Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: kXU41hvcxwRclBwMiSlFo6W8jwLdNSzpC+KnPL4zxKQ=
Subject key identifier: 04:C4:AA:B2:49:6E:D7:B5:BC:01:70:7C:DC:52:72:C5:D7:7E:9D:53
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 019A70A59B0267DD5910633464BF63D77142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:32 +0000
Manifest this update: Tue 11 Nov 2025 02:01:32 +0000
Manifest next update: Wed 12 Nov 2025 02:01:32 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: bHtwxkONc38exrVeB1P2/KBf5lfaqbgJj6fAqhcA7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:9b:02:67:dd:59:10:63:34:64:bf:63:d7:71:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Nov 11 02:01:32 2025 GMT
Not After : Nov 12 02:01:32 2025 GMT
Subject: CN=04c4aab2496ed7b5bc01707cdc5272c5d77e9d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:c0:58:c4:f0:0d:23:59:f7:8a:b6:34:f2:
de:29:05:ed:05:6b:f2:61:77:9d:7b:d1:55:7b:32:
3b:47:5a:92:9e:24:5a:a9:23:8b:6a:c4:81:ee:cc:
cc:47:c7:26:44:57:56:35:d1:09:26:c3:92:1a:13:
85:2f:99:39:c0:a4:1e:5f:dc:fd:82:2e:7a:b7:ea:
3b:e5:6b:fc:89:e5:49:8e:4b:73:f9:00:f5:c0:ca:
73:92:f5:08:05:ab:b4:26:b9:aa:06:f1:50:02:2a:
e7:91:86:06:7f:0e:19:4a:d8:8c:4b:4c:e5:97:16:
45:b2:5f:78:f4:98:9d:a8:b7:27:e7:ad:fe:5d:6c:
14:16:89:f2:1a:f5:ea:27:f4:a4:e8:5d:57:e3:07:
fe:33:ce:69:bd:5a:0a:73:47:7a:c4:db:cd:c0:9a:
81:78:bf:72:29:88:b5:db:de:d7:b8:18:18:43:b6:
3f:08:bf:c6:db:5a:54:c7:3e:ec:22:41:1e:9e:43:
2c:9c:a0:46:42:8e:e4:5d:05:08:95:ab:bb:4c:ca:
84:89:74:e5:ae:8a:aa:28:47:5b:1c:e7:37:7c:84:
b2:c5:dd:52:ea:88:ef:8e:2f:be:c8:d7:3d:b8:ed:
27:d9:58:bc:8d:45:d3:77:1c:bd:f6:70:7b:6e:38:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C4:AA:B2:49:6E:D7:B5:BC:01:70:7C:DC:52:72:C5:D7:7E:9D:53
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:3a:c2:9d:4f:cd:f1:a2:12:2e:8b:c6:13:3a:95:59:80:
69:c2:f5:a9:66:43:57:37:79:ee:4d:54:36:21:5b:b7:15:f7:
31:3c:6c:5e:d4:ac:2f:6b:78:af:78:16:81:40:c1:86:4b:9d:
3c:13:63:40:fd:47:4d:73:ec:71:52:8e:f5:94:d1:85:15:01:
8b:13:3d:3f:c3:13:fb:de:ba:ea:b8:f6:88:5f:75:a4:07:8d:
86:0e:eb:41:fe:ce:4f:00:6f:bc:0d:df:ce:3e:1f:ec:df:ac:
8a:59:80:59:81:55:04:07:84:9e:f9:58:19:71:ea:68:59:12:
8c:17:c5:71:e9:b9:d6:34:70:bb:c4:2f:ca:53:27:49:eb:03:
5b:b9:a1:0c:97:bc:7a:0a:1d:33:db:0d:ea:33:3b:75:08:9b:
0d:12:15:c1:59:6c:c3:d2:99:fd:1a:20:9e:85:fa:58:d9:d6:
ba:e0:a4:4f:2b:eb:a2:46:e7:33:e1:b6:17:1a:77:cc:47:73:
d3:6d:3d:3c:ae:73:d0:58:bb:5a:3f:69:14:f4:75:62:51:92:
76:a0:21:a7:4f:2e:c1:b6:54:75:c9:e3:1b:10:b3:d3:01:0c:
4e:03:94:75:20:2a:66:15:78:b1:ed:6f:58:ee:14:75:c0:68:
71:9b:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:45 2025 by rpki-client