Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: ZOZC7rvreUwfNGckeLRn6AmmqHyU1/loi6VSs0nV2vQ=
Subject key identifier: 34:3D:D9:48:B8:4F:07:E4:10:6C:7A:D3:B2:7F:17:4B:AB:BB:31:F5
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019A51879D5BE852383D79704B3514E5BC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0972
Signing time: Wed 05 Nov 2025 01:00:33 +0000
Manifest this update: Wed 05 Nov 2025 01:00:33 +0000
Manifest next update: Thu 06 Nov 2025 01:00:33 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: AMvMzmWQr0Pe4LCebBNAZ0GxOrWBVvBK/lxkfUIQAzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9d:5b:e8:52:38:3d:79:70:4b:35:14:e5:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Nov 5 01:00:33 2025 GMT
Not After : Nov 6 01:00:33 2025 GMT
Subject: CN=343dd948b84f07e4106c7ad3b27f174babbb31f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:4e:9d:9c:01:6e:a6:3d:c2:bc:ec:1c:d4:
6d:04:ac:72:11:4a:91:d6:3f:f0:17:82:7c:17:69:
f9:38:ac:f1:b0:ad:16:6c:92:1d:f4:89:e8:9d:d3:
90:67:3f:f7:1f:b3:14:ee:7d:1e:77:d2:34:b8:f6:
1b:47:7a:95:ef:56:c6:94:85:95:65:01:7b:b1:95:
fe:06:3b:7f:39:4d:f4:4c:70:93:81:55:c7:2b:41:
9b:4d:a4:ef:63:90:be:54:e6:04:fb:d0:e9:2b:c4:
0a:a7:3a:05:2c:4d:c1:fa:92:b9:75:a0:9d:e2:6d:
46:89:c4:1d:70:73:77:1a:4d:b2:f9:4f:44:f4:0e:
ac:0f:ff:70:73:c7:c7:3e:ee:95:19:45:79:99:12:
c0:7c:b1:c0:19:0e:ae:ce:f2:8a:bb:1d:b7:a4:e7:
66:f9:b6:6a:91:5c:e3:46:cc:85:fe:f6:5c:97:ed:
36:cc:87:f9:88:d4:f3:33:a9:2d:94:68:b7:79:35:
74:03:94:b8:b5:eb:73:84:2a:e6:93:48:f5:93:b8:
12:15:a9:a2:54:10:ad:9c:00:a7:0d:76:ed:e3:8a:
71:ab:20:7a:e8:9a:31:11:99:3d:99:8b:57:34:ed:
18:b2:e9:73:33:a1:98:a5:bb:34:81:07:e8:58:4f:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:D9:48:B8:4F:07:E4:10:6C:7A:D3:B2:7F:17:4B:AB:BB:31:F5
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:91:50:a5:b1:98:da:25:50:2b:1d:74:4a:98:7b:35:51:f4:
c7:4f:a5:7c:ff:52:c1:6e:54:c5:a6:47:1a:4b:d9:b8:7e:c2:
64:9c:b9:b4:ea:af:72:46:b6:29:82:7d:b9:ce:fe:da:49:1e:
c7:af:e1:a7:04:6f:4d:17:61:d0:ab:bb:a7:5f:e7:4a:34:e4:
31:ec:5e:9b:1f:0b:ef:7a:9d:a1:7d:2e:5b:4c:b6:b1:6a:dd:
81:38:d3:12:13:11:65:84:be:b0:7b:68:a5:e8:d0:d8:4c:ae:
70:77:4a:f5:d5:8b:e5:22:99:e3:eb:f7:de:97:04:8e:13:b1:
49:c6:34:99:97:c6:52:87:dc:bb:75:03:58:de:a4:41:5f:36:
02:d6:e8:90:0e:08:7f:bb:83:05:1f:10:00:90:f9:a2:de:f9:
95:d3:b8:ed:3c:d9:68:99:56:d8:1f:8b:d9:d8:c4:94:c7:c7:
6b:51:e7:75:6a:b2:2e:f7:63:43:da:31:37:04:9f:8c:1a:ea:
de:06:6c:56:b1:d2:ad:35:64:8b:25:ab:6b:37:8c:60:8b:a8:
19:c0:09:6b:90:cb:7b:07:8f:7b:cb:4e:ba:ef:2b:8d:b9:7b:
a9:ea:ae:c6:80:82:5e:f3:b3:26:52:ea:c0:67:a5:ea:fa:e2:
fb:12:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:10 2025 by rpki-client