Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: bQgm21s4m9LxujPHHe+FEv6XVD7IMVgIy0uOMv2Kuug=
Subject key identifier: 86:07:4E:8F:81:34:1D:26:3A:BE:05:03:18:77:CC:A6:1C:52:1C:72
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0197B6D76707A25C4775D518E7BC9B2F1C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 124A
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: ev7akD83FY36C43mH1ICDGLQpC2Y1I9Dv1DSkpLuO2I=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:67:07:a2:5c:47:75:d5:18:e7:bc:9b:2f:1c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=86074e8f81341d263abe05031877cca61c521c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:d9:c9:39:72:b2:0d:4a:58:b3:53:33:8c:
a0:ea:df:a9:65:ad:8c:26:f4:d6:4f:8f:24:5b:f3:
45:ea:be:26:30:c1:8d:0d:49:ce:e5:52:a0:66:3b:
ad:b8:6b:23:0c:37:be:82:1e:e6:36:37:69:2a:e0:
8a:45:44:6d:7f:d5:b4:d4:88:7e:1b:f9:30:af:27:
ef:1a:80:af:8d:55:1a:5a:d8:9a:ea:ef:d9:96:a2:
1f:3b:1b:94:7d:b7:dd:3f:b1:d3:a8:05:39:3a:5b:
ed:d4:a1:36:41:75:52:3e:45:0f:6c:08:cb:3e:05:
80:30:e6:d3:22:9c:86:06:3d:35:92:8d:fb:48:09:
74:f9:55:1e:6c:33:b9:ce:3c:6e:3d:20:bc:68:96:
f6:71:27:27:e0:38:f1:c2:d5:23:8c:d2:62:be:ac:
ca:b2:34:a8:77:c3:57:f6:87:c5:ec:50:c8:4e:e9:
71:9f:be:3a:fb:a7:cb:91:c7:c9:38:e5:47:94:21:
f4:b7:08:7b:d0:ac:b6:fd:3b:3b:fc:50:c7:85:a9:
ae:ce:02:12:80:d6:7a:5d:e2:1a:03:50:b5:3b:51:
87:8f:78:a4:a7:ea:66:da:c4:5c:0e:ee:82:98:c9:
3a:65:df:ca:d8:66:2a:58:2b:ee:24:9a:4c:c4:c1:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:4E:8F:81:34:1D:26:3A:BE:05:03:18:77:CC:A6:1C:52:1C:72
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:50:71:6c:0a:a4:58:d8:d5:62:14:6f:92:b8:4d:8d:7c:f1:
ab:d8:e9:39:2f:66:9d:00:1e:9a:a7:ae:a6:e2:c3:be:84:ef:
20:9d:65:97:49:74:e5:18:cf:e3:8e:3e:1d:51:2e:19:d0:0c:
4c:0e:37:e1:94:80:c2:6b:ae:77:69:bd:f3:ae:0c:1f:a0:82:
b7:a9:cf:12:2b:4d:1a:eb:c8:de:f0:26:8c:01:96:5c:88:01:
66:5c:2b:e2:18:79:3e:ab:85:2f:3a:fc:94:eb:d6:f0:84:0f:
e9:da:1e:26:6d:0d:c7:3f:00:d8:87:b9:51:9c:94:be:cb:a4:
22:a6:b9:08:80:b5:e5:3e:81:20:8a:95:8d:e4:bd:85:5e:bc:
f3:6d:7f:f6:58:1e:d5:91:52:53:81:10:8d:ef:7f:9c:f7:c6:
dd:c4:e5:98:93:5f:18:4d:0c:f0:a6:67:fe:65:92:01:5a:6e:
62:3e:c0:66:2b:e4:ea:30:33:b7:47:7a:46:f5:d1:67:17:0a:
86:24:84:2c:0d:81:20:4c:e0:8c:10:11:47:00:f4:cc:f0:00:
b5:ba:ab:d8:d2:2f:bc:4b:e3:ec:ba:be:89:b5:0a:4e:57:73:
db:cb:f9:1c:27:af:fe:98:2b:6f:ea:ea:82:d5:23:e0:44:76:
33:f7:06:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212cHolxHddUY57ybLxyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2
ZmE3ZTMwHhcNMjUwNjI4MTQwMDU5WhcNMjUwNjI5MTQwMDU5WjAzMTEwLwYDVQQD
Eyg4NjA3NGU4ZjgxMzQxZDI2M2FiZTA1MDMxODc3Y2NhNjFjNTIxYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJzZyTlysg1KWLNTM4yg6t+pZa2M
JvTWT48kW/NF6r4mMMGNDUnO5VKgZjutuGsjDDe+gh7mNjdpKuCKRURtf9W01Ih+
G/kwryfvGoCvjVUaWtia6u/ZlqIfOxuUfbfdP7HTqAU5Olvt1KE2QXVSPkUPbAjL
PgWAMObTIpyGBj01ko37SAl0+VUebDO5zjxuPSC8aJb2cScn4DjxwtUjjNJivqzK
sjSod8NX9ofF7FDITulxn746+6fLkcfJOOVHlCH0twh70Ky2/Ts7/FDHhamuzgIS
gNZ6XeIaA1C1O1GHj3ikp+pm2sRcDu6CmMk6Zd/K2GYqWCvuJJpMxMGtnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYHTo+BNB0mOr4FAxh3zKYcUhxyMB8GA1UdIwQY
MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt
YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx
LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVBxbAqk
WNjVYhRvkrhNjXzxq9jpOS9mnQAemqeupuLDvoTvIJ1ll0l05RjP444+HVEuGdAM
TA434ZSAwmuud2m9864MH6CCt6nPEitNGuvI3vAmjAGWXIgBZlwr4hh5PquFLzr8
lOvW8IQP6doeJm0Nxz8A2Ie5UZyUvsukIqa5CIC15T6BIIqVjeS9hV68821/9lge
1ZFSU4EQje9/nPfG3cTlmJNfGE0M8KZn/mWSAVpuYj7AZivk6jAzt0d6RvXRZxcK
hiSELA2BIEzgjBARRwD0zPAAtbqr2NIvvEvj7Lq+ibUKTldz28v5HCev/pgrb+rq
gtUj4ER2M/cG2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:10 2025 by rpki-client