Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: gKgOLXIvUd1WEaUfJdgylT9EbWsp3x51wfP0UzH0t1U=
Subject key identifier: C1:96:C3:F9:98:D6:CE:73:99:D0:4E:FA:79:5D:60:6A:CD:4A:2A:E0
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 01987BD2675B6E9CBF7CE21F5333B42EF49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 12B0
Signing time: Tue 05 Aug 2025 20:00:43 +0000
Manifest this update: Tue 05 Aug 2025 20:00:43 +0000
Manifest next update: Wed 06 Aug 2025 20:00:43 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: yHTXc7KLzpMa9/K7HOC+J37PmJeYtGimXOe+xJmlmxA=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:67:5b:6e:9c:bf:7c:e2:1f:53:33:b4:2e:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Aug 5 20:00:43 2025 GMT
Not After : Aug 6 20:00:43 2025 GMT
Subject: CN=c196c3f998d6ce7399d04efa795d606acd4a2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:b5:07:95:38:01:26:25:8a:00:b1:74:4b:
75:e2:8b:91:29:61:b5:d0:c8:f4:25:83:6b:d0:5f:
15:36:94:25:c5:45:ca:0a:52:94:30:56:0d:49:eb:
fc:96:79:85:a7:9f:1d:f8:7c:7d:9c:e9:60:51:ae:
33:da:51:bc:49:fc:67:a3:41:7c:8a:1e:e6:07:62:
79:55:6b:33:a8:00:cd:d0:9f:46:97:71:c9:ab:89:
5b:af:7f:73:eb:04:aa:57:d3:4c:40:c0:f7:e9:8d:
cf:13:44:c8:df:cd:4e:2c:15:d0:ff:48:90:3e:37:
af:cf:43:6f:c5:63:b4:23:18:32:73:b8:04:dc:cd:
5a:fd:70:4d:7b:64:49:af:99:66:4e:86:f1:70:4e:
ae:41:a5:f3:17:33:40:8a:de:6f:33:f1:a8:ba:70:
8b:3e:7c:d3:80:5e:86:74:e7:5f:63:0b:53:d9:06:
9e:1e:33:f4:00:e0:9a:8a:0c:44:d6:62:3a:58:4c:
20:37:89:61:fa:49:0d:db:3f:23:64:58:78:84:4b:
57:f0:14:20:59:20:fc:23:90:40:f4:d0:bc:18:f3:
47:e4:17:95:ea:bb:ba:20:50:2a:b7:b6:69:c8:4a:
4b:7a:f7:e4:b2:47:2b:b3:ad:d1:04:35:c0:37:60:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:C3:F9:98:D6:CE:73:99:D0:4E:FA:79:5D:60:6A:CD:4A:2A:E0
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3c:8c:68:ef:48:89:05:a4:47:59:a5:d6:ce:8e:4c:2a:82:
7e:86:3b:06:98:32:3f:f1:f3:8a:11:12:71:ff:85:a6:9d:19:
75:73:fa:09:95:7a:57:e3:24:bf:3f:07:27:1b:66:2b:3d:24:
61:eb:2d:08:a9:cb:e6:60:e9:08:93:6b:9b:c6:ad:55:8c:c7:
34:64:41:34:8e:9d:42:ce:c7:2b:99:56:a1:2e:f3:34:09:0e:
c6:8b:5f:10:ee:f6:e2:09:64:b2:0f:ca:c7:e8:3f:91:68:83:
79:1c:cc:33:b6:d5:01:91:c5:78:94:b1:ac:45:38:49:fa:06:
61:3d:78:16:2d:a0:87:c6:b6:32:23:aa:cc:2a:f5:33:91:1d:
6f:5e:a5:43:ff:39:d8:ce:9e:75:b4:1a:5e:c7:83:73:02:9e:
be:62:d8:11:2f:84:85:cb:33:07:70:06:65:73:6c:3e:6c:b3:
0c:42:72:98:76:e9:a3:2c:91:e0:ae:b3:d7:0a:87:65:42:53:
6b:8c:63:fe:4e:80:b7:7b:b2:54:46:e6:ee:9b:d0:cc:70:6d:
bd:b4:99:60:21:ef:5e:a4:72:af:49:c6:5c:aa:bd:a7:99:ca:
36:99:4b:20:9e:59:a6:62:72:6d:0f:d1:61:47:95:c0:f1:54:
5b:bf:11:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70mdbbpy/fOIfUzO0LvSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2
ZmE3ZTMwHhcNMjUwODA1MjAwMDQzWhcNMjUwODA2MjAwMDQzWjAzMTEwLwYDVQQD
EyhjMTk2YzNmOTk4ZDZjZTczOTlkMDRlZmE3OTVkNjA2YWNkNGEyYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNa1B5U4ASYligCxdEt14ouRKWG1
0Mj0JYNr0F8VNpQlxUXKClKUMFYNSev8lnmFp58d+Hx9nOlgUa4z2lG8Sfxno0F8
ih7mB2J5VWszqADN0J9Gl3HJq4lbr39z6wSqV9NMQMD36Y3PE0TI381OLBXQ/0iQ
Pjevz0NvxWO0Ixgyc7gE3M1a/XBNe2RJr5lmTobxcE6uQaXzFzNAit5vM/GounCL
PnzTgF6GdOdfYwtT2QaeHjP0AOCaigxE1mI6WEwgN4lh+kkN2z8jZFh4hEtX8BQg
WSD8I5BA9NC8GPNH5BeV6ru6IFAqt7ZpyEpLevfkskcrs63RBDXAN2DOYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGWw/mY1s5zmdBO+nldYGrNSirgMB8GA1UdIwQY
MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt
YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx
LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDyMaO9I
iQWkR1ml1s6OTCqCfoY7BpgyP/HzihEScf+Fpp0ZdXP6CZV6V+Mkvz8HJxtmKz0k
YestCKnL5mDpCJNrm8atVYzHNGRBNI6dQs7HK5lWoS7zNAkOxotfEO724glksg/K
x+g/kWiDeRzMM7bVAZHFeJSxrEU4SfoGYT14Fi2gh8a2MiOqzCr1M5Edb16lQ/85
2M6edbQaXseDcwKevmLYES+EhcszB3AGZXNsPmyzDEJymHbpoyyR4K6z1wqHZUJT
a4xj/k6At3uyVEbm7pvQzHBtvbSZYCHvXqRyr0nGXKq9p5nKNplLIJ5ZpmJybQ/R
YUeVwPFUW78RWQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:14 2025 by rpki-client