Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: lZV8oV8T0gh+j1ha5plntqjf1Dq0KcUYwZk+R7THS4g=
Subject key identifier: EB:AB:2F:B8:A6:CE:08:D2:7D:23:BC:96:41:76:03:82:49:90:EF:6F
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 019A725C91B64FA8E67604DB8AA5218F081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 10B2
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: FVnjrkIxXHpYzf+DtUTBdcMy0ML0TRH2weUYubnBHv0=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:91:b6:4f:a8:e6:76:04:db:8a:a5:21:8f:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=ebab2fb8a6ce08d27d23bc96417603824990ef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:54:da:ce:e4:88:7b:fa:81:82:bb:37:bf:
bd:63:a1:2d:77:66:30:2a:fc:43:1c:15:b6:ec:d0:
05:3e:71:94:a2:e2:fe:34:9d:c1:7f:0c:08:b5:e2:
3f:10:f3:61:dd:d6:e3:ea:01:fd:ba:e4:3e:4c:9f:
f9:eb:a2:f3:d2:38:07:0f:a3:c9:24:cd:63:e2:b0:
07:9c:7d:4e:d6:12:0b:a7:90:a9:51:30:28:97:da:
d1:65:fb:ec:96:11:94:36:05:9e:1e:63:3f:5d:f2:
f2:86:19:da:d6:3f:ac:3f:ff:b9:c3:83:df:41:2e:
fa:a8:2e:25:27:75:33:01:81:ed:a9:14:81:00:31:
1e:71:50:eb:b2:9b:62:9e:8b:f4:45:cd:ab:34:7a:
6f:1c:05:45:2f:7c:d2:62:4a:77:4e:d2:20:99:b9:
c9:1a:50:e2:b9:8d:4c:f9:06:10:aa:db:d2:94:5e:
ca:0d:2f:38:6d:35:c8:18:8f:5e:ff:03:30:2a:f3:
f8:70:22:64:66:27:db:19:00:50:ce:d4:33:c0:b1:
02:a2:55:d1:b5:0c:c8:84:10:6e:50:0d:5f:3f:83:
bb:f3:7a:24:dd:cd:93:7b:83:09:ac:a6:7e:dd:ea:
17:1e:49:3c:92:55:2d:b6:9f:14:0c:a3:58:3b:e3:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:2F:B8:A6:CE:08:D2:7D:23:BC:96:41:76:03:82:49:90:EF:6F
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:77:6a:02:a3:ea:cb:fa:91:7e:ac:7b:4a:b1:0e:67:9f:
19:29:7f:23:54:2b:61:fc:b5:f2:19:4d:e1:c1:cd:4a:df:31:
5d:02:2c:6a:41:b8:b5:4c:97:aa:fb:6c:c1:6b:47:3f:86:81:
8e:f5:85:e3:fd:9f:15:9e:5b:0b:ae:13:51:c4:d2:b3:85:35:
f4:42:87:65:98:7b:18:0c:20:8c:b3:2f:e7:36:7a:cb:3d:a9:
37:56:88:78:5e:56:9d:07:78:cd:37:a2:cd:0c:65:c0:5e:d0:
8b:d9:4f:87:1a:c2:c5:73:e2:65:9e:05:78:16:d7:42:ba:f2:
56:32:9f:cd:1a:52:f0:1e:26:99:68:73:57:d6:f2:23:4f:f0:
d1:31:ec:f2:1c:8a:68:a5:21:c4:71:0d:a6:a8:3a:f6:9a:59:
ca:37:60:99:d2:38:13:ae:84:c0:e2:3b:f1:4c:98:df:b6:32:
ed:d3:c8:9a:42:22:6f:54:44:b4:ea:2f:4d:ff:27:20:e8:88:
39:c0:00:d2:04:f0:54:f2:61:02:fd:67:4c:be:71:e8:0d:b2:
f0:98:92:d7:9d:3f:a0:7b:c5:4a:7c:9a:77:b1:7e:ee:1a:7a:
d9:3f:27:d8:bb:ea:37:e3:21:df:b4:24:e8:09:29:cc:83:bd:
95:39:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:02 2025 by rpki-client