Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: e9lRwE7zkEdnT1IrxK1fc/M4uXsMPWMlDvsdiHCe7y4=
Subject key identifier: 8E:D3:F8:32:A0:EE:BD:F6:4A:6C:89:E3:06:4B:15:2F:0B:02:59:C5
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 0197B74526F8041438708880C00C054E0DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 0F48
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: gH7otPIx9z276jA6ponXmWJZ8pw3ePgD3YQrY/o2zK8=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:26:f8:04:14:38:70:88:80:c0:0c:05:4e:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=8ed3f832a0eebdf64a6c89e3064b152f0b0259c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:d3:9d:87:c5:f9:63:1d:85:dc:ce:77:c8:
8d:b7:11:27:8f:68:cf:cd:01:56:b8:bd:34:bf:34:
c2:f4:03:f4:6d:59:97:ba:71:a9:a8:06:4e:5e:fa:
a3:99:33:21:d4:75:6f:10:81:f4:05:9f:b9:c1:29:
07:e1:bb:75:e4:7d:04:27:07:fe:25:84:9c:6a:5c:
22:52:e5:d9:e3:af:cd:63:8d:9d:e6:af:98:7a:47:
ab:44:c1:e7:e8:2d:b7:f7:fc:9e:04:a8:8c:79:c4:
f6:e1:eb:35:f6:f9:35:15:f4:cd:d8:47:20:98:9f:
c4:7e:7e:f0:07:1b:91:38:c3:ea:0f:f2:a6:80:5f:
99:23:9e:74:0b:23:eb:43:87:92:a7:bb:0a:20:1a:
c0:e1:23:7c:79:c6:cc:f5:b9:dd:21:e9:7f:50:46:
c4:1e:ca:14:2c:65:97:c9:56:d3:f4:19:c2:48:50:
71:e9:b7:fe:87:0a:4e:2a:2b:80:9b:50:8f:26:3b:
31:62:2b:ae:be:31:e0:41:a2:5b:14:80:84:e6:bc:
19:88:43:71:ad:c3:8e:09:f5:43:c7:3b:de:2d:58:
94:1b:d7:51:11:90:ea:1b:54:78:a3:97:ed:e9:0c:
ec:2e:bf:6a:4b:96:dd:aa:b5:76:63:eb:92:fd:92:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:F8:32:A0:EE:BD:F6:4A:6C:89:E3:06:4B:15:2F:0B:02:59:C5
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:c9:10:b2:1e:3d:71:c9:7e:68:44:1d:02:f2:2b:44:63:
a2:e2:89:50:7e:c6:2f:e4:5f:5e:77:16:87:80:77:12:88:33:
47:e3:68:35:ce:e7:52:6c:85:59:87:b3:8d:f7:0c:51:fb:28:
02:0c:52:c2:11:7b:93:33:1d:17:21:e6:6b:1f:4b:79:2f:bf:
b8:c9:e3:eb:26:c4:fc:ef:29:7c:f1:92:16:24:88:f2:3a:b0:
c7:16:2d:81:69:56:87:3b:a2:f8:1e:cf:12:0d:13:bf:b7:08:
95:7b:de:cd:0b:fb:8d:91:28:3c:8c:3a:66:7c:66:c6:fe:27:
4b:51:db:8e:78:65:5d:cc:29:19:71:2e:74:49:94:2b:5e:76:
be:fd:75:3c:18:97:78:62:96:6d:c6:31:5f:1b:4e:fe:f5:30:
a6:1b:02:66:48:eb:85:c5:04:7e:21:ff:fc:13:f2:6d:a5:5e:
9b:da:36:5b:a4:22:30:c5:90:09:17:6f:83:b0:df:46:e9:c3:
fd:60:57:d3:29:e2:55:eb:f4:db:fb:93:d8:c2:ce:29:aa:cb:
0f:e3:f6:a4:5d:60:9b:74:38:b1:55:6c:6b:50:2e:89:1c:a3:
99:8e:6c:0a:18:e5:a3:1a:96:da:3c:67:49:b7:1c:28:07:87:
70:76:9a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSb4BBQ4cIiAwAwFTg3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5
NmU3YWQwHhcNMjUwNjI4MTYwMDUxWhcNMjUwNjI5MTYwMDUxWjAzMTEwLwYDVQQD
Eyg4ZWQzZjgzMmEwZWViZGY2NGE2Yzg5ZTMwNjRiMTUyZjBiMDI1OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhTTnYfF+WMdhdzOd8iNtxEnj2jP
zQFWuL00vzTC9AP0bVmXunGpqAZOXvqjmTMh1HVvEIH0BZ+5wSkH4bt15H0EJwf+
JYScalwiUuXZ46/NY42d5q+YekerRMHn6C239/yeBKiMecT24es19vk1FfTN2Ecg
mJ/Efn7wBxuROMPqD/KmgF+ZI550CyPrQ4eSp7sKIBrA4SN8ecbM9bndIel/UEbE
HsoULGWXyVbT9BnCSFBx6bf+hwpOKiuAm1CPJjsxYiuuvjHgQaJbFICE5rwZiENx
rcOOCfVDxzveLViUG9dREZDqG1R4o5ft6QzsLr9qS5bdqrV2Y+uS/ZLfLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7T+DKg7r32SmyJ4wZLFS8LAlnFMB8GA1UdIwQY
MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct
OTgyODJjODlmNTE2LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2
LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTXJELIe
PXHJfmhEHQLyK0RjouKJUH7GL+RfXncWh4B3EogzR+NoNc7nUmyFWYezjfcMUfso
AgxSwhF7kzMdFyHmax9LeS+/uMnj6ybE/O8pfPGSFiSI8jqwxxYtgWlWhzui+B7P
Eg0Tv7cIlXvezQv7jZEoPIw6Znxmxv4nS1HbjnhlXcwpGXEudEmUK152vv11PBiX
eGKWbcYxXxtO/vUwphsCZkjrhcUEfiH//BPybaVem9o2W6QiMMWQCRdvg7DfRunD
/WBX0yniVev02/uT2MLOKarLD+P2pF1gm3Q4sVVsa1AuiRyjmY5sChjloxqW2jxn
SbccKAeHcHaauA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:56 2025 by rpki-client