Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: 3ASPIYCQcnrDIzu7hIdVXUkym9wbky6kczCFEvkZasM=
Subject key identifier: 28:26:7B:C6:0C:EF:D8:E1:32:DD:09:E7:FA:71:1A:A1:2E:8B:5F:85
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0197771CA7115FEA744D6288E2AEBD8A1952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1229
Signing time: Mon 16 Jun 2025 05:00:55 +0000
Manifest this update: Mon 16 Jun 2025 05:00:55 +0000
Manifest next update: Tue 17 Jun 2025 05:00:55 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: d8ibB3u04rccmeSpIqNHpLpZxI+hqxU1L+2IqAziLBQ=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:a7:11:5f:ea:74:4d:62:88:e2:ae:bd:8a:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jun 16 05:00:55 2025 GMT
Not After : Jun 17 05:00:55 2025 GMT
Subject: CN=28267bc60cefd8e132dd09e7fa711aa12e8b5f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:c9:a0:cf:65:0c:48:8c:3e:04:16:54:b5:
ed:ca:30:79:52:5f:8f:c1:95:13:1f:1b:df:cd:84:
d0:98:8a:e7:c5:be:8e:a7:54:dc:f0:20:7a:ef:c5:
00:7a:2d:b3:ab:71:fe:a0:e5:3d:07:57:43:0b:fd:
b1:fe:a5:a7:d0:e0:fe:28:75:d9:d5:85:83:68:46:
6d:5c:e1:ca:ec:66:a3:16:38:79:ec:00:84:55:dd:
21:b0:1e:9f:1c:20:38:51:83:88:17:21:6d:a9:2d:
53:ae:5e:17:e0:43:d7:9f:ec:07:6e:ad:2e:9e:9f:
d2:3e:22:c2:bc:e0:c3:80:87:47:6c:1d:d1:56:4a:
08:fa:ea:8f:9d:b9:24:62:17:02:06:51:4e:21:5e:
1d:74:e2:35:88:24:78:33:d7:68:10:90:26:39:ff:
a6:9f:82:53:9a:2e:d4:a4:a7:b8:bd:00:26:9b:3d:
d9:70:b1:cd:05:9f:5c:5c:3c:9e:df:c8:1b:51:70:
50:93:5c:90:3b:c3:81:c1:00:8b:0f:75:0b:cf:f5:
1a:10:7d:72:97:a1:0d:b6:4b:ac:51:76:73:80:33:
fa:87:81:35:73:c7:b2:3a:e3:5a:96:dc:1c:38:af:
7f:22:4e:ba:38:95:4b:95:a0:eb:2d:75:9e:a1:16:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:7B:C6:0C:EF:D8:E1:32:DD:09:E7:FA:71:1A:A1:2E:8B:5F:85
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:96:13:6c:9a:d2:f7:2c:29:57:70:79:08:d9:5c:5b:13:28:
51:b5:e5:63:89:ba:c1:58:6a:fc:ff:e2:23:31:a5:10:70:ac:
48:5b:24:96:fa:f5:2f:45:f4:ef:ec:7a:88:13:89:7d:21:57:
7d:81:58:56:a8:f4:36:90:a5:47:19:3c:3f:22:4d:99:0a:1b:
3e:b3:b0:e2:55:93:9f:ab:4f:b5:9d:b1:8a:97:35:62:e4:be:
f0:bb:41:50:61:17:27:a9:2c:2f:68:c8:08:41:fa:0b:bc:c3:
37:8d:ab:ca:2f:b9:b3:fb:0f:60:ae:27:ec:44:62:4f:4d:6b:
53:0d:14:f7:18:43:87:1c:21:35:04:d2:a3:76:9b:58:bb:23:
0f:c3:20:4a:ce:1b:dd:97:21:57:1c:9d:a1:f1:ab:58:d3:26:
b8:18:b0:63:cc:1d:f5:63:b4:d4:ca:b9:c0:42:e2:1f:c9:db:
32:85:24:36:4d:f6:c9:89:6d:80:54:eb:81:a5:81:84:f6:03:
0b:09:40:7c:a8:82:c5:92:fa:65:f3:49:85:cf:b7:04:53:77:
21:66:db:5e:1f:11:cb:85:1c:d5:a0:d1:91:f3:18:7a:be:e0:
0b:81:68:af:33:5c:fa:13:71:15:12:42:2f:37:e1:88:81:9d:
26:07:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:43 2025 by rpki-client