Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: 5Rfhq5tY2ib2mO4jGWNBCUZ3qAf4j4kGRCiOHxR8ras=
Subject key identifier: 62:BB:F7:FD:88:BA:CF:1A:E2:7D:57:01:D6:5A:FD:B1:61:DF:BB:8C
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019A4D3CCEE800C29F90E3E6886042E47237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 13A1
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: XzX49x4lvfRZ9Fgp/A8mP6487Gpki8N78jUX0r85tcc=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ce:e8:00:c2:9f:90:e3:e6:88:60:42:e4:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=62bbf7fd88bacf1ae27d5701d65afdb161dfbb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:b3:e9:26:9e:c5:ca:56:53:a7:43:09:3c:
68:f8:59:a1:c7:56:64:d2:61:7a:b3:51:6b:e3:82:
b3:c7:fa:c7:1f:2b:40:be:57:16:6d:1a:09:29:ab:
8c:3c:4c:9b:b1:15:6e:9e:6e:ee:05:e7:bb:b8:95:
43:5a:92:47:11:92:96:9d:a8:53:11:e6:b0:4e:1f:
70:e3:06:98:69:da:75:2a:2c:c7:b8:cc:37:7d:a8:
4b:d4:3b:18:d5:37:1f:8b:88:f3:d0:e0:5d:92:d9:
b0:cb:7f:53:59:e2:55:68:9f:e8:b3:93:18:71:a8:
5b:03:86:8b:5d:a0:c3:2b:06:f7:cb:dc:d1:9e:c9:
4d:47:51:5b:99:6f:2e:7d:10:2e:e6:de:b3:b2:05:
b7:18:2a:50:70:e9:15:f5:8f:7c:66:71:f9:d5:84:
d8:14:4d:69:33:4c:2c:cc:a0:9a:b9:ae:09:5c:ea:
11:87:e0:8f:32:47:b0:16:d8:40:a1:18:35:a9:0f:
a6:e9:d2:79:5b:f8:fb:d0:29:5a:22:26:2e:cb:c9:
06:7f:ab:27:2d:12:7e:bb:24:16:da:82:02:dd:20:
a0:ac:f2:e3:f6:b1:bf:bd:78:96:0a:c7:ac:2d:5a:
7a:4d:32:bc:af:ff:c3:60:d4:01:65:bf:ed:50:91:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:F7:FD:88:BA:CF:1A:E2:7D:57:01:D6:5A:FD:B1:61:DF:BB:8C
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:a6:75:58:24:11:1d:35:f2:bf:e5:8a:0b:51:e4:ca:9f:
a0:67:8b:2d:83:d7:b2:6c:90:41:33:8a:e6:c5:32:3b:43:31:
f6:56:90:99:4e:ae:89:78:a4:74:1a:27:0b:51:18:dd:7f:b9:
cb:f1:e8:af:2d:68:0c:96:a8:34:90:21:f2:ad:5e:93:af:b2:
93:83:aa:ca:7b:b7:3b:ee:ea:03:ed:c0:39:b4:22:62:c9:ad:
ed:7d:5d:e6:d0:a0:64:05:fc:92:c9:6c:c3:5e:d4:92:e9:73:
b4:7e:be:fd:75:a2:a2:bd:06:9e:8b:2c:ca:6d:ad:1b:35:81:
40:e0:4f:99:0d:52:b0:83:c8:16:e0:4c:f7:71:b5:a3:c2:d2:
0f:f2:72:fa:4a:78:e8:9e:6a:36:07:6c:3b:d9:3d:d2:8b:00:
db:d8:ce:b0:d4:59:59:05:ab:b4:a7:9a:52:10:d8:1c:4f:8d:
16:c8:99:07:0c:9f:28:ea:5d:9d:ae:a6:75:62:ae:62:c5:56:
3f:ec:0c:06:97:cb:14:9e:95:a9:b9:88:a8:01:39:79:a7:15:
f5:22:4c:3b:0e:3e:58:64:13:ca:18:42:83:2b:1a:14:62:f2:
30:98:ad:8d:da:92:df:7b:30:90:90:74:41:e2:7b:5c:3d:7c:
7e:e7:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client