Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: TonOLZENJ5eH+ZMBLETHM9k+vSsh9d1/QmngDQULjCE=
Subject key identifier: EE:A5:06:86:15:80:56:17:0F:6F:46:77:DC:53:FD:3C:BF:A9:6C:6A
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 01974B1FC0439E0A9C34CF594B87D67DEA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 07E1
Signing time: Sat 07 Jun 2025 16:01:01 +0000
Manifest this update: Sat 07 Jun 2025 16:01:01 +0000
Manifest next update: Sun 08 Jun 2025 16:01:01 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: sWBBYC4wfqOvAaEx54gEoWc5xA3R1fPu+vRduj06dDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:c0:43:9e:0a:9c:34:cf:59:4b:87:d6:7d:ea:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Jun 7 16:01:01 2025 GMT
Not After : Jun 8 16:01:01 2025 GMT
Subject: CN=eea50686158056170f6f4677dc53fd3cbfa96c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:eb:f7:2d:47:f8:0a:6a:aa:34:07:7d:a7:
dd:c9:ac:82:97:a6:f4:cd:5a:d4:58:b5:8e:dc:4e:
5b:8b:93:d2:28:f5:7e:25:76:b5:dd:2e:09:20:28:
58:cf:71:52:42:9c:ac:a4:76:0a:e0:e8:74:09:1f:
89:62:63:21:86:37:60:92:c4:00:9b:a3:47:f7:2d:
b1:12:be:85:bc:a2:d9:84:c8:2b:9d:3f:ce:e7:f9:
63:91:5e:d4:f4:b7:2d:66:2a:61:e2:94:b1:f4:14:
ce:cc:0c:ac:c5:53:94:0d:12:c2:a3:60:b4:fd:01:
68:1a:66:b4:9b:ce:6e:eb:af:32:3b:43:82:0a:d9:
53:69:06:61:12:00:fb:8a:bd:47:a5:6f:e0:50:17:
54:4f:68:f7:b0:ba:ac:9f:6f:84:75:ee:40:f3:d5:
77:3e:42:b4:20:aa:a3:0c:59:07:ba:c0:c4:27:f7:
4e:e5:c9:14:86:fa:a5:ad:1c:6a:4e:95:4d:34:c9:
45:8a:f7:b1:5b:b3:0d:bd:ce:b4:d9:a2:3b:27:5f:
13:20:81:d7:29:f5:dd:f4:b8:47:39:4f:18:ff:35:
68:0e:93:c5:ef:a5:3b:89:9d:f1:7a:47:32:f4:f8:
ed:02:e8:7b:57:b7:82:55:e6:e8:1d:5e:78:b9:db:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:06:86:15:80:56:17:0F:6F:46:77:DC:53:FD:3C:BF:A9:6C:6A
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4d:2f:c6:64:9e:bf:c5:bc:8b:c4:aa:23:06:b5:92:e7:d4:
3b:2a:97:ff:1a:bf:e0:c5:a8:19:85:6a:b8:35:8d:96:57:fc:
95:d1:8b:bf:ff:13:c0:7f:be:a4:5f:a0:81:7d:23:9a:62:73:
59:b4:1c:f6:12:a8:07:c7:f5:eb:8a:25:b0:a6:e4:ef:0d:4a:
58:e4:d7:ab:e7:6e:81:51:1b:1d:69:a5:61:6c:82:90:bd:78:
9a:3c:0a:36:5f:e6:12:4b:3a:ec:c3:5e:9f:09:d5:00:c4:95:
fb:61:25:da:8c:b7:61:3f:ae:74:e1:29:2b:df:5c:3c:17:ea:
a4:9f:5c:2f:41:c1:d0:fd:68:5b:90:c9:0a:92:ee:91:e8:7c:
32:65:8f:84:5a:ee:30:52:97:47:70:80:55:8d:28:4c:b3:3f:
9b:23:a7:58:18:c9:8c:63:ac:c5:48:61:1a:5a:9a:4e:5e:58:
9f:04:d7:12:88:c6:51:e2:92:6b:f5:7f:e5:54:2b:52:f5:0e:
54:27:bc:ec:08:08:9c:98:6a:63:76:b4:c0:f2:89:ab:92:c0:
8e:86:e2:86:de:79:cf:06:02:41:b0:58:ba:2a:99:2c:11:2b:
ca:42:31:6c:03:1a:d9:e0:e1:1f:86:45:08:52:57:90:eb:a1:
67:89:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:17 2025 by rpki-client