33:cd:77:f2:2f:37:27:0b:1d:
34:8a:7b:80:61:f1:85:9d:ab:df:6f:3b:40:b2:34:4f:a1:6f:
60:e3:e1:56:a5:c2:38:fb:34:bc:2f:5a:7c:04:f3:b6:a9:f4:
de:a3:3a:c4:6c:42:1a:f2:42:d5:6c:e7:cb:45:06:d2:1d:9c:
69:05:fc:5e:40:5c:6f:14:bb:25:ef:46:d5:6a:cb:da:a6:68:
92:fc:0a:12:96:5a:c8:2a:d7:21:de:75:0a:67:31:3e:01:54:
5d:31:84:88:26:9a:fd:7e:5a:c2:d2:6e:2b:98:c9:a4:f5:12:
48:f9:6c:13:e5:8f:86:43:68:44:bd:53:77:13:80:a8:ef:94:
65:52:cb:71:8a:9c:e1:f9:6d:8a:59:63:4f:74:12:41:58:1a:
26:3d:7d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2OK3r3cAhsTIvObVIfIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDA0ODQzYzRmM2E0ZTc2Njk0ZGIzY2ZiZjliZTNhOWI2
N2M2OTkwHhcNMjUwODA5MDgwMDU3WhcNMjUwODEwMDgwMDU3WjAzMTEwLwYDVQQD
Eyg5MjVhYTA3NGJjYjM2NGU3YjA2NGZmNjM0MjYxNGZiMDRmZDhjODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mwJ4F6hTp/89ngC+jdUCkXh5RHg
ln2kbIQAiOn0qmvWq9lO2pc8URB4EA2tlls3EUMLBpKsNp+IWWIzY9as524tByvc
KIDz0eSudLOGkCTi1zGKG6BJHwgOTzYyEDACMH2zts2Wokyyx1GmJ2zMAHszK+/A
RkblOcbjmm1u7Q0B9I8tTEM2lu35+la7P/JNmp9BXpZ4Y/z0dp1+PHWo2T0MiPBH
IDzlhbqxsf2o0ahDh7PMFNnNVrRuSZjjTH7FEqaId0k7mLi5lqfRyZb8pGwMyRei
lbn5+097+lsFaiChiQyba5TorQOEGUL2hzzRAsbBYoTPMbP6awcQzXvNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJaoHS8s2TnsGT/Y0JhT7BP2MgdMB8GA1UdIwQY
MBaAFCfQSEPE86TnZpTbPPv5vjqbZ8aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMt
YjA5YjkzODVkNzI3LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMtYjA5YjkzODVkNzI3
LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQOTv3af
fLXHuIYK4IWSq8JrZ/wLnVhPlxcPBe7xpo9Nhi4nezei+TaBsiOf+tsM1mEuSKV8
jz3QJbxPnzaZuwU+kQMTg59PBe31Win55iPaMnIJpzYA5P+ep7uWPwejUrLoM813
8i83JwsdNIp7gGHxhZ2r3287QLI0T6FvYOPhVqXCOPs0vC9afATztqn03qM6xGxC
GvJC1Wzny0UG0h2caQX8XkBcbxS7Je9G1WrL2qZokvwKEpZayCrXId51CmcxPgFU
XTGEiCaa/X5awtJuK5jJpPUSSPlsE+WPhkNoRL1TdxOAqO+UZVLLcYqc4fltillj
T3QSQVgaJj198Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:54 2025 by rpki-client