Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: JB9bkba1AUan9si/8NtNxqucJgeCRzn7qF/MGZstEdY=
Subject key identifier: 94:42:ED:D6:FA:FB:49:F3:FD:DE:F2:54:2A:0C:03:99:F5:92:98:F8
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019A725CADD679CD4AF128DC57C12859CAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0983
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 6iLJLcBkeeImLjxFfDLmV2Z5/gCGKFRgM0poJ26h+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ad:d6:79:cd:4a:f1:28:dc:57:c1:28:59:ca:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=9442edd6fafb49f3fddef2542a0c0399f59298f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:68:c0:b4:13:22:27:69:6a:7c:79:c0:6c:
8a:ab:28:fe:a5:8f:4d:32:ee:34:69:06:5b:c8:db:
3b:af:2c:77:4c:21:eb:66:f8:52:51:79:88:c6:6a:
71:53:9a:13:48:3b:b9:75:fe:96:29:8d:37:a4:ad:
72:b8:1f:60:70:79:0b:cd:3d:02:26:b5:34:65:d6:
c6:fc:6a:3f:35:f7:6e:f1:66:53:ac:d9:0a:01:d8:
f5:9d:f4:4c:78:82:3b:2a:6d:68:42:ce:bf:ca:d8:
24:5d:51:50:66:d8:23:b5:88:4c:87:3f:e9:ab:60:
39:83:e5:c8:5c:f0:3b:4a:af:e2:8e:ac:4e:2c:73:
89:5f:d9:e3:a8:5c:87:21:ae:3f:92:d8:d7:63:38:
3e:cd:6b:f9:2f:f6:99:53:7e:31:d4:31:e9:96:3d:
9b:67:fa:1a:3e:9b:15:46:3a:56:93:91:70:08:f7:
8c:34:8f:ac:31:29:86:0c:72:0f:fe:64:f4:2e:07:
8b:81:35:5e:97:6e:3a:12:6c:2c:3a:9d:39:9c:8c:
1b:52:87:7b:47:ce:28:99:d9:af:c0:0f:be:29:f3:
53:dd:f2:97:8e:8e:fe:24:75:ed:f1:e6:91:86:10:
97:74:11:ad:da:6d:55:fe:aa:1e:e9:d8:5e:84:da:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:ED:D6:FA:FB:49:F3:FD:DE:F2:54:2A:0C:03:99:F5:92:98:F8
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7d:81:c8:31:5a:74:93:82:20:e0:b7:00:d4:bb:bd:f8:96:
f8:7e:bb:6e:d5:fa:15:64:9f:f5:d6:3d:d5:4f:34:12:e3:dc:
12:88:b9:73:98:22:12:21:36:20:be:8c:a6:0e:93:3a:cd:81:
d9:15:3a:cb:1d:c4:8a:54:c8:c9:aa:d4:08:c0:ae:82:74:34:
c7:40:aa:33:e5:ec:25:f0:93:77:6a:92:62:8c:0b:bb:a5:ff:
30:9a:e3:de:71:e2:b8:6b:62:59:df:e7:24:87:25:fc:7f:6c:
8c:5b:35:79:cd:b4:a3:2f:f3:fe:e7:27:a5:83:a4:92:7b:db:
a0:9e:31:f8:f0:eb:df:99:f7:86:40:bf:7d:8d:a3:61:3e:25:
b5:44:9e:9d:b5:65:ac:41:52:1c:49:99:0e:e2:7b:1c:f5:4f:
b7:4b:56:30:28:8f:33:79:82:e8:d1:bd:33:64:4c:3a:b3:71:
0e:2f:ae:3e:e9:8d:4b:f5:e1:5a:a1:bd:ed:3f:20:9a:ce:bb:
43:f5:f2:2e:46:a3:07:da:a6:5f:47:af:7f:e0:59:86:60:09:
1f:bc:64:8f:89:85:d6:22:50:b5:1f:8f:bd:f3:e4:a3:ab:54:
3e:33:12:da:fd:d2:17:ff:02:b2:1d:9b:39:92:ee:e3:ba:f9:
64:b5:ca:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXK3Wec1K8SjcV8EoWcq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl
NDU4MGEwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
Eyg5NDQyZWRkNmZhZmI0OWYzZmRkZWYyNTQyYTBjMDM5OWY1OTI5OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2towLQTIidpanx5wGyKqyj+pY9N
Mu40aQZbyNs7ryx3TCHrZvhSUXmIxmpxU5oTSDu5df6WKY03pK1yuB9gcHkLzT0C
JrU0ZdbG/Go/Nfdu8WZTrNkKAdj1nfRMeII7Km1oQs6/ytgkXVFQZtgjtYhMhz/p
q2A5g+XIXPA7Sq/ijqxOLHOJX9njqFyHIa4/ktjXYzg+zWv5L/aZU34x1DHplj2b
Z/oaPpsVRjpWk5FwCPeMNI+sMSmGDHIP/mT0LgeLgTVel246EmwsOp05nIwbUod7
R84omdmvwA++KfNT3fKXjo7+JHXt8eaRhhCXdBGt2m1V/qoe6dhehNq+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRC7db6+0nz/d7yVCoMA5n1kpj4MB8GA1UdIwQY
MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt
YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4
LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr32ByDFa
dJOCIOC3ANS7vfiW+H67btX6FWSf9dY91U80EuPcEoi5c5giEiE2IL6Mpg6TOs2B
2RU6yx3EilTIyarUCMCugnQ0x0CqM+XsJfCTd2qSYowLu6X/MJrj3nHiuGtiWd/n
JIcl/H9sjFs1ec20oy/z/ucnpYOkknvboJ4x+PDr35n3hkC/fY2jYT4ltUSenbVl
rEFSHEmZDuJ7HPVPt0tWMCiPM3mC6NG9M2RMOrNxDi+uPumNS/XhWqG97T8gms67
Q/XyLkajB9qmX0evf+BZhmAJH7xkj4mF1iJQtR+PvfPko6tUPjMS2v3SF/8Csh2b
OZLu47r5ZLXKwA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client