Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: momu6RdGsypSocnwTSr/fmhmPCnshmZKb6o+oWekuZM=
Subject key identifier: 25:23:E5:BA:1B:BB:7B:AD:BC:31:40:C8:8D:F7:43:BB:1F:47:8B:6F
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 019A5564516DCD80AC7241384FD2945CDB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 10A3
Signing time: Wed 05 Nov 2025 19:00:28 +0000
Manifest this update: Wed 05 Nov 2025 19:00:28 +0000
Manifest next update: Thu 06 Nov 2025 19:00:28 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: E7p9k/XvLl+OG7uKVcn49z3K1m0VylN5i9jTHKlh+80=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:51:6d:cd:80:ac:72:41:38:4f:d2:94:5c:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Nov 5 19:00:28 2025 GMT
Not After : Nov 6 19:00:28 2025 GMT
Subject: CN=2523e5ba1bbb7badbc3140c88df743bb1f478b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:25:f5:04:5b:f3:a5:58:91:e4:76:ea:e8:
6d:d8:8d:8c:10:74:e4:ae:5d:05:bc:cc:01:99:8c:
bd:97:68:8a:c5:3c:9f:3b:dd:bf:44:5e:b6:dc:dc:
f8:77:32:16:87:31:ee:56:1c:c8:60:c5:1b:e5:da:
69:96:07:ce:4b:c3:45:87:83:34:75:74:59:a0:a4:
0d:24:9e:10:0e:d0:ec:ef:ae:c4:3f:eb:bf:8d:d4:
06:e1:19:86:9a:20:fd:f2:d6:de:8b:4a:0d:8f:35:
b2:a7:6e:d7:08:0c:43:d7:0f:18:02:80:8a:30:18:
c3:3e:70:1b:e2:ad:ab:47:ca:a7:1e:ba:01:37:c2:
1c:f4:60:d1:9f:50:0b:43:48:5a:93:75:64:3e:47:
2d:13:04:ea:4b:e2:dc:7a:80:e1:6a:10:66:4a:23:
7c:5e:e1:cc:ed:bb:22:da:f7:2e:45:70:c9:0a:c0:
86:47:39:18:91:bd:c0:c7:8c:51:af:39:3d:6c:9b:
00:e9:fd:96:aa:2e:8f:77:07:59:ac:c0:cc:ed:ff:
26:09:0b:c3:70:c4:8e:e3:74:79:6f:17:d0:f8:22:
60:b8:3c:d1:e5:8c:06:99:71:32:88:46:82:b3:ba:
52:94:a9:18:2c:e5:36:d2:6f:b6:bc:5a:d1:f1:a4:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:E5:BA:1B:BB:7B:AD:BC:31:40:C8:8D:F7:43:BB:1F:47:8B:6F
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:65:78:70:a2:40:9c:2c:77:8a:7e:28:b7:31:00:1f:a7:64:
63:b9:8f:1c:5a:3a:f5:74:40:5a:8a:07:82:12:6e:a4:cd:4a:
d4:a7:8b:db:4c:05:2d:91:0d:f0:52:b6:c1:a5:40:70:90:5a:
c6:06:2c:41:7b:59:63:45:aa:b5:9d:6d:5a:d5:0f:28:e4:38:
5b:3c:53:a8:bd:1a:20:6c:80:f0:01:a0:d7:81:89:6a:04:f1:
90:a5:fd:b1:f7:69:36:24:3b:68:4a:2f:9b:fa:a3:c0:78:7a:
0d:19:53:e7:ff:c9:cf:e3:86:ec:03:8d:13:db:1e:c6:2c:6f:
3f:d3:b8:d2:bb:6f:25:33:14:2c:9c:ab:a0:1b:e8:d0:1d:40:
84:8b:1e:8d:d4:2d:46:37:f3:08:69:85:64:e4:97:28:13:5a:
80:ea:a8:fd:94:a0:67:70:ca:c8:f2:a0:c7:9d:01:83:59:f5:
b3:1f:73:f9:cb:9a:ad:cf:9b:ad:0e:08:26:81:9b:14:bb:17:
44:41:ee:a6:6b:69:b0:dd:de:0d:41:37:cc:57:80:1c:b1:4d:
65:43:4b:d4:bd:9e:14:02:ca:d5:ab:3b:3a:33:27:6a:08:5f:
17:5e:a8:63:8d:9e:70:0f:ff:4b:a3:4b:1d:25:7e:38:80:0a:
4d:5b:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:44:50 2025 by rpki-client