Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: yewx2Fh0mVelSnIalYSXgui43+8GTdVuqBEfFHFZocc=
Subject key identifier: 5D:D3:6A:24:F7:9E:3A:06:99:E0:88:9A:E2:D9:73:E3:5A:51:79:A4
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 019922553FB2C5AE510EBEFDF765972F5B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 1004
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: s86gZDKhX+DtO6mwmOB+kw74oF61683y8c11NovXE5M=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3f:b2:c5:ae:51:0e:be:fd:f7:65:97:2f:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=5dd36a24f79e3a0699e0889ae2d973e35a5179a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:1d:b6:52:25:2e:9e:8d:e3:f6:74:b8:7a:
a7:a9:70:ad:a0:35:16:0f:9d:08:93:1e:5c:f2:81:
12:ce:bf:d3:79:b9:e7:52:2f:e2:f8:16:6d:a5:b6:
77:f7:b8:6f:1f:12:02:eb:b2:cb:82:e2:42:49:2f:
de:ea:87:bb:7c:ba:5a:dc:29:2c:93:6b:9c:20:54:
6b:d6:81:d4:2e:ff:92:a7:ca:23:7e:d2:23:0e:66:
bc:11:1f:fc:a5:20:b9:a1:aa:f9:63:43:1b:11:6d:
00:9d:6c:0f:23:1f:4e:72:08:6b:03:d4:8d:f0:78:
18:d7:f3:9e:64:bc:35:ec:40:c1:b1:8d:41:bc:b3:
13:f9:0a:34:ba:b7:50:57:ab:98:20:de:91:70:f7:
14:82:c9:15:bc:99:21:93:a8:db:76:ea:fd:5a:01:
6e:f1:75:03:81:26:09:ab:af:64:ef:f4:9b:f8:de:
4a:a6:52:eb:77:7a:92:62:ad:05:4a:cd:3a:cc:b9:
7f:65:00:16:2f:ce:2e:c6:fd:a9:a1:e9:78:ba:ee:
69:8f:cc:0e:e8:42:cc:81:ec:ca:10:f5:0d:4c:e7:
0e:d3:4d:69:71:a0:fa:72:2b:65:d8:4b:e3:f2:47:
5a:c1:78:6c:80:cd:2e:a7:f6:bb:4c:84:87:29:e3:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:6A:24:F7:9E:3A:06:99:E0:88:9A:E2:D9:73:E3:5A:51:79:A4
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:58:08:20:1f:2c:01:16:02:18:01:3c:40:95:e0:62:fe:cc:
41:2c:75:3f:08:8c:96:af:df:07:08:a4:e7:a2:97:ea:9c:b4:
35:f7:f3:cd:c5:4e:73:a8:c6:54:57:df:c4:8f:85:51:f5:0a:
24:3d:f5:b1:1c:f1:93:b2:94:aa:03:a5:8e:50:45:0b:ae:9f:
e1:1a:d2:1d:51:d1:2b:4c:03:9e:c1:78:94:f9:26:eb:de:01:
84:0f:56:af:8a:61:bc:59:2a:25:e2:b9:b6:f6:d8:f3:0e:5f:
9c:24:d0:b7:c8:36:97:11:44:20:88:35:ef:5e:a3:2a:1a:0b:
9e:70:4d:28:c8:17:75:3f:75:3a:da:c9:8f:2e:06:5f:f7:be:
db:04:3b:9a:1e:58:88:bb:c2:e0:ca:21:35:cb:37:17:cb:63:
45:c9:e3:36:db:41:36:97:1f:51:35:b8:1f:45:07:9b:0f:b4:
63:7f:8d:4b:d5:ad:d6:85:6b:79:dd:cd:f9:19:aa:38:76:ab:
12:4d:9d:00:21:38:4b:ee:46:a5:37:2c:c2:cd:b2:41:c3:2b:
8c:5d:87:a4:1d:44:8a:bb:7c:e4:cc:47:f9:5e:dc:15:1f:3a:
a9:0a:12:5a:b3:73:3a:c2:3f:fb:84:01:07:76:92:5d:77:01:
31:90:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client