Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: 7ozysJrgY0JwnuDavnVwnBID0rU/rkzwvPrhaw/bhyM=
Subject key identifier: 0C:AC:7D:37:46:22:52:34:A8:35:0F:53:A8:25:22:04:11:8A:61:E2
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0198499C0E54BD04CB0B5831C9282B0FEBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1296
Signing time: Sun 27 Jul 2025 02:00:20 +0000
Manifest this update: Sun 27 Jul 2025 02:00:20 +0000
Manifest next update: Mon 28 Jul 2025 02:00:20 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: TOr9LLOXSaW/pi+N7bjeF/UcKMyR1u55GBAKUYKb+eo=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:0e:54:bd:04:cb:0b:58:31:c9:28:2b:0f:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jul 27 02:00:20 2025 GMT
Not After : Jul 28 02:00:20 2025 GMT
Subject: CN=0cac7d3746225234a8350f53a8252204118a61e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:56:4d:ed:4f:c8:30:fb:e4:f9:78:de:41:
7c:df:95:e7:83:df:ca:06:be:e5:f1:39:ff:54:93:
f4:9c:01:ff:06:6d:ae:80:e8:8d:3a:c4:1e:69:d3:
86:38:43:7d:de:e6:c3:29:18:24:40:69:10:21:a0:
d3:f5:20:38:c2:32:8f:a7:81:90:66:7d:ef:51:61:
4a:7d:17:f0:50:e5:5c:9e:fc:8f:9c:96:c5:14:b6:
fd:56:79:07:95:10:8b:30:1d:e7:26:40:c3:7f:7a:
fe:02:14:c0:ab:aa:e9:1f:fc:94:70:71:0c:b6:ed:
9a:6e:bd:20:94:a1:d3:f2:de:23:6b:36:85:dc:83:
d2:0d:2a:79:d0:63:7c:8d:f7:91:16:43:a9:ea:01:
b2:45:e4:5a:a5:cd:d1:9f:b5:5b:5a:35:ea:06:f0:
55:44:68:33:67:ee:64:8e:35:51:ac:0a:13:1c:00:
74:cb:db:48:34:6a:e0:45:63:d2:2b:7a:f2:9a:5b:
76:b4:b7:16:47:bc:65:a0:ca:fe:02:7a:f8:62:eb:
8c:b0:aa:fd:cf:bb:0f:18:21:23:ec:33:5f:8f:92:
ff:89:1e:32:a2:c3:1c:d7:79:e2:cb:60:4c:da:fa:
67:47:1b:d6:6c:e4:bf:67:bf:3a:f9:d3:38:d6:2d:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:7D:37:46:22:52:34:A8:35:0F:53:A8:25:22:04:11:8A:61:E2
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6d:72:19:71:b3:90:26:b6:b4:ae:dd:28:2d:db:a0:8b:1a:
f8:6e:24:23:bf:e6:32:ba:14:17:f7:6f:c1:c4:6c:e6:7a:47:
d3:3e:c7:8f:7c:72:71:6a:8e:fb:67:f5:f1:0e:9a:1b:39:b7:
08:89:15:a9:9d:d8:db:bc:15:74:64:f1:cf:23:7b:4f:45:33:
23:82:a4:c2:ba:2c:80:a2:7d:f7:c8:5e:71:cc:46:04:cc:c9:
65:8c:b8:eb:5d:84:cc:b2:2e:ce:2f:83:6c:6e:56:18:b3:a5:
d1:bd:36:33:b8:4b:ad:17:ae:26:39:93:9f:bf:b7:05:dc:5b:
e5:22:82:7d:6d:69:d9:d6:5a:90:3f:d5:bb:7c:b1:b0:65:08:
df:f0:d5:d1:59:46:63:63:19:44:70:f3:85:1b:1d:4a:f3:f5:
7a:e7:23:f4:77:a6:47:4e:74:05:b3:8b:8b:6d:ee:da:b2:4d:
75:d2:8a:3f:a0:01:fc:79:26:26:d3:b7:33:3d:7a:8b:dd:ba:
07:f0:70:4c:fd:de:48:01:69:0f:29:3b:3e:91:a3:11:bf:9a:
fb:5e:20:e8:a9:01:01:f2:95:54:04:45:d1:90:b5:5a:58:98:
98:21:db:5b:cc:3f:6d:6b:a5:0f:55:d7:a9:5e:97:55:10:6a:
ae:72:69:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnA5UvQTLC1gxySgrD+umMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2
ZmE3ZTMwHhcNMjUwNzI3MDIwMDIwWhcNMjUwNzI4MDIwMDIwWjAzMTEwLwYDVQQD
EygwY2FjN2QzNzQ2MjI1MjM0YTgzNTBmNTNhODI1MjIwNDExOGE2MWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI9WTe1PyDD75Pl43kF835Xng9/K
Br7l8Tn/VJP0nAH/Bm2ugOiNOsQeadOGOEN93ubDKRgkQGkQIaDT9SA4wjKPp4GQ
Zn3vUWFKfRfwUOVcnvyPnJbFFLb9VnkHlRCLMB3nJkDDf3r+AhTAq6rpH/yUcHEM
tu2abr0glKHT8t4jazaF3IPSDSp50GN8jfeRFkOp6gGyReRapc3Rn7VbWjXqBvBV
RGgzZ+5kjjVRrAoTHAB0y9tINGrgRWPSK3rymlt2tLcWR7xloMr+Anr4YuuMsKr9
z7sPGCEj7DNfj5L/iR4yosMc13niy2BM2vpnRxvWbOS/Z786+dM41i2mOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAysfTdGIlI0qDUPU6glIgQRimHiMB8GA1UdIwQY
MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt
YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx
LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm1yGXGz
kCa2tK7dKC3boIsa+G4kI7/mMroUF/dvwcRs5npH0z7Hj3xycWqO+2f18Q6aGzm3
CIkVqZ3Y27wVdGTxzyN7T0UzI4KkwrosgKJ998heccxGBMzJZYy4612EzLIuzi+D
bG5WGLOl0b02M7hLrReuJjmTn7+3Bdxb5SKCfW1p2dZakD/Vu3yxsGUI3/DV0VlG
Y2MZRHDzhRsdSvP1eucj9HemR050BbOLi23u2rJNddKKP6AB/HkmJtO3Mz16i926
B/BwTP3eSAFpDyk7PpGjEb+a+14g6KkBAfKVVARF0ZC1WliYmCHbW8w/bWulD1XX
qV6XVRBqrnJpfQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:18 2025 by rpki-client