Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: RDOCI3DRe+gcBzkNiWa4ol4N2jOJ+a7uZebL2tsdrl0=
Subject key identifier: D4:2B:08:FD:0F:BA:A8:56:0B:D8:63:47:9B:9B:F9:A0:BC:58:9F:85
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 01975046195C17E13F18A9093D8313C79E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 08B3
Signing time: Sun 08 Jun 2025 16:01:00 +0000
Manifest this update: Sun 08 Jun 2025 16:01:00 +0000
Manifest next update: Mon 09 Jun 2025 16:01:00 +0000
Files and hashes: 1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: D7nJRZwz1464KfnXojayx5bvocJiLedkt9SKiQGnZKg=)
2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:19:5c:17:e1:3f:18:a9:09:3d:83:13:c7:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Jun 8 16:01:00 2025 GMT
Not After : Jun 9 16:01:00 2025 GMT
Subject: CN=d42b08fd0fbaa8560bd863479b9bf9a0bc589f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:6d:b2:3d:6f:dc:f2:90:03:55:2c:e8:1e:
81:c9:72:8e:2e:1b:33:ab:c0:3a:9b:43:ae:0c:7a:
e3:05:7d:74:2b:80:80:b9:8a:87:a3:c6:fa:7b:fe:
e9:27:8e:55:4d:09:31:e8:b6:72:d0:8f:43:f9:45:
53:66:28:85:94:62:61:bd:5a:d0:b5:3a:57:67:eb:
ba:15:66:46:19:cc:19:64:fd:08:ea:f7:be:c5:f1:
22:51:20:7e:ef:0e:a6:de:f9:c7:fe:ae:65:17:b6:
6b:92:9e:d7:6e:89:2f:fb:f9:b6:e2:c7:5d:57:78:
e8:67:e4:ea:e2:64:6d:2e:0c:82:82:03:1d:45:47:
a6:61:17:b3:88:54:6e:44:b2:d4:9a:05:06:e0:c3:
63:19:36:1b:9a:12:84:90:87:9a:72:ce:54:b5:c1:
62:99:eb:f8:f8:e3:5d:b2:af:a1:ad:b8:66:93:26:
63:a7:01:c5:69:da:6a:a1:75:f7:23:b4:1a:36:2a:
e6:1f:98:71:0d:50:b2:ee:5f:5e:48:c5:72:85:56:
01:31:2b:d3:a0:72:4b:87:49:dc:5d:bf:3b:8b:53:
26:86:2c:c9:74:77:ed:da:90:a5:9c:65:3d:ba:7a:
d7:bd:80:7d:35:12:df:85:20:e3:23:ab:c6:27:ad:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:08:FD:0F:BA:A8:56:0B:D8:63:47:9B:9B:F9:A0:BC:58:9F:85
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:bc:3f:2a:1e:2d:50:cc:12:1b:c3:1d:3d:6b:5b:9d:74:
c5:87:03:af:b1:6c:37:b6:d6:9b:00:8e:84:a6:1e:da:d6:74:
b3:0b:4c:e4:03:20:5e:23:08:c7:2d:cd:95:22:03:ab:58:1b:
a0:7f:bb:10:c7:85:e9:69:95:fc:ab:7b:5d:dc:07:8e:fa:b3:
12:45:7b:d3:f8:2f:78:9f:6f:18:a2:73:22:d5:da:19:f5:61:
74:26:20:b8:e5:9d:16:c6:be:9d:f2:82:a6:ba:26:29:68:6e:
5d:63:7b:6c:26:f1:0f:cf:a7:2e:ba:98:7c:fe:8f:80:7e:4b:
00:30:ad:bb:56:59:08:12:a6:a5:f3:64:d9:bf:3e:24:a8:04:
19:42:19:ff:75:54:13:e2:9e:a8:9f:af:7c:39:9a:6f:ba:39:
70:c7:cb:12:ff:d5:67:67:23:b0:5e:71:d5:55:55:52:0d:25:
c7:94:76:7f:b7:92:1d:89:26:0d:59:9d:33:0d:ef:2c:4e:cf:
58:aa:9b:58:d0:5d:6b:42:fd:2d:2a:11:0a:44:12:48:ac:60:
3b:a6:44:e5:c0:a0:cf:06:13:d0:eb:b7:ec:40:f3:9e:a9:5f:
1a:44:db:f3:b9:41:43:9c:ff:8b:d4:53:bb:9e:f3:1d:52:7b:
38:71:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:31 2025 by rpki-client