Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: JuqCeKTW16dDXjfwzdUv6Ds1qNCwSK0xF9nKyXWN4rI=
Subject key identifier: BF:04:AA:98:6F:62:21:5E:9F:EA:1B:C0:C5:58:FF:9F:21:3F:C6:82
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 01968A3785D86CC04C5DFD566AFC25AC6BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 05:00:16 +0000
Manifest this update: Thu 01 May 2025 05:00:16 +0000
Manifest next update: Fri 02 May 2025 05:00:16 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: V4KFjp1YqWjATRLX/DaTQfRqF8W9Zmlplb+YBTvQO3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:85:d8:6c:c0:4c:5d:fd:56:6a:fc:25:ac:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: May 1 05:00:16 2025 GMT
Not After : May 2 05:00:16 2025 GMT
Subject: CN=bf04aa986f62215e9fea1bc0c558ff9f213fc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:e6:7b:5b:15:36:c3:14:ac:5a:a3:63:9d:
e4:c4:5e:96:3a:fd:2e:ee:e5:32:b7:13:18:9b:7a:
db:11:7c:85:a6:e3:12:3c:12:1c:cc:ee:75:b1:e2:
21:95:31:6f:2e:9b:45:87:b4:43:1f:29:f6:22:3a:
2c:29:01:3d:4b:a1:e4:b0:3f:17:26:6e:16:00:cf:
5b:e2:0f:82:7a:b8:88:03:2c:27:00:85:77:ca:8e:
ab:e4:7c:83:dc:bc:d2:83:c1:4c:05:9d:05:34:f0:
07:e4:fb:ec:8b:68:bf:ca:f8:9a:91:9e:0a:25:23:
39:f2:55:d1:93:0d:0c:eb:40:6f:00:7e:4f:8d:a9:
30:a4:5b:f3:2d:f5:89:c5:a3:6f:8b:bb:fa:2b:e9:
e1:48:a1:e8:2d:69:aa:80:5e:f9:85:9b:5f:97:0c:
42:72:9d:cb:3a:20:af:35:cc:42:3f:8a:51:d8:a1:
97:c2:0c:2f:c2:2e:d5:06:6c:25:17:b0:b5:e4:33:
ef:05:07:b0:26:53:2c:67:e4:bc:97:95:3f:32:29:
59:b8:42:6e:5b:80:6e:3b:79:88:af:70:fb:c7:03:
d3:30:97:d5:53:7c:be:a9:4e:99:fc:06:1d:01:86:
8f:68:93:53:b4:83:c5:79:42:52:29:e4:4e:50:c3:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:AA:98:6F:62:21:5E:9F:EA:1B:C0:C5:58:FF:9F:21:3F:C6:82
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:e7:16:98:a2:47:14:45:57:dc:f3:72:74:69:c5:ee:34:
64:ff:ab:32:35:7f:0e:8e:49:18:89:46:75:14:23:4c:a7:3c:
9e:f6:6c:53:78:9e:3f:18:4f:89:6b:a6:ca:7d:57:cc:3e:91:
54:92:24:f0:3e:ee:89:94:5f:ca:5b:f6:6a:cf:8e:1b:d1:09:
a5:ce:d4:27:35:93:f3:08:d5:c2:c2:3b:2e:61:0e:80:cc:71:
15:41:f4:d2:05:e9:88:fe:07:a3:06:6e:78:88:97:92:81:61:
0d:a8:a9:17:aa:4f:8d:af:25:37:b8:2f:10:84:60:1c:b9:6d:
82:90:aa:36:87:a5:2f:d6:eb:78:9c:bf:09:3f:19:0c:ad:8e:
ee:e6:04:f9:2f:f3:a4:1e:08:fd:98:19:38:f5:b5:20:74:37:
98:41:6f:17:04:45:1b:39:f1:30:fe:f8:7e:78:c6:b6:37:26:
a4:24:cf:9b:27:a4:f7:7d:36:3d:c4:36:de:06:0a:f1:8d:7b:
7e:f9:d6:06:c6:dc:29:5b:dd:69:ad:fc:a4:18:9b:ac:04:1f:
72:c3:3d:ee:38:ae:3f:e0:3d:90:97:51:04:ae:21:a6:cf:50:
a2:93:97:54:af:af:5c:bb:81:51:cf:09:93:60:81:51:82:84:
b6:50:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:30:11 2025 by rpki-client