Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: NtU1NtaZZFJPbGnD0p2ylGhlawxmrmnOivmWUyGEk+k=
Subject key identifier: 24:3C:13:E2:51:10:A1:23:20:32:AF:C6:28:EB:15:B8:7A:49:4E:31
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 0199FC21514158FC2628E7D6AA9D613A15F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: aH4Y2uoQ8WArFgSlAAxYQRpcLMfPzbZp6gzOtvuFqWA=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:51:41:58:fc:26:28:e7:d6:aa:9d:61:3a:15:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=243c13e25110a1232032afc628eb15b87a494e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:fe:6d:c2:4a:ec:74:61:88:94:56:e9:03:
9c:97:d6:a6:fd:f8:a6:d0:fb:4d:14:58:02:8f:47:
9f:54:71:7e:e3:98:05:0d:4d:7f:9a:24:57:97:d2:
a3:78:9d:a7:4a:93:20:c8:a3:97:e6:4c:cf:07:c6:
df:25:60:e3:de:af:41:69:b8:ba:d5:40:62:df:62:
7c:2e:24:3a:df:7f:cb:36:e1:0a:7d:7d:e7:73:ef:
c4:b7:eb:95:c5:28:97:ce:c5:d8:5c:66:ff:f3:e3:
fc:4e:0c:32:a8:7d:15:41:2d:40:d6:7c:3d:98:ac:
d1:64:99:14:74:64:8b:ba:5e:cb:7d:da:f1:c0:d7:
10:16:61:29:15:39:0d:c1:24:f7:eb:92:8c:12:d9:
68:ef:59:91:9f:75:43:06:94:57:8f:ee:b6:5e:8b:
08:eb:3b:20:bd:8e:00:f7:b7:c2:c5:92:02:af:7c:
b9:04:42:70:9b:b2:b3:95:e1:35:3f:65:e5:dc:27:
3f:90:70:52:c8:4e:30:94:7e:58:77:ba:7a:b0:be:
d5:2c:bd:e6:f0:8d:31:0a:72:a3:31:f1:71:7c:e8:
f4:76:3f:d1:e6:f7:db:6a:1f:07:76:21:08:32:29:
23:1d:07:40:12:1c:a5:fd:61:9e:b1:92:f3:e8:c1:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:13:E2:51:10:A1:23:20:32:AF:C6:28:EB:15:B8:7A:49:4E:31
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0e:fc:42:9d:83:6d:8a:6c:ee:56:f6:e8:11:ed:6e:3c:fa:
78:69:a1:51:bb:21:92:86:3a:dc:04:28:03:6d:da:08:ce:b8:
9a:c5:83:1d:61:30:19:88:9a:27:7d:56:aa:fc:e1:18:c7:e0:
a2:52:43:45:58:f9:68:c6:0f:98:d8:0f:5a:0c:10:c2:bd:be:
d5:22:d9:9f:50:0d:a1:97:f0:b7:0e:9b:85:07:18:10:73:d5:
8c:32:84:59:e3:5e:f2:7e:0e:a7:4c:5b:c4:1f:90:e0:e7:33:
62:c6:d5:95:ed:f7:96:e3:10:12:dd:5a:ce:07:d6:68:c3:92:
27:d8:70:e6:9b:66:87:ff:28:7c:aa:fc:15:b0:0c:22:a4:1e:
d3:f3:98:33:65:2c:41:50:44:91:3b:87:e5:e7:0c:1e:f8:96:
72:51:56:35:2f:77:58:35:2c:47:b3:40:4c:20:68:0f:2d:21:
32:48:e2:3c:70:67:09:69:a5:0f:d0:48:6b:91:fe:c9:d3:f5:
14:64:a0:0b:f3:51:4f:14:fd:74:f9:75:e0:7f:33:98:22:a4:
0c:0a:95:6e:d0:f6:15:23:10:a9:76:a4:d6:17:2b:29:91:d4:
06:5b:f7:3c:5c:e7:7f:8b:c4:18:30:44:02:e7:44:8e:89:8f:
5e:7e:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:07 2025 by rpki-client