Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: lE8SInkJe+f0Djm2dr205Q3WwNsq2w4YJrRXrviopto=
Subject key identifier: 0B:50:85:B2:90:9E:3C:A9:80:17:EA:76:D7:64:78:35:53:20:A9:6A
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 0199FFC8745E6E8B529F1844794F10FC0F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0A17
Signing time: Mon 20 Oct 2025 04:02:31 +0000
Manifest this update: Mon 20 Oct 2025 04:02:31 +0000
Manifest next update: Tue 21 Oct 2025 04:02:31 +0000
Files and hashes: 1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: cO8JUn/dsr++doNgCeT6p7EZ5ZdrwCkqiXwsO+HPocY=)
2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:74:5e:6e:8b:52:9f:18:44:79:4f:10:fc:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Oct 20 04:02:31 2025 GMT
Not After : Oct 21 04:02:31 2025 GMT
Subject: CN=0b5085b2909e3ca98017ea76d76478355320a96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:dd:ce:f1:c1:2e:27:b0:9c:14:90:57:6c:
09:32:68:67:c5:19:d3:8e:d1:7c:6d:f5:75:95:6f:
2e:35:d0:38:32:2a:5c:6a:7f:76:cc:42:0b:53:ad:
e8:27:1d:22:6c:ce:84:07:6d:23:6d:7c:c8:da:e6:
1b:90:5b:7d:a4:c4:ee:f7:b1:a6:80:4c:6d:45:49:
e6:48:23:11:73:04:77:0d:fe:4b:8a:36:d0:4e:8f:
94:46:f0:20:41:38:dc:6e:ad:2b:2b:1c:99:0e:84:
f1:0b:de:c9:0d:84:74:f7:7b:62:db:77:cc:0e:b5:
17:a9:69:96:70:f3:e2:5d:bc:7d:88:2e:ef:d4:b5:
b6:d1:d1:fe:da:6b:85:d5:e1:c8:35:92:09:64:41:
b5:da:5a:38:9c:2d:ab:d2:6e:5e:22:e9:65:a0:fc:
06:a5:8f:d8:85:0c:c4:ea:e7:e1:6f:cd:c6:15:e4:
23:85:c6:61:0f:8e:eb:93:e6:8f:48:d6:86:33:91:
b8:56:fe:a0:5f:72:81:a5:32:0d:af:05:25:0c:79:
3e:1e:b8:14:25:71:50:e4:53:36:6b:dd:1f:97:27:
3f:64:81:31:d6:45:47:78:60:22:86:d4:22:7d:e1:
37:24:a1:49:d9:d2:dc:02:6a:a2:5d:dc:63:ca:cc:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:85:B2:90:9E:3C:A9:80:17:EA:76:D7:64:78:35:53:20:A9:6A
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:b9:13:94:b2:e0:34:51:81:a4:f1:07:65:b9:a7:1e:bd:
63:1a:d1:c4:f5:64:85:5d:c8:9a:77:41:b5:b3:8f:c5:0b:e7:
72:32:eb:70:ea:24:0b:1b:27:62:23:21:c5:19:d7:5f:dd:72:
dc:df:07:fc:10:55:3d:55:13:ed:16:20:8a:3e:6b:82:94:85:
07:37:80:20:fe:8f:29:e1:bf:49:25:dd:06:4f:6c:11:ac:c2:
4f:1b:9c:a5:06:4d:63:1d:bf:1a:54:d3:d3:fd:f5:ba:97:49:
40:e4:01:4d:a2:5e:cc:80:35:5b:b9:9a:74:f1:c7:54:89:c6:
75:61:91:67:fa:57:4f:4d:e4:13:5e:82:e8:77:26:09:43:16:
07:83:50:c4:52:8a:6d:b9:db:aa:67:bf:1b:30:7a:08:5d:0d:
13:76:9f:8f:b0:5f:71:44:ed:33:f3:b4:47:c6:26:25:54:8a:
a4:06:75:7c:13:de:21:c0:01:76:1c:8e:26:53:90:08:c5:9f:
bf:b0:b2:21:be:3c:76:d3:1c:65:82:a6:52:ae:28:ef:54:c9:
9d:e1:50:9e:8e:5d:d8:e8:c6:b8:0c:fc:69:29:cc:0c:3d:65:
3f:70:65:4e:b8:51:49:39:4d:97:f4:60:c2:a6:80:c9:b2:69:
e6:d9:37:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yHRebotSnxhEeU8Q/A8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWJlNjdiMjFkMzIzYjJiMmI0NDJjNmIwNmFlMzJjYzI4
MDM1OGQwHhcNMjUxMDIwMDQwMjMxWhcNMjUxMDIxMDQwMjMxWjAzMTEwLwYDVQQD
EygwYjUwODViMjkwOWUzY2E5ODAxN2VhNzZkNzY0NzgzNTUzMjBhOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXXdzvHBLiewnBSQV2wJMmhnxRnT
jtF8bfV1lW8uNdA4Mipcan92zEILU63oJx0ibM6EB20jbXzI2uYbkFt9pMTu97Gm
gExtRUnmSCMRcwR3Df5LijbQTo+URvAgQTjcbq0rKxyZDoTxC97JDYR093ti23fM
DrUXqWmWcPPiXbx9iC7v1LW20dH+2muF1eHINZIJZEG12lo4nC2r0m5eIulloPwG
pY/YhQzE6ufhb83GFeQjhcZhD47rk+aPSNaGM5G4Vv6gX3KBpTINrwUlDHk+HrgU
JXFQ5FM2a90flyc/ZIEx1kVHeGAihtQifeE3JKFJ2dLcAmqiXdxjysx5SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtQhbKQnjypgBfqdtdkeDVTIKlqMB8GA1UdIwQY
MBaAFCWr5nsh0yOysrRCxrBq4yzCgDWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjIt
NzIxOGEzMTc5MGYzLzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjItNzIxOGEzMTc5MGYz
LzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeq5E5Sy
4DRRgaTxB2W5px69YxrRxPVkhV3ImndBtbOPxQvncjLrcOokCxsnYiMhxRnXX91y
3N8H/BBVPVUT7RYgij5rgpSFBzeAIP6PKeG/SSXdBk9sEazCTxucpQZNYx2/GlTT
0/31updJQOQBTaJezIA1W7madPHHVInGdWGRZ/pXT03kE16C6HcmCUMWB4NQxFKK
bbnbqme/GzB6CF0NE3afj7BfcUTtM/O0R8YmJVSKpAZ1fBPeIcABdhyOJlOQCMWf
v7CyIb48dtMcZYKmUq4o71TJneFQno5d2OjGuAz8aSnMDD1lP3BlTrhRSTlNl/Rg
wqaAybJp5tk3qA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:06 2025 by rpki-client