Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: ss4hvq3/2J8AQZ2zVRFEq4/LY9ABBwUstS2fznMO65o=
Subject key identifier: 4E:54:93:8C:C4:BE:35:7A:0E:76:5C:6B:CE:98:7A:9D:4B:34:C2:03
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 01987486C9B6C97FD9D116F3C1F1803A8BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 0FAA
Signing time: Mon 04 Aug 2025 10:00:47 +0000
Manifest this update: Mon 04 Aug 2025 10:00:47 +0000
Manifest next update: Tue 05 Aug 2025 10:00:47 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: EbJJ7I/4PIALDVcS7PbbeuD6ETc7LnR3hT4GlWYdoPA=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c9:b6:c9:7f:d9:d1:16:f3:c1:f1:80:3a:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Aug 4 10:00:47 2025 GMT
Not After : Aug 5 10:00:47 2025 GMT
Subject: CN=4e54938cc4be357a0e765c6bce987a9d4b34c203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:d5:7d:e0:a7:a1:86:97:bb:e5:15:c5:f0:
67:65:60:6e:c9:46:6b:39:af:a0:4c:0d:1e:5a:be:
23:3a:a5:c1:3c:e4:1b:66:9d:95:e6:4a:56:b8:af:
12:6a:f2:ff:95:66:2f:92:86:2f:dc:1e:d8:2d:12:
a0:03:cb:dd:cd:bf:03:15:b3:25:c6:ad:d2:c9:dc:
45:b5:8b:21:87:58:01:47:c1:41:39:24:a1:d1:5f:
3b:28:ec:ae:52:a0:97:20:51:45:2a:5f:ec:16:89:
25:d7:c2:b2:b4:c1:29:97:95:49:33:a5:11:c1:ad:
60:67:b5:1b:08:3f:2f:c1:cf:ef:fe:fb:4f:e4:02:
b6:30:16:b2:9b:4f:43:28:d9:b9:f7:bc:3f:7f:90:
5c:56:b4:65:ef:fa:5e:96:3e:c9:9b:08:ef:dd:89:
bf:47:bb:27:5e:af:bf:2e:c6:37:ae:dd:a5:92:6c:
d3:ed:40:14:53:76:60:01:37:d8:4d:6a:68:f3:ab:
70:82:e6:02:9d:91:e0:4a:28:b8:d8:59:05:21:fd:
a3:ab:6c:8d:1a:8a:90:f7:b3:f7:89:08:28:fa:4c:
45:f7:94:37:a0:84:35:7c:12:23:9d:29:5f:f1:c1:
a1:07:f1:d7:77:02:e3:58:5b:65:34:62:27:3c:25:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:93:8C:C4:BE:35:7A:0E:76:5C:6B:CE:98:7A:9D:4B:34:C2:03
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:90:51:fc:7a:40:af:77:1b:37:84:87:1e:46:ea:b9:73:
09:8d:46:02:e0:5c:9c:e9:62:26:1d:7d:23:87:ee:2a:d0:7f:
2f:ae:ae:35:04:22:ff:7a:06:d3:0f:c2:06:77:67:38:2c:b4:
75:f6:c0:6a:2f:27:99:78:ed:1c:08:6c:0f:d1:ed:6d:ab:e1:
b5:88:d9:22:6d:43:38:fb:88:d6:20:2d:5f:a9:b2:fe:e4:c2:
80:d8:6f:35:84:9d:95:1a:e2:a3:33:3d:6a:72:2f:d2:4b:93:
0c:1c:05:a4:ff:f7:8e:fc:d1:78:85:b0:1b:06:9b:ee:8b:dc:
c0:0f:d9:29:96:79:28:7d:c6:fc:36:f5:de:b5:57:e2:39:c1:
b2:da:6a:c1:91:8a:d6:df:ff:4f:9b:cf:97:df:55:ad:ea:a2:
9f:c0:c0:bb:f5:2b:21:7d:44:69:d1:49:1a:af:49:0c:56:0b:
66:bb:6e:f4:55:d3:40:9f:30:2c:96:1c:6d:8a:35:8a:b4:81:
64:6f:fa:4a:99:e2:61:e8:e9:1b:7c:31:88:3c:8c:9b:64:4e:
75:c0:fe:37:03:52:b5:46:20:75:01:d5:fe:f9:52:fa:7e:c7:
b5:ab:4e:fd:31:52:6c:e3:df:74:da:3c:7a:3a:e3:cb:ab:03:
43:96:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:55 2025 by rpki-client