Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: RJTPxduSm7s0g0W3skLHMELPj5EV22YsfHz1DA4Scfk=
Subject key identifier: 0E:9F:A1:68:88:80:27:92:9F:D6:52:33:1A:6F:55:B0:FE:24:B4:56
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01984A0A18F21D1F1B2FBF2795E121A628E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 09A1
Signing time: Sun 27 Jul 2025 04:00:32 +0000
Manifest this update: Sun 27 Jul 2025 04:00:32 +0000
Manifest next update: Mon 28 Jul 2025 04:00:32 +0000
Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: qLEkireBC0dJiHglzLsnR9aR82ln1M1cgjyX6IpkC2M=)
2: n_fySMb2KYofNdbrb087aj1eYn8.roa (hash: 77dWHMesUhSClZQyjFlFJHiSjQfgTnJaM+uBOMHku1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:18:f2:1d:1f:1b:2f:bf:27:95:e1:21:a6:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jul 27 04:00:32 2025 GMT
Not After : Jul 28 04:00:32 2025 GMT
Subject: CN=0e9fa168888027929fd652331a6f55b0fe24b456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:91:e0:0f:51:0e:cc:cd:49:89:3a:35:4b:
95:64:fe:ca:fc:c7:b0:9f:0f:0e:b4:90:00:a9:de:
21:15:8c:75:92:9e:92:0a:48:c3:55:3a:99:75:14:
8c:d2:08:d6:8a:c3:30:26:f9:ff:a9:78:65:d5:f8:
22:4a:ee:16:17:4c:3f:27:41:dc:23:b0:03:75:ab:
ad:81:46:56:f3:b6:b1:87:cf:52:d1:f2:fb:7a:28:
b2:79:a4:2a:57:e6:15:68:29:f4:5c:13:18:17:0b:
e0:b1:06:86:41:3d:04:be:e2:73:5d:52:16:7f:0a:
68:45:8a:20:ad:23:15:d6:a1:bc:ee:ee:7a:b9:e6:
b8:26:87:2e:3e:55:61:7c:fe:a9:4d:ba:9e:4f:95:
55:39:55:39:89:ba:1e:8d:1f:e8:d8:a2:a9:3e:ec:
2a:e3:2a:7a:95:fc:b4:9e:f9:37:bc:5d:d1:fb:d3:
d5:62:ab:23:7b:44:c4:1a:c8:90:c0:39:4b:bb:62:
73:a2:27:21:0a:ee:c8:0d:c0:48:3d:9d:f9:a4:5d:
36:79:a4:7e:82:df:36:65:23:71:7c:4c:4b:dc:b5:
71:4b:ea:11:06:2b:3a:41:37:82:f5:a1:3f:94:f1:
6d:19:5f:4c:a2:ec:39:6f:3c:d4:8a:fe:50:7c:fd:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:A1:68:88:80:27:92:9F:D6:52:33:1A:6F:55:B0:FE:24:B4:56
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:6c:ff:0b:75:d4:0b:98:1b:d6:43:9b:d0:c2:e4:fd:e2:
7c:84:65:2c:b9:ff:09:37:de:ba:2b:a3:cb:56:3c:fb:38:1d:
da:fc:4d:fe:1d:17:e8:39:f0:c3:61:5a:f7:27:9d:43:c3:2d:
f3:80:3c:42:92:9d:78:20:d7:d7:c8:87:cd:fd:65:86:d7:d3:
81:5e:cd:db:e3:d3:33:25:6a:be:33:c1:4f:3c:92:0d:44:a3:
04:99:3f:32:2f:bd:9d:07:8d:e7:49:64:29:8e:f9:f5:05:29:
46:f0:50:be:d3:35:52:81:9b:fb:0e:19:e2:03:1f:63:9a:bf:
4c:ed:ef:be:41:6b:a6:eb:71:28:8c:a8:03:5b:64:97:07:08:
c4:0b:4a:03:60:50:e4:c4:27:c1:ac:73:5f:a8:43:01:34:60:
2c:ea:70:d1:86:85:b2:85:9f:a1:98:e0:63:93:f6:01:af:82:
69:95:6a:13:9e:df:99:18:ea:03:99:15:68:e2:ba:bd:2b:ef:
f9:16:f4:b6:09:34:13:67:f4:3c:a8:10:b3:0e:11:84:00:a1:
7d:e7:97:8e:79:8a:2f:12:15:c0:2a:f7:b0:0f:28:56:bb:93:
df:12:b4:a6:45:5f:a9:49:0c:91:c7:fb:cf:94:b0:82:a5:29:
7e:65:66:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKChjyHR8bL78nleEhpijiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz
ZjdlN2IwHhcNMjUwNzI3MDQwMDMyWhcNMjUwNzI4MDQwMDMyWjAzMTEwLwYDVQQD
EygwZTlmYTE2ODg4ODAyNzkyOWZkNjUyMzMxYTZmNTViMGZlMjRiNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApceR4A9RDszNSYk6NUuVZP7K/Mew
nw8OtJAAqd4hFYx1kp6SCkjDVTqZdRSM0gjWisMwJvn/qXhl1fgiSu4WF0w/J0Hc
I7ADdautgUZW87axh89S0fL7eiiyeaQqV+YVaCn0XBMYFwvgsQaGQT0EvuJzXVIW
fwpoRYogrSMV1qG87u56uea4JocuPlVhfP6pTbqeT5VVOVU5iboejR/o2KKpPuwq
4yp6lfy0nvk3vF3R+9PVYqsje0TEGsiQwDlLu2JzoichCu7IDcBIPZ35pF02eaR+
gt82ZSNxfExL3LVxS+oRBis6QTeC9aE/lPFtGV9Mouw5bzzUiv5QfP0tHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6foWiIgCeSn9ZSMxpvVbD+JLRWMB8GA1UdIwQY
MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt
NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5
LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2ds/wt1
1AuYG9ZDm9DC5P3ifIRlLLn/CTfeuiujy1Y8+zgd2vxN/h0X6Dnww2Fa9yedQ8Mt
84A8QpKdeCDX18iHzf1lhtfTgV7N2+PTMyVqvjPBTzySDUSjBJk/Mi+9nQeN50lk
KY759QUpRvBQvtM1UoGb+w4Z4gMfY5q/TO3vvkFrputxKIyoA1tklwcIxAtKA2BQ
5MQnwaxzX6hDATRgLOpw0YaFsoWfoZjgY5P2Aa+CaZVqE57fmRjqA5kVaOK6vSvv
+Rb0tgk0E2f0PKgQsw4RhAChfeeXjnmKLxIVwCr3sA8oVruT3xK0pkVfqUkMkcf7
z5SwgqUpfmVmQQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:50 2025 by rpki-client