Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: gsmA1fr2P1KDLUMcGiJc+Zze15xEQu8ezq26gjtHTwM=
Subject key identifier: 8D:DB:E7:3E:C0:32:F7:B8:2C:34:A1:BB:6B:01:5F:F8:A3:DA:B6:DB
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0198D5157AE6F956DA06147F357179535D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 08AD
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: MVGDnhyguA97/SLabA8JjDQq3gD5ZblycbYVOeYhp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7a:e6:f9:56:da:06:14:7f:35:71:79:53:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=8ddbe73ec032f7b82c34a1bb6b015ff8a3dab6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:e4:3e:8d:5a:73:a3:93:6a:bf:55:b2:1c:
93:20:d3:d4:8e:a9:f0:7d:75:4e:3b:49:28:16:99:
88:fe:a1:75:23:0a:44:92:30:4f:4e:92:d0:63:20:
19:ec:bc:31:11:8c:6c:22:ac:f9:3a:00:fb:2d:d8:
f3:84:1b:5d:fc:9a:5e:a6:1e:c2:61:38:f7:7e:80:
a9:e7:50:2e:9e:0b:62:a7:8e:16:a3:e5:78:f7:fb:
5c:d2:af:c4:b8:76:c9:f9:ae:c8:5c:08:54:e1:1e:
c4:07:fd:59:58:87:4f:72:0c:c7:56:33:0f:13:0a:
c2:56:3c:18:0e:57:1a:7e:71:9d:4b:4e:eb:fa:af:
d6:46:ca:0c:8f:2c:b3:69:82:2e:7e:0d:3f:0e:20:
b7:a9:e0:08:43:56:4c:e2:47:75:2e:e7:da:7d:c6:
67:ab:84:47:f9:a3:89:d5:3b:32:a7:73:52:ba:16:
3d:57:09:9f:c6:a2:86:bd:ab:35:0e:b5:2e:0c:67:
83:d2:c8:8e:32:b1:8d:a0:40:54:2c:cf:ae:62:ec:
ec:e7:79:87:8f:0d:35:64:97:d6:d4:8d:bf:70:f2:
a6:e7:16:d2:ab:a5:50:ed:0c:17:9f:d8:ce:73:e4:
1e:92:71:86:54:39:d2:e1:5a:55:0b:cd:cb:03:95:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:E7:3E:C0:32:F7:B8:2C:34:A1:BB:6B:01:5F:F8:A3:DA:B6:DB
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bb:ff:00:19:66:c8:07:25:14:6d:63:c0:5d:d5:86:46:1f:
31:e5:8a:9f:cc:58:d3:e2:28:97:4b:41:0b:26:6f:20:db:76:
35:da:c5:6d:bf:13:2a:19:95:8c:fc:c1:d7:16:6d:58:59:6a:
da:6c:4d:9f:60:9d:08:d7:7c:56:47:6a:d4:a9:6c:7d:21:3e:
c0:ef:a2:cd:10:07:14:40:6d:8d:4d:56:4b:91:ff:b5:11:f7:
dc:3d:b9:92:32:e6:f0:4a:2f:ae:00:38:46:a2:77:d4:2f:25:
25:cb:30:3c:e4:cd:b2:67:6d:b4:6a:69:2f:62:01:fe:00:f7:
09:39:80:33:4c:1c:93:67:0e:91:46:ec:42:43:f7:e3:a5:d5:
f0:83:2b:95:30:4a:f0:5c:a7:8d:d2:ce:a2:50:77:b8:ab:27:
d8:0d:f9:a8:89:c2:35:c7:8f:3f:70:09:ed:0a:29:a9:4f:51:
d3:dc:f0:da:92:a3:07:d9:c7:bf:e2:f4:98:6c:55:9d:52:5a:
3d:f6:0c:d1:d4:e2:ed:8c:6c:a7:7b:7c:e5:35:41:4a:a2:bb:
b6:80:46:2b:25:77:31:ce:c6:83:a9:b1:41:5a:20:1c:50:0f:
a7:f8:ea:92:7a:72:21:05:69:46:72:ec:f3:ca:37:4c:39:32:
d4:77:d6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXrm+VbaBhR/NXF5U11MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl
NDU4MGEwHhcNMjUwODIzMDQwMDExWhcNMjUwODI0MDQwMDExWjAzMTEwLwYDVQQD
Eyg4ZGRiZTczZWMwMzJmN2I4MmMzNGExYmI2YjAxNWZmOGEzZGFiNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwbkPo1ac6OTar9VshyTINPUjqnw
fXVOO0koFpmI/qF1IwpEkjBPTpLQYyAZ7LwxEYxsIqz5OgD7LdjzhBtd/Jpeph7C
YTj3foCp51Aungtip44Wo+V49/tc0q/EuHbJ+a7IXAhU4R7EB/1ZWIdPcgzHVjMP
EwrCVjwYDlcafnGdS07r+q/WRsoMjyyzaYIufg0/DiC3qeAIQ1ZM4kd1LufafcZn
q4RH+aOJ1Tsyp3NSuhY9VwmfxqKGvas1DrUuDGeD0siOMrGNoEBULM+uYuzs53mH
jw01ZJfW1I2/cPKm5xbSq6VQ7QwXn9jOc+QeknGGVDnS4VpVC83LA5VOoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3b5z7AMve4LDShu2sBX/ij2rbbMB8GA1UdIwQY
MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt
YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4
LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLv/ABlm
yAclFG1jwF3VhkYfMeWKn8xY0+Iol0tBCyZvINt2NdrFbb8TKhmVjPzB1xZtWFlq
2mxNn2CdCNd8Vkdq1KlsfSE+wO+izRAHFEBtjU1WS5H/tRH33D25kjLm8EovrgA4
RqJ31C8lJcswPOTNsmdttGppL2IB/gD3CTmAM0wck2cOkUbsQkP346XV8IMrlTBK
8FynjdLOolB3uKsn2A35qInCNcePP3AJ7QopqU9R09zw2pKjB9nHv+L0mGxVnVJa
PfYM0dTi7Yxsp3t85TVBSqK7toBGKyV3Mc7Gg6mxQVogHFAPp/jqknpyIQVpRnLs
88o3TDky1HfWNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:22 2025 by rpki-client