Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: gL4zJ2WPVUrEWDfZg+iorogENjanAAEcphjlwDDC+WI=
Subject key identifier: B2:7F:41:D3:97:9D:6F:06:D6:A0:92:78:92:CD:75:20:B4:CC:B2:37
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0197B745613D9D56FB40F5608434EF64800D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0819
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 7D2XT13DQ5U9R5Wp7gWL6OyyoncJLGBfE+FMSf6d7Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:61:3d:9d:56:fb:40:f5:60:84:34:ef:64:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=b27f41d3979d6f06d6a0927892cd7520b4ccb237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:65:47:09:4d:3d:a9:8e:dd:ed:21:d7:a6:
07:23:00:5e:08:fd:1b:82:34:45:36:f4:27:32:88:
d1:c8:1b:12:93:3a:1d:af:95:96:57:6b:55:e0:f7:
62:18:b0:4a:44:3c:f8:83:74:06:20:71:9f:2f:34:
04:8a:a0:e8:03:ea:49:61:1d:1b:c0:db:7e:63:20:
b5:9f:9d:7a:7a:14:1e:28:08:31:8d:c9:6c:86:f6:
d3:4d:95:3d:91:bb:17:a1:9f:aa:82:a0:a4:f8:1a:
0c:13:9b:30:4e:3c:0f:1e:c8:03:02:e6:35:87:32:
82:1d:9e:1e:fa:73:35:5a:b9:6f:2c:cf:1c:b6:39:
7e:0d:3c:8d:0c:cb:72:3f:6b:00:11:9e:5e:93:e6:
52:9b:88:2b:54:b4:43:f2:0c:2b:24:31:43:7d:3f:
b7:72:bf:0c:52:a1:85:c3:64:5c:fc:e3:dc:6b:6e:
3a:c6:18:83:a1:bb:33:4b:89:d3:1b:cd:ff:3d:07:
83:b2:2a:ed:e9:78:f2:fa:9f:52:98:58:58:9c:66:
e5:76:e7:5e:73:5e:d8:ab:61:cd:49:9e:9e:39:3b:
1e:b8:bd:a7:53:09:b0:bd:be:48:dc:79:6c:b5:55:
04:b4:f2:b1:b2:43:4a:95:8c:0f:dd:cf:7c:18:4f:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:41:D3:97:9D:6F:06:D6:A0:92:78:92:CD:75:20:B4:CC:B2:37
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:c0:c7:af:3b:5e:5b:29:92:8e:dd:34:18:7b:80:b1:fb:
8d:33:87:f8:ab:7f:64:ad:98:c2:8c:73:32:f9:ac:3f:3d:8e:
5b:d8:70:a1:3f:e7:cd:3c:87:45:e4:a0:b1:59:9c:6b:2f:8f:
ec:4f:03:ae:a4:8d:79:3b:89:8c:a7:f2:73:42:f4:ca:bd:09:
b1:cd:cd:cc:a9:0f:0f:72:4e:d5:f4:d5:9b:86:fc:09:d2:79:
e0:47:f4:87:50:1c:d0:7c:cf:0f:6a:56:b7:a3:a7:6d:5a:04:
6d:d6:d3:79:96:09:49:b6:ed:e6:d3:60:89:e5:dd:c1:a1:3e:
ee:a0:d2:20:0a:1c:b2:7a:80:91:da:9b:49:0a:b8:0f:26:d1:
6a:86:5a:a3:49:3b:7a:ff:a4:21:2b:ae:6e:d0:94:65:e1:c0:
86:fe:2a:30:0d:ae:fd:84:de:dc:28:77:85:b9:a0:28:78:db:
f7:39:44:60:a7:ee:3a:cf:f1:8f:ac:00:2c:c0:a7:1c:45:5d:
71:a2:f7:27:19:46:53:ca:1a:27:d5:18:46:ef:4c:08:a2:be:
1c:65:82:a9:6e:8d:65:e8:bb:03:ad:4a:34:96:67:2c:9c:ac:
2d:41:d1:2a:c2:12:a6:ca:33:36:7f:60:9f:1e:fa:48:ff:04:
de:a3:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:13 2025 by rpki-client