
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: kOtrXYusm2FitYhc8i+ITuzacb1I0G/CLIw0JhSGqoY=
Subject key identifier: A0:79:53:A6:EC:35:EE:B0:60:8D:05:94:2B:3B:5F:30:28:13:AB:D8
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0199FAA155063790FAF73573F74588D108CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0945
Signing time: Sun 19 Oct 2025 04:01:41 +0000
Manifest this update: Sun 19 Oct 2025 04:01:41 +0000
Manifest next update: Mon 20 Oct 2025 04:01:41 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: ApProSItb49jkiUvYFi1VdB3rBfucz01qMsHAqfYu2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:55:06:37:90:fa:f7:35:73:f7:45:88:d1:08:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Oct 19 04:01:41 2025 GMT
Not After : Oct 20 04:01:41 2025 GMT
Subject: CN=a07953a6ec35eeb0608d05942b3b5f302813abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:f1:e4:eb:ef:f9:de:23:5b:23:21:c0:90:
86:d1:4d:02:1a:36:eb:9e:a2:d9:7d:f5:12:d9:b9:
c4:9b:76:2e:7d:2e:d4:fe:9b:72:c1:88:31:4f:18:
db:26:65:81:8a:9d:4a:a0:fb:d8:36:cf:9f:8b:94:
13:9e:d2:56:45:a0:9c:f2:b6:33:0f:08:f3:e6:71:
0c:60:d2:60:01:4c:54:65:c9:68:02:6c:00:ab:ef:
f5:bf:5c:3e:dd:e9:10:2c:6b:cb:60:58:42:61:2d:
67:f7:fa:a4:95:42:9c:2f:15:43:8a:a8:d7:3d:55:
6f:17:3a:5d:53:a4:42:15:d1:c2:2b:69:15:98:3b:
ca:d9:22:6f:75:4b:ea:0d:39:0d:ce:ab:e0:6c:da:
6b:0b:65:b1:4d:2b:37:2b:1e:ed:e1:76:2d:16:92:
cf:a0:6c:ca:3a:a7:0b:67:bb:0c:a6:c7:f3:f0:e0:
dc:1b:5e:c0:6e:4c:61:29:a4:7c:19:32:ea:44:83:
e4:83:90:d7:47:68:8d:04:0a:f2:aa:4e:2c:64:77:
7a:31:f9:fd:df:44:48:99:72:2e:10:12:31:e2:51:
cd:96:c3:ed:d2:32:88:f4:78:6a:31:3e:73:55:eb:
dd:27:3b:0a:67:96:76:b0:7e:48:f9:fd:39:0a:5a:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:79:53:A6:EC:35:EE:B0:60:8D:05:94:2B:3B:5F:30:28:13:AB:D8
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:c4:dc:c4:e9:af:29:4e:f8:64:02:7b:d4:6b:fa:c4:33:
25:7a:2e:d7:1e:92:8d:4f:77:6a:b1:73:85:f4:dd:31:24:8b:
33:25:9b:7b:2e:5f:68:4a:e7:7c:71:18:5a:73:46:f2:09:59:
90:32:e5:04:6a:bc:0b:0c:8e:d4:7b:1d:81:ae:d9:09:e7:f4:
22:0e:43:ff:cb:81:b6:9b:6e:c8:12:be:bf:0e:f0:86:a2:62:
cc:22:91:d3:03:bf:11:d3:35:86:10:cf:26:cc:e8:6c:95:ed:
b8:e5:64:12:16:1d:2b:59:fd:a8:83:88:5b:9e:bd:4a:39:09:
2c:45:a3:93:1f:44:8d:be:f3:a5:9f:2a:c2:d0:bf:77:92:e9:
18:31:2c:c6:25:32:c5:9e:d6:43:e0:6d:fa:1a:49:a8:c7:29:
2d:d1:60:74:a6:c2:53:5b:93:37:b1:12:20:ac:93:b8:2e:35:
a4:14:c6:31:4c:93:76:20:fa:7c:f0:e1:1b:57:5f:3d:bd:a9:
a2:ef:30:d2:2f:35:23:02:bd:16:e1:37:e7:3b:29:72:d7:cf:
c5:d8:26:39:8c:a8:b0:4b:fc:02:37:60:b5:20:c8:d6:bc:71:
00:87:20:93:c1:3a:e4:78:72:6c:33:61:a5:bc:f0:64:f3:14:
0d:77:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:06 2025 by rpki-client