Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: z8uaKDOZtOCxT+MK8m9k9bVILcgzuH4tCNo/5DleuMM=
Subject key identifier: FA:55:D5:B8:DB:EC:96:85:95:E4:EA:FC:0C:01:66:45:F1:E4:AF:74
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 0198D70578770557E666EBA2210BE8D9DF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 0FDD
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: kzpUv5O8ELF91WQ0balxOX/rAadL3u41FyR9rbVX0Wg=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:78:77:05:57:e6:66:eb:a2:21:0b:e8:d9:df:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=fa55d5b8dbec968595e4eafc0c016645f1e4af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:71:ad:a8:06:01:42:55:64:bf:98:6f:b9:
e3:54:a9:2d:34:29:b1:f6:05:a4:ad:0c:dd:2e:95:
20:a2:2c:56:fb:b6:32:ed:93:92:7c:00:41:a8:e1:
5d:49:a6:0f:3a:62:33:43:d2:91:0a:01:f4:ae:b3:
da:fb:f0:dc:ff:31:98:a6:c1:e0:0b:8c:5d:41:b3:
8b:86:c9:8e:72:e7:b8:6b:a0:e2:4a:2b:3f:8a:42:
37:75:50:66:70:9a:43:cd:34:ed:85:c4:86:b6:c5:
45:25:23:79:02:fc:67:3e:d6:c1:a3:29:6b:55:ad:
53:d0:77:17:8b:3c:f7:2f:79:23:ac:28:76:5e:1c:
f9:d2:3d:1d:41:05:d3:d6:b8:5f:41:f0:05:1c:a9:
9b:0d:ce:fd:f2:33:be:82:10:50:da:4f:47:b5:9c:
ae:c0:d8:fe:87:e3:49:89:de:52:ed:18:54:a7:17:
4c:73:86:88:9a:2f:15:60:31:ae:67:e5:d0:e9:5c:
a7:c1:8d:82:eb:22:d6:85:af:59:de:bf:12:b6:ad:
00:c6:10:c7:c1:e7:9a:30:aa:9c:9e:dd:de:ed:38:
0e:76:2f:ac:ae:dc:b2:fd:36:d7:bc:c8:6c:41:9e:
ae:93:33:b6:54:e3:86:ae:7e:c1:61:17:dc:c1:99:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:D5:B8:DB:EC:96:85:95:E4:EA:FC:0C:01:66:45:F1:E4:AF:74
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:1f:e6:27:ee:be:b7:49:0f:5a:bf:ea:f6:2f:e8:69:26:
a5:95:fe:04:aa:89:22:8f:c5:9d:b4:33:64:6d:33:54:79:65:
10:05:a5:0e:e0:f1:f0:60:6d:2a:28:a9:bf:4a:69:65:68:e1:
50:25:7f:1a:4e:70:7b:b6:11:bb:fa:62:cc:4f:08:ed:87:74:
a7:a3:5f:37:9e:4d:bb:d1:53:ed:f5:d6:2d:17:ad:f9:aa:76:
63:a6:d0:e9:b3:e9:2e:81:7e:9b:b4:7d:0d:ed:fa:0c:18:f0:
45:23:2f:23:de:6d:d0:eb:b4:76:f7:10:93:72:80:af:7a:fc:
df:08:9d:b9:2f:34:5d:77:1e:54:60:88:68:bb:fd:3f:a7:59:
cd:f5:13:e4:9b:be:08:ca:43:2a:e0:34:64:02:59:55:dd:0b:
54:08:7c:5e:d4:91:9f:ba:85:4b:a3:c5:e5:8f:4e:88:59:ed:
c0:02:f7:d7:b9:2d:50:4e:21:63:2d:5d:70:1a:bb:e9:50:aa:
72:d4:d2:15:e0:0f:f5:19:56:97:89:19:77:79:b1:ea:39:ee:
8d:32:46:46:4e:20:6f:18:47:b8:c8:66:0e:05:85:3b:3c:8f:
0e:b1:92:01:28:ad:29:22:77:17:dd:40:5d:4f:a1:86:ad:fe:
0f:c7:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:59 2025 by rpki-client