Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: 4bH30/QovHP6CiztBa621ZrD2gUlkzO8m7bo/WMFTTU=
Subject key identifier: 29:18:81:6C:07:66:89:10:B7:49:C4:11:C5:0B:36:7C:6B:8D:89:CA
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0198481B87BAE48A4B091570A65E921C57E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0864
Signing time: Sat 26 Jul 2025 19:00:20 +0000
Manifest this update: Sat 26 Jul 2025 19:00:20 +0000
Manifest next update: Sun 27 Jul 2025 19:00:20 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: k5F0E890ANC90m5KZSI5WpxbOK4VFW6FbgmHgnF/klk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:87:ba:e4:8a:4b:09:15:70:a6:5e:92:1c:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Jul 26 19:00:20 2025 GMT
Not After : Jul 27 19:00:20 2025 GMT
Subject: CN=2918816c07668910b749c411c50b367c6b8d89ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:64:bc:74:e8:e9:4c:8a:28:af:ff:84:88:
c0:52:07:64:0f:c2:cd:2d:34:da:78:9c:61:f3:35:
4a:6f:e5:c5:d8:e7:9f:08:6e:0f:1c:f9:9e:8c:c8:
90:23:3a:c5:40:1d:9c:d0:e3:75:4f:a1:b0:1d:70:
02:f8:77:bb:6d:ae:2a:5b:5f:06:bc:91:c3:06:5e:
98:d8:4f:13:0b:e7:8d:c2:6c:1c:d8:ee:fb:47:a9:
d1:70:f3:9f:4b:59:c5:09:db:52:a8:7c:e7:05:d0:
e2:69:8e:f8:52:83:3c:de:90:16:58:ff:f0:78:26:
59:7b:01:eb:09:47:cb:48:d2:46:fe:95:94:da:9f:
29:91:b4:a5:a7:58:a9:cd:ae:58:33:8a:d9:b4:bc:
b0:64:fd:17:c1:3d:31:6f:0a:51:83:ab:9c:04:d7:
8a:74:40:d5:02:00:6a:be:6b:db:23:a6:f4:69:02:
2d:91:d5:53:a6:b3:c2:a5:e0:33:db:77:66:8b:51:
40:ce:1e:c1:85:43:ee:66:d8:0a:e3:d3:8f:b4:15:
25:25:be:60:7d:67:f6:a5:42:9c:9d:fd:8a:28:6f:
da:5b:56:46:39:71:ee:2a:e2:f9:f3:e0:98:c6:19:
e8:82:48:05:0a:6b:a3:35:86:bc:00:df:16:d1:04:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:18:81:6C:07:66:89:10:B7:49:C4:11:C5:0B:36:7C:6B:8D:89:CA
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:42:78:e2:3c:3e:07:36:33:2c:50:6a:43:f1:e0:cb:86:f7:
07:20:16:c4:44:1a:22:60:f4:14:bd:06:4b:8c:ff:8b:7b:93:
60:f9:c8:bd:c0:97:76:cf:29:67:f3:e1:04:ce:1f:9a:90:13:
52:af:68:bd:6b:4f:70:75:ad:5d:1b:26:4b:db:3e:05:6e:83:
f7:66:bd:40:96:8a:48:c0:57:0a:57:4a:75:cb:f1:e4:66:32:
70:54:c4:73:b4:0b:7d:32:54:5e:5d:70:14:35:a5:8b:58:a9:
83:fd:ae:be:91:b0:9b:b6:67:c5:11:47:98:88:67:8e:39:d0:
68:09:2c:3c:e2:70:0b:e0:4b:cb:75:05:1e:b0:66:0e:e2:0e:
5f:aa:28:e4:4e:a1:01:1f:cb:8c:55:41:d6:2b:70:b3:04:2e:
06:c8:31:6e:ce:2e:13:27:d0:ab:ac:c1:85:33:1f:41:ac:c9:
da:fc:b7:8f:d2:31:2f:5e:71:5d:98:10:27:2a:a8:4b:eb:bd:
dd:83:41:a1:32:5a:6c:93:7a:e6:5b:bf:67:52:2c:b2:b9:80:
19:5f:c1:09:92:de:3c:09:32:9f:7e:3d:89:2a:33:1e:f9:8b:
ac:a4:19:f5:72:5f:04:f4:db:72:72:77:f5:04:7c:3d:d1:0d:
41:77:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:43 2025 by rpki-client