Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: uY85EMBBewAeqBo/ssBkb+dSPw0gaW8v/eHlsdfXFL4=
Subject key identifier: CA:3A:EA:8B:34:79:EA:B5:88:5D:A6:92:42:21:93:D1:FF:42:3D:61
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019925FBB5F0EA1B5D889D26F153FEA96A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 0218
Signing time: Sun 07 Sep 2025 21:01:17 +0000
Manifest this update: Sun 07 Sep 2025 21:01:17 +0000
Manifest next update: Mon 08 Sep 2025 21:01:17 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: o4lIKTrEbzjjncv96ZFL1QrBiv4C4LXYWZ02Z4MuFIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:fb:b5:f0:ea:1b:5d:88:9d:26:f1:53:fe:a9:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Sep 7 21:01:17 2025 GMT
Not After : Sep 8 21:01:17 2025 GMT
Subject: CN=ca3aea8b3479eab5885da692422193d1ff423d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:f9:d2:35:72:ed:f9:f3:6a:4d:8b:fe:87:
92:46:6a:b1:e7:4d:ee:31:5c:9c:f2:cb:63:1b:f3:
ee:21:20:2c:53:d1:6a:ab:80:75:16:36:67:45:cf:
b1:1f:1b:cb:68:5a:16:41:94:00:15:d6:62:09:26:
70:8a:a8:b2:93:cc:27:b5:25:1c:14:d9:0d:3b:75:
ca:f6:59:0f:80:1a:05:f9:00:15:68:3c:9e:6a:b3:
2d:49:2c:2c:7b:06:56:fc:2c:12:a6:c1:3d:8b:f8:
4a:7b:3b:f3:95:4e:b8:42:e3:76:72:56:a3:11:00:
60:43:6e:37:52:19:e7:13:19:d8:db:07:b5:1f:34:
69:ed:d4:7a:69:8b:c8:7f:ef:e2:3e:13:61:df:57:
cc:c0:96:01:66:15:fc:cb:8a:35:61:f8:42:01:22:
e3:6b:f9:41:01:e2:97:6f:81:40:66:d7:52:0a:55:
de:35:7b:b6:48:9a:c4:97:3e:2b:87:92:c7:5f:4c:
91:9d:86:40:fe:15:9a:be:01:24:b0:ab:99:e7:37:
9a:7b:4a:c4:3f:79:4c:b0:08:a8:82:b3:05:7c:b3:
00:aa:fe:03:3d:39:5a:92:a9:62:e4:47:a7:19:22:
6f:e3:f8:dd:66:b2:8b:25:ee:1a:bc:92:b5:e7:9b:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:EA:8B:34:79:EA:B5:88:5D:A6:92:42:21:93:D1:FF:42:3D:61
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:81:7f:2b:66:97:58:56:a5:04:0e:01:92:0a:9f:f1:c0:
4b:36:f4:48:4b:4c:d1:95:1b:c1:c8:b5:e9:45:3d:51:24:60:
aa:5a:19:d2:5d:b0:4e:da:5d:2e:32:16:0f:c7:c7:8c:5b:d5:
76:0b:cb:02:c6:72:f9:a3:86:74:a6:c8:e1:50:09:67:bb:19:
0f:30:63:16:9a:66:79:28:a3:55:2b:fa:b0:3b:7e:2b:8c:39:
48:9c:e5:a8:06:2b:0b:49:b5:ef:f5:ee:53:5e:94:f9:1d:06:
42:62:37:3e:61:e6:66:81:c6:86:cf:3d:3f:1b:11:c4:83:7a:
aa:65:34:4b:a2:e4:10:fe:05:4f:54:86:7e:b5:1c:21:c4:21:
99:99:88:c9:b5:94:0e:a6:14:0f:0b:94:ae:45:a3:3b:3d:4d:
8e:8d:7a:55:c5:5c:85:03:fc:31:69:7d:31:90:4a:2c:45:78:
9d:b7:5d:12:9d:cd:0f:43:71:ee:5a:a8:a8:c9:9e:e7:34:96:
0b:bd:c8:5a:35:38:07:87:e8:1f:75:32:c5:d6:e5:1f:78:6d:
ed:6c:ec:0e:2b:3a:c3:f3:41:49:45:a8:33:24:45:cd:77:fd:
c7:36:de:e7:51:b5:2d:62:92:a8:38:b8:04:44:82:13:61:e2:
6a:10:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:52:20 2025 by rpki-client