Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier: yI/qq5eWvReQmUNIQwpTSngfXjprLqF4yDkHDv4Xs1o=
Subject key identifier: 1A:A8:5B:E2:DB:98:6A:8E:4C:4B:EB:2E:AF:E1:BD:4D:7B:3E:DD:10
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer: /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial: 0199228CF6463D95287A6FD3B6C8A709799D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: 55uUM8GKQ0QxJrAcXyTGCoblJOs.roa (hash: M6Ue/e2O11bBW2Irb1AfcpExVn7GWeYJRelwWjzoc5U=)
2: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: vddo+WEDzXpGVTPffAjJ0LAjTVRp2Z8uL5w48ajPqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f6:46:3d:95:28:7a:6f:d3:b6:c8:a7:09:79:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=1aa85be2db986a8e4c4beb2eafe1bd4d7b3edd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:e9:bd:53:7a:2e:3f:63:7a:38:aa:e3:93:
78:20:29:78:8c:3d:11:7d:7a:69:87:6f:71:98:48:
b3:7c:0a:29:bf:ea:95:10:df:1a:c4:42:cd:f5:f5:
90:ac:6b:0d:5e:b1:01:cc:02:ce:ab:7d:1c:92:f2:
0d:b7:d6:7e:64:15:5b:62:36:9d:b7:4f:97:25:bc:
a1:af:51:88:ca:aa:ee:5b:5d:fc:57:a5:96:d3:37:
d9:1d:e8:67:89:46:7c:3c:6d:8c:d5:60:03:bd:5a:
6c:4a:52:37:ab:57:48:2e:be:e4:3d:f4:c9:da:37:
e8:58:89:24:2a:e2:3f:13:78:b9:06:3f:66:76:2a:
22:95:aa:6b:5a:32:08:9a:df:d5:f7:a0:4f:a8:7b:
6f:89:4e:72:0f:94:f1:99:50:cc:f4:88:8a:dc:bb:
8c:f0:ec:41:78:0d:32:c3:af:e7:28:fc:0b:cd:fa:
50:f0:4b:9c:bd:73:28:38:92:f7:2b:dd:99:9e:1a:
4f:f0:72:e7:63:04:e2:e7:f7:60:fc:ca:ca:93:ff:
0b:03:25:03:31:6d:27:f8:c5:fd:07:7e:1a:16:a0:
66:68:70:a3:fc:a3:35:77:40:e0:37:a2:ee:1b:80:
be:19:f8:c2:15:a5:20:f2:02:75:6e:58:ad:97:aa:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:5B:E2:DB:98:6A:8E:4C:4B:EB:2E:AF:E1:BD:4D:7B:3E:DD:10
X509v3 Authority Key Identifier:
keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:22:42:c2:72:9b:c3:df:72:f6:04:a9:10:8e:6d:81:26:5f:
c6:a9:0c:80:07:f0:d5:f4:81:3e:1b:29:34:6c:b8:ee:15:6d:
00:c4:8d:c5:ce:f9:3e:31:30:02:51:ae:83:1a:7a:af:da:33:
ac:01:8d:9e:8e:7e:e8:10:cb:92:6c:6d:01:fc:7c:44:5a:74:
b9:66:99:bd:16:51:66:ab:57:ec:d6:f9:57:7a:90:5a:fa:73:
4b:65:05:f0:36:e1:9f:d8:0e:fe:75:d0:3e:97:95:60:2b:f0:
ab:3d:81:6f:23:03:b8:54:26:63:dc:8c:80:02:01:fa:e0:a3:
30:74:c1:c3:34:e2:1d:03:ae:51:88:2a:f6:95:0e:31:d2:f8:
d9:32:57:09:c3:43:e2:d9:7b:d8:dc:9a:c3:17:98:bd:b9:1f:
d5:13:00:17:91:c2:5b:69:f6:99:72:f7:31:81:24:4a:47:ec:
1b:b1:e5:da:a7:cc:f6:65:79:30:d9:7a:51:da:ee:2c:45:65:
db:4a:32:95:a1:4f:92:3a:1f:8a:76:ad:f9:17:6d:38:d1:79:
75:78:ee:ba:f9:26:2e:2b:79:b6:84:1f:c1:58:d8:b9:2b:68:
bc:ee:4d:56:d8:d8:fd:a0:0d:3b:52:ce:77:ad:99:35:24:fb:
28:c7:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:50 2025 by rpki-client