Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: 2rAqF1SxoA/p+J4MlYjtdZLDLrD43R7qhXP5Lcayw84=
Subject key identifier: 9D:B5:2E:A0:CD:2E:0F:2A:3A:99:97:1F:B4:42:1C:E9:25:2C:36:99
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019A722662E89CDEB8947BA33818330EB1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 02C4
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: Q9+gXDX9lo4k15GhwwZVrkrxgDjmeAvXwl+TeI8LdYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:62:e8:9c:de:b8:94:7b:a3:38:18:33:0e:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=9db52ea0cd2e0f2a3a99971fb4421ce9252c3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:64:d8:d2:16:ba:ff:5d:dc:8b:e7:fe:7d:
96:d6:25:3c:14:3d:4a:a9:85:b7:ad:d9:27:fe:53:
02:ef:2a:ed:f8:e2:2f:c4:7f:42:17:26:c5:66:3b:
9f:b4:d8:71:5f:a9:aa:04:2f:cd:67:67:73:ce:6b:
e3:f9:a4:34:d6:0f:1b:2e:ec:7c:1b:f2:68:32:d3:
3c:19:d4:ee:f9:00:12:0b:72:4b:a2:89:a8:32:c8:
0c:45:c3:ae:1f:9a:77:56:4b:52:1a:7a:08:42:ba:
76:78:01:44:e2:50:f2:6a:b2:2b:f9:1a:40:12:e4:
c5:95:d3:24:fd:0a:22:3e:a1:19:41:ea:17:21:72:
20:34:6d:a4:c0:67:e4:ee:02:e4:47:8c:58:16:72:
8d:65:6d:7f:23:35:5d:d4:28:ef:83:63:17:00:fe:
cf:c9:f3:3e:7c:78:39:c2:fe:d4:99:87:78:4e:f7:
9b:0c:48:21:91:fb:70:f1:df:af:55:eb:1b:14:6e:
fc:81:b8:21:11:4b:ea:ff:21:d8:c4:1e:fe:6f:6f:
50:4b:cc:b0:cb:49:ab:eb:b6:90:8d:97:65:c5:8e:
12:b5:ac:10:fe:43:ed:5e:6a:d4:16:db:08:91:85:
67:52:64:c1:4a:49:94:88:d1:40:69:2f:cb:65:d8:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:2E:A0:CD:2E:0F:2A:3A:99:97:1F:B4:42:1C:E9:25:2C:36:99
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:17:b9:a1:5a:b4:9f:5a:31:2f:16:2e:f3:e8:ea:6c:d3:
de:c1:7d:36:8e:ab:ce:6b:38:a7:b3:56:88:5d:c1:71:fe:21:
c9:90:97:39:7e:32:5c:0e:70:76:a4:1f:a7:1c:a8:ef:27:06:
11:d5:40:a2:e1:b4:e5:d0:50:fc:77:2e:ae:32:0a:9a:05:e5:
6a:c6:0a:73:59:ab:e7:9c:b9:cf:62:b3:0a:65:0f:f2:87:87:
22:27:5b:3d:7b:e5:97:82:68:ea:fc:ee:7f:fc:5a:96:a1:b5:
73:d3:cc:d0:b5:e6:73:fe:cf:e0:37:97:58:c8:5e:a6:75:ca:
6e:58:36:ef:90:1f:e8:da:1d:ec:a3:a9:c1:3c:9c:2c:15:f3:
d9:0c:f1:6f:e8:e5:3e:d0:03:14:50:14:a6:52:f5:7e:38:8e:
70:76:d6:23:3e:e2:2f:80:96:35:10:5a:ed:eb:6f:c5:24:1e:
c7:90:1f:2f:6d:f0:8c:f0:2a:71:61:32:75:a1:b6:29:7b:a3:
b3:70:d1:01:9a:a3:ef:fd:e3:a6:92:d0:cd:06:cd:fa:c5:c3:
01:5d:f6:79:af:b4:6f:0e:bf:9e:d6:f5:ec:8c:a3:e0:6e:6c:
63:91:08:2d:c7:be:67:a4:6d:84:7f:05:ab:7e:55:39:66:40:
85:d6:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:30 2025 by rpki-client