Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: NydwH/Cl+kZN56MSbZ7AgF32+jNzmgYpCfNi9mJ2EwU=
Subject key identifier: 20:95:14:95:91:A7:47:0A:36:3F:50:A5:F9:7D:DE:12:73:20:62:7C
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019A0B939243D60BF38C7D2837F189DF1BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 137F
Signing time: Wed 22 Oct 2025 11:00:11 +0000
Manifest this update: Wed 22 Oct 2025 11:00:11 +0000
Manifest next update: Thu 23 Oct 2025 11:00:11 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: zL3GlIInKYZHRhdP20qnnLH6pgYx3OmwJ6K8SeEioC4=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:92:43:d6:0b:f3:8c:7d:28:37:f1:89:df:1b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Oct 22 11:00:11 2025 GMT
Not After : Oct 23 11:00:11 2025 GMT
Subject: CN=2095149591a7470a363f50a5f97dde127320627c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:ab:a6:78:d9:1f:6c:53:e0:3f:57:fd:72:
ec:26:7f:82:91:44:b7:64:da:50:97:d3:e0:f5:bd:
e3:7a:2f:08:85:96:b4:6c:6c:db:05:1b:75:c1:85:
a0:13:34:35:87:aa:eb:a1:9f:89:b0:ef:c1:88:84:
8e:ab:ce:87:32:ad:43:a2:49:3d:f9:48:1c:fb:a8:
9d:98:64:d2:8e:51:35:5e:17:61:7e:ba:1d:50:2d:
8d:44:c9:61:20:34:0a:a8:b8:00:60:90:32:19:6d:
32:f9:5b:ec:d6:31:af:68:c8:18:e5:fa:8e:e0:bf:
c8:9d:a7:78:cf:a9:d7:3f:47:38:71:e6:fd:01:d3:
7c:3b:1f:a5:e8:64:36:ac:50:c4:25:66:4c:fc:a9:
71:87:83:59:98:86:52:3b:fe:ff:cf:d8:0f:e4:e1:
01:d7:f7:3c:18:d3:b9:58:db:14:ad:b5:e3:5e:24:
d0:54:67:ae:f0:9e:c9:0a:d3:61:61:44:94:85:f8:
be:d8:76:df:57:1d:e6:a8:a4:65:ed:dd:71:7f:1d:
4f:46:19:36:7b:45:93:05:71:7b:62:71:dc:4c:d2:
f1:5c:a6:d8:d1:95:d6:0f:70:6e:9d:36:09:f6:33:
10:41:74:7e:64:f7:1c:67:d8:83:f4:75:43:a3:be:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:14:95:91:A7:47:0A:36:3F:50:A5:F9:7D:DE:12:73:20:62:7C
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:e4:76:ea:18:d7:7b:60:16:f8:f6:39:58:85:a6:5c:59:
a3:fc:da:6a:a2:42:20:5d:dc:bd:d5:bb:21:03:cf:0a:61:83:
c1:0b:7a:e7:21:c5:fe:78:8f:39:d6:2c:90:ac:04:70:fb:5d:
24:77:11:bb:a2:06:03:db:5d:b2:42:be:33:8f:b1:86:c8:de:
a1:f8:48:dd:b7:2f:87:c9:49:6e:bd:2c:28:fb:2a:d5:56:c4:
d0:15:4a:58:a9:d5:d0:ea:02:9b:f0:da:62:5c:e6:bc:cd:da:
64:03:f6:2c:6c:21:64:2c:33:d0:11:28:6d:0a:9c:71:e3:7a:
65:3d:a8:fa:57:cf:4a:82:b6:3d:c2:ce:4b:7b:c9:bb:b2:85:
e4:87:b0:af:3d:10:7b:17:66:8c:e1:0b:5e:56:61:fb:a0:d6:
88:41:bb:f0:f7:e4:45:32:48:9e:f0:9e:3b:e1:04:7a:36:66:
11:6a:0f:e5:24:0c:d5:ae:50:d7:b7:11:8b:88:4d:86:13:c9:
03:f0:93:16:d4:a9:f2:0b:83:ba:74:7c:b9:05:ea:b9:02:dc:
d3:29:ef:2a:a2:dd:54:40:d7:33:ca:27:14:b4:bb:fd:ce:86:
38:c8:58:02:d9:88:4f:96:61:5f:51:df:7a:5a:90:db:68:09:
81:48:32:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLk5JD1gvzjH0oN/GJ3xvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2
ZmE3ZTMwHhcNMjUxMDIyMTEwMDExWhcNMjUxMDIzMTEwMDExWjAzMTEwLwYDVQQD
EygyMDk1MTQ5NTkxYTc0NzBhMzYzZjUwYTVmOTdkZGUxMjczMjA2MjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iarpnjZH2xT4D9X/XLsJn+CkUS3
ZNpQl9Pg9b3jei8IhZa0bGzbBRt1wYWgEzQ1h6rroZ+JsO/BiISOq86HMq1Dokk9
+Ugc+6idmGTSjlE1XhdhfrodUC2NRMlhIDQKqLgAYJAyGW0y+Vvs1jGvaMgY5fqO
4L/Inad4z6nXP0c4ceb9AdN8Ox+l6GQ2rFDEJWZM/Klxh4NZmIZSO/7/z9gP5OEB
1/c8GNO5WNsUrbXjXiTQVGeu8J7JCtNhYUSUhfi+2HbfVx3mqKRl7d1xfx1PRhk2
e0WTBXF7YnHcTNLxXKbY0ZXWD3BunTYJ9jMQQXR+ZPccZ9iD9HVDo76G9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCVFJWRp0cKNj9Qpfl93hJzIGJ8MB8GA1UdIwQY
MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt
YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx
LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrLkduoY
13tgFvj2OViFplxZo/zaaqJCIF3cvdW7IQPPCmGDwQt65yHF/niPOdYskKwEcPtd
JHcRu6IGA9tdskK+M4+xhsjeofhI3bcvh8lJbr0sKPsq1VbE0BVKWKnV0OoCm/Da
YlzmvM3aZAP2LGwhZCwz0BEobQqcceN6ZT2o+lfPSoK2PcLOS3vJu7KF5Iewrz0Q
exdmjOELXlZh+6DWiEG78PfkRTJInvCeO+EEejZmEWoP5SQM1a5Q17cRi4hNhhPJ
A/CTFtSp8guDunR8uQXquQLc0ynvKqLdVEDXM8onFLS7/c6GOMhYAtmIT5ZhX1Hf
elqQ22gJgUgytg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 15:08:25 2025 by rpki-client