Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: yuywo+8LiX16kDt1HDN++HJ3LN7Iz5ZXKbgC/MYtivM=
Subject key identifier: 18:28:1F:7B:9B:AF:6A:16:F7:BF:90:C2:53:A1:89:9B:94:60:D9:CA
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 01983871E5578156B4B8FED3FBC8007A2604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 019D
Signing time: Wed 23 Jul 2025 18:00:45 +0000
Manifest this update: Wed 23 Jul 2025 18:00:45 +0000
Manifest next update: Thu 24 Jul 2025 18:00:45 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: CUkzQp61iG48wGKT/R7OS8xMYTWx/XTdQTY0WXiYZ+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:e5:57:81:56:b4:b8:fe:d3:fb:c8:00:7a:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Jul 23 18:00:45 2025 GMT
Not After : Jul 24 18:00:45 2025 GMT
Subject: CN=18281f7b9baf6a16f7bf90c253a1899b9460d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:17:2b:31:00:5c:ff:0d:6b:a9:df:7a:d0:
9e:ea:3f:6d:cc:38:28:01:cf:bc:8d:df:e8:0c:48:
cd:5c:81:d4:47:bf:fb:7d:15:48:e2:52:bd:c7:e9:
89:ea:75:b0:15:85:49:bb:67:66:4b:3a:b2:2f:23:
f2:8c:cf:e0:9d:00:b0:01:8f:d0:6e:67:d4:b7:f1:
c7:61:bf:73:2a:ad:dc:2f:61:9c:5f:86:dc:90:59:
a0:d9:c5:ac:b9:4b:ff:90:27:a6:3d:be:f8:ef:01:
33:55:9a:21:6c:ef:9e:b3:65:66:16:ea:e1:2b:94:
7b:09:a8:16:94:d8:b4:b2:01:1d:83:b5:86:59:94:
8b:4d:57:0b:4f:24:a2:b2:87:a8:d4:49:f7:32:e9:
cb:f9:fc:a9:3c:28:76:b6:c1:58:bd:e4:27:6a:01:
6f:39:4c:17:12:90:37:b2:ce:45:0f:db:1f:e9:22:
03:5c:d2:ea:b1:b0:a4:81:8d:7a:66:59:47:99:60:
cc:d0:0b:e6:b6:86:08:f7:22:3a:3d:8f:41:67:ca:
b5:03:62:3d:f1:e7:2c:ce:05:f0:c2:59:63:04:5a:
e4:18:69:b2:51:72:bc:08:cf:2c:94:3a:db:bd:a4:
9f:b4:2a:c7:b1:de:a3:b5:ae:ae:21:39:4f:6e:fb:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:1F:7B:9B:AF:6A:16:F7:BF:90:C2:53:A1:89:9B:94:60:D9:CA
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:f7:72:ac:18:7d:ea:1f:07:81:03:71:d2:e9:95:25:8c:
22:98:37:46:8e:cb:63:8a:37:4f:03:b4:4f:86:45:cf:35:b1:
4d:29:96:7c:b4:e5:41:a0:24:e0:18:02:52:38:be:1c:09:00:
76:2c:24:f3:e8:a6:d2:d9:2b:89:a2:12:c6:6d:cf:9f:2b:47:
72:17:f5:4c:3b:3c:f2:cd:ac:f9:9c:2b:28:6c:4d:4c:de:0b:
ea:33:88:96:d5:db:11:e9:23:31:1b:67:e6:2c:1a:0b:de:1a:
d6:8d:be:d0:8d:20:06:4c:f2:0e:df:51:3a:37:e7:76:5e:62:
55:5d:62:37:a2:5d:4d:62:08:57:37:e6:b3:87:5b:38:a7:7a:
c2:3d:5b:e8:be:8e:8f:83:40:5b:fd:49:15:b0:4e:e2:cc:0f:
00:57:bb:a4:a3:5f:b0:20:fc:1b:0f:b8:33:55:40:dd:9a:b2:
b4:5b:ac:35:30:27:90:61:53:a9:b8:43:43:47:f6:2d:da:cf:
e3:bc:52:47:8a:8a:94:33:b0:08:f1:87:4c:1c:ab:92:a0:89:
46:3c:dd:4d:ac:69:18:7d:d2:f2:2d:60:52:88:e2:ea:55:fe:
fe:02:35:a1:45:39:74:bc:cc:ad:b6:66:54:c9:62:45:06:2f:
8e:7b:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:25:41 2025 by rpki-client