Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: KfY/mx/DBf+6CJLGMlxoaq3ARQ+Oqwbg1vxWniRzbOs=
Subject key identifier: 09:08:CE:9B:07:C5:29:D6:D5:80:ED:C1:37:67:9C:FD:39:1C:17:D5
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0196B40F4F691BCA9850CC2B9D159188E4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 11C4
Signing time: Fri 09 May 2025 08:00:24 +0000
Manifest this update: Fri 09 May 2025 08:00:24 +0000
Manifest next update: Sat 10 May 2025 08:00:24 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: ik2oEdDyzPeJMgtLlC8wYgxTPl6iKLPCdubOj1bHjMQ=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:4f:69:1b:ca:98:50:cc:2b:9d:15:91:88:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: May 9 08:00:24 2025 GMT
Not After : May 10 08:00:24 2025 GMT
Subject: CN=0908ce9b07c529d6d580edc137679cfd391c17d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:fa:0c:94:d6:3a:2c:2b:c6:aa:cf:45:9c:
e7:fe:3c:4e:28:59:99:8f:6d:15:8f:06:45:d9:01:
1c:e0:7a:5b:80:da:2b:b8:77:24:c4:28:0f:64:ee:
31:d4:12:39:ab:98:44:fb:c6:1f:e6:a5:c1:10:94:
ca:eb:68:73:77:66:a0:51:d3:8e:33:36:40:3d:aa:
00:8f:99:a3:27:f1:2c:3b:02:c7:24:80:9c:a8:5e:
a0:fd:54:b3:cd:2a:02:f1:56:bb:81:63:65:e1:82:
c1:ff:34:ad:30:09:22:ad:4e:b6:7e:1f:ff:56:3c:
94:1f:42:82:00:e7:0b:4e:e7:cf:27:4e:ad:13:90:
8a:ea:61:6d:3c:b6:11:fa:cd:a6:83:73:0e:df:72:
3b:2a:81:77:c2:9e:ce:66:c1:16:56:18:25:34:49:
e4:a7:a8:18:d3:78:2b:d7:74:d3:35:ec:c6:37:ff:
3a:f0:06:d9:48:c2:08:82:0c:97:3a:68:87:a2:e9:
d6:f9:66:07:4c:81:b6:e7:a7:71:b8:a1:89:7a:c0:
cf:16:e1:d7:da:0f:59:db:d0:24:ba:e8:57:e5:5d:
10:ba:fa:bf:a4:e2:af:7d:eb:e3:82:df:6d:16:fd:
98:0e:ba:56:58:85:b3:ad:cc:a2:b6:2f:57:28:fa:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:CE:9B:07:C5:29:D6:D5:80:ED:C1:37:67:9C:FD:39:1C:17:D5
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:ad:04:9d:c1:c4:20:01:37:a5:00:f4:82:87:48:a5:36:
dd:6d:c5:11:48:2b:89:38:08:5d:48:a8:b6:c7:0a:58:01:2e:
12:9a:bc:44:7c:6d:f4:c0:ff:d7:b5:fd:f1:7e:1f:fe:0c:eb:
ae:40:ad:5b:de:26:b1:1b:c7:0c:58:35:bb:29:b0:a8:a1:9c:
e2:f6:cc:c9:d6:0f:db:a5:d8:25:7e:1b:4b:71:d8:9b:15:1c:
21:4c:7c:4d:dc:a2:4c:82:15:f4:29:cf:da:76:58:28:07:4e:
f4:31:2b:6a:78:10:07:fb:0f:0a:2c:cd:22:c6:b3:ec:84:3c:
f4:f1:b2:d2:2f:4e:79:11:1e:2c:b2:da:54:84:77:6a:f2:df:
cd:01:5b:1b:da:b1:7c:56:3e:53:bc:9c:58:9f:c4:db:95:72:
a3:cd:70:92:79:c9:2f:a0:97:42:5d:25:74:a9:b4:26:8c:27:
d7:f7:37:91:f6:ba:d5:98:ff:cf:99:06:28:8a:12:63:38:eb:
f4:a2:c4:bc:a8:4d:ad:87:23:5e:ff:ae:47:75:7c:7d:e2:56:
95:45:5a:78:5c:6f:ba:57:a6:97:6f:02:93:da:88:3f:fc:b9:
dd:1c:93:f2:7b:e4:c4:2f:ca:9f:6e:8d:8d:b1:30:0a:84:99:
bd:96:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:04:24 2025 by rpki-client