Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: VTmVEiPA72ghxlwZgfydrFlQTNpUPw55zEnOkZ8pOXE=
Subject key identifier: D5:D9:DD:84:32:85:DB:4B:2D:87:2A:D6:DC:9F:A7:CD:CD:47:F9:E9
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 0199FE7DE9A4F97CEE539439BB304F0CAE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 1076
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: G/AqLD5V/na2I5KC+2NtY1G++hig+R5khGLscapL3Os=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e9:a4:f9:7c:ee:53:94:39:bb:30:4f:0c:ae:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=d5d9dd843285db4b2d872ad6dc9fa7cdcd47f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:dd:39:b9:d0:f9:6e:c0:37:c4:91:92:07:
c9:2e:4a:ba:7f:f8:01:52:ce:12:ce:87:4b:1e:87:
09:1a:c1:fc:66:d7:43:f6:af:cb:0c:13:79:92:70:
ef:7d:cc:ce:a5:12:0b:05:79:24:c7:77:2c:6c:fd:
61:99:3e:8d:c9:2d:32:c2:b6:9e:38:2a:d8:55:36:
6a:9b:a6:1c:cf:53:94:17:f1:dd:ed:8e:da:37:46:
cd:60:be:b2:8e:3f:2d:92:fc:e7:3a:a7:0e:9b:4a:
ad:08:f0:c3:42:b6:38:52:ba:f9:a1:0e:82:5e:7b:
5c:c5:71:4a:49:23:31:9f:13:6d:95:1b:c0:e7:16:
6d:7f:0c:54:c7:4b:3e:fb:4a:e2:cc:18:1d:97:2e:
55:20:8a:4d:fc:4d:11:b0:7b:f2:42:60:f6:bf:42:
f7:1c:ca:22:f5:54:55:f2:8f:45:97:4b:1e:f2:3b:
22:29:ef:9b:36:db:60:9a:a8:32:15:e9:e6:ed:44:
3b:f7:1b:b8:c9:ac:39:93:f8:da:3c:37:9b:0c:8a:
78:e2:99:dd:ab:15:61:29:66:49:3c:54:50:97:27:
2c:0b:27:f0:84:ef:d2:be:61:4b:7b:29:6a:64:75:
2f:75:cf:7d:f0:9e:76:4a:85:66:99:80:1f:5d:4e:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:DD:84:32:85:DB:4B:2D:87:2A:D6:DC:9F:A7:CD:CD:47:F9:E9
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7f:a0:d0:85:d9:3d:d0:30:cf:1d:38:81:37:b6:58:1f:00:
a1:6e:58:5a:38:79:32:c0:5f:ad:3c:39:b6:78:e3:c6:02:04:
02:b3:f5:de:52:dd:b7:c6:b1:ca:a0:06:9b:f1:70:63:19:35:
d1:ef:ee:07:06:dd:f1:23:58:1f:82:ea:bc:ad:1f:e4:d5:81:
43:bc:79:9f:7f:e2:ea:ef:ac:ea:81:7b:f7:ef:dd:7b:76:b5:
8a:59:44:b0:c7:71:54:26:26:d7:48:0c:13:a5:5d:7c:2b:37:
65:a4:1e:6f:e6:38:07:12:0b:4e:0f:6e:8a:0e:d4:0d:80:4c:
45:76:75:fd:3d:df:56:24:78:3e:2c:aa:d0:65:ef:f7:bd:1f:
8b:ce:ca:6f:db:c2:0c:56:76:e2:7d:91:ca:f3:0f:b7:54:52:
ad:9e:8e:50:06:7d:55:73:1b:9d:f3:e1:a7:0a:cc:01:ac:13:
42:76:3d:7d:07:04:a7:b4:18:92:79:cc:3b:53:01:a5:f8:77:
a9:64:55:46:0e:10:22:a4:2d:0d:31:01:ab:61:25:e8:07:16:
55:c1:a5:bc:16:0a:2c:f5:d8:d0:ab:82:8f:d4:06:fe:64:6e:
52:54:9c:33:9b:4d:cf:a2:81:33:24:35:4e:5d:43:ea:28:0f:
43:fa:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:34 2025 by rpki-client