Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: L+qH8n1mWhQRIrUyjbeLY3U0+nV+fX4yRakdqKA0KJQ=
Subject key identifier: BC:68:79:DB:E0:BB:E4:75:F9:39:46:E3:21:08:A2:A6:1D:F6:BB:84
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0198D6981CE1C8AA5547FD1D5437B0EB3B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 12DF
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: APxbuWlQhtBxvKrZaIH8HMImfqq5GGV1EN9PokCOzZg=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1c:e1:c8:aa:55:47:fd:1d:54:37:b0:eb:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=bc6879dbe0bbe475f93946e32108a2a61df6bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:01:b5:3e:af:76:fc:1c:45:f9:37:a5:94:
d7:f9:c9:5c:ef:f2:d3:92:d2:16:39:00:39:49:79:
79:42:5b:f3:da:84:68:a2:66:4a:f2:ec:73:86:0c:
e5:79:20:ba:ae:fd:58:ab:53:e4:03:e0:43:e4:17:
1b:2c:9f:17:51:a6:87:80:f7:f4:82:32:55:5a:64:
74:e7:73:eb:f4:8a:17:ae:b6:33:6d:2e:66:dd:00:
97:73:ed:9a:ec:9a:9a:82:50:75:4f:50:66:24:7c:
68:bd:44:39:2b:78:6e:36:58:42:15:89:94:e3:05:
bb:e6:32:76:b6:c9:42:67:5b:bd:23:3a:f2:6f:14:
d7:b9:f5:92:b3:b5:66:ff:aa:d8:f8:bd:49:0f:1a:
1f:cb:87:30:45:3b:3d:89:bf:90:0f:da:73:92:9c:
5f:7e:02:9d:39:4f:ca:a3:9c:16:6d:75:24:df:10:
e6:7d:a2:d7:23:06:89:c8:a2:d6:d2:cf:5d:95:05:
00:b4:0b:34:3d:96:48:e4:51:d7:c0:38:fc:f4:f1:
88:f5:bb:a5:2e:f6:16:17:da:8f:c6:fc:10:86:59:
e3:83:94:45:ff:af:ab:b4:fe:7e:c2:8f:fc:b7:68:
04:4d:6c:50:de:9f:73:e4:7e:49:06:76:e8:ab:0d:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:79:DB:E0:BB:E4:75:F9:39:46:E3:21:08:A2:A6:1D:F6:BB:84
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:43:7a:2d:2d:2e:b5:d3:93:e0:24:c0:3c:7a:f8:fe:d5:
e8:d3:d4:17:62:7e:38:19:d8:66:f1:47:5a:a4:fa:35:f0:cb:
d6:84:26:4d:0c:b6:9e:20:2b:e7:1e:c6:94:d4:ca:68:9d:7c:
d0:8e:ec:c9:c8:df:d6:26:21:78:f3:23:df:1b:ca:7f:e4:d3:
a5:93:39:be:ce:16:67:9e:5f:11:c2:75:d2:b9:e2:bb:f7:26:
3c:d1:49:1a:38:d1:02:0f:e7:0f:b3:c7:f5:1d:51:26:92:7f:
4e:67:bb:a7:2b:f2:cc:14:2d:68:ba:f0:5b:04:1b:75:2e:d3:
41:35:2d:ad:79:8a:99:95:d5:85:ec:30:44:29:c3:8a:f6:2a:
ca:2d:db:0e:fb:57:d5:5a:2c:be:a8:57:1f:44:6f:08:af:8a:
5d:a8:5c:3b:d6:fb:45:32:72:b5:2c:19:13:5f:30:6f:eb:5c:
4b:01:0e:e6:95:fa:74:ed:b2:97:c0:11:8d:15:69:8f:7e:55:
9c:1c:80:7f:67:f0:95:58:24:ea:7d:12:e1:34:cb:94:ce:c6:
c2:94:80:e5:3c:f9:b0:af:51:18:12:62:fb:bd:af:5b:e6:5b:
39:d2:ad:9e:d2:b2:9c:c9:58:33:c6:24:51:9f:4e:31:7e:7e:
e6:37:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:33 2025 by rpki-client