Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: XpU1gT5QTGFPzFzlEyB1BRHGb+zVDO5Y8PNmdizD9CQ=
Subject key identifier: F1:1E:BB:CF:86:0F:AF:EF:60:08:AF:83:9D:37:89:54:7C:38:37:D8
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019872620097C85AACA42A04908585EB8806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 01BB
Signing time: Mon 04 Aug 2025 00:01:21 +0000
Manifest this update: Mon 04 Aug 2025 00:01:21 +0000
Manifest next update: Tue 05 Aug 2025 00:01:21 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: WbaYRXal3C/bJbMfRSy/z2fACIA5frC1bilrVQe5vB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:00:97:c8:5a:ac:a4:2a:04:90:85:85:eb:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Aug 4 00:01:21 2025 GMT
Not After : Aug 5 00:01:21 2025 GMT
Subject: CN=f11ebbcf860fafef6008af839d3789547c3837d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:df:fc:c2:b9:93:24:2d:d8:23:29:f3:a4:
7d:66:ff:e3:ff:3f:7b:45:89:ec:e0:58:92:ac:ef:
b3:a2:56:d3:57:e8:dc:bb:97:a2:9f:cf:9c:d5:cb:
42:10:08:ae:40:0d:03:bb:d2:1b:43:4a:e6:99:7f:
17:cb:44:9c:79:c5:5d:05:d0:2c:b6:aa:90:0f:39:
bf:31:8a:e9:e2:11:fd:7a:45:8f:0e:97:66:50:4d:
a3:9f:9c:12:58:90:15:cf:94:73:db:5d:7d:f9:79:
86:6e:c2:53:4b:0e:9a:6f:64:51:ed:e4:ff:d7:fe:
56:68:92:64:d2:03:eb:84:be:ee:61:f6:c1:3d:d8:
17:10:56:8d:f7:c7:50:54:58:b2:22:b2:48:68:4f:
bb:6f:aa:a6:c8:32:4c:6b:cb:16:28:8e:89:b4:88:
d0:7e:c8:73:c7:06:aa:e5:a0:9a:92:83:76:cc:00:
d2:77:17:54:77:b7:34:cb:2b:df:85:73:43:3c:05:
96:99:c9:f2:3f:cb:17:2b:f9:2f:b0:5b:15:af:95:
9c:1c:cf:57:ca:d0:cb:c3:72:9e:bc:96:02:67:5d:
69:02:3f:23:19:21:89:49:be:ac:07:52:cd:fd:73:
99:2e:f5:e8:20:dd:e4:63:00:6b:1e:03:8c:dc:ab:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:BB:CF:86:0F:AF:EF:60:08:AF:83:9D:37:89:54:7C:38:37:D8
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:46:66:23:f4:d5:de:57:36:64:4d:5a:40:38:ba:36:85:c4:
91:ca:1f:a8:07:d3:9a:8b:40:46:ea:ee:01:30:92:02:10:86:
b1:11:b0:71:de:e9:cc:d8:4f:7c:0f:c9:6a:66:15:4d:26:d7:
24:1c:76:33:8e:ba:a5:fc:1a:d5:fa:1e:fd:20:e6:18:14:05:
8d:b2:78:9e:60:e8:ea:42:3e:f9:65:eb:ed:58:0c:8b:64:71:
5f:17:8d:6e:75:61:39:ac:6b:ec:e5:12:83:8e:20:01:df:30:
52:4c:83:d4:04:f7:e0:31:b4:7c:35:2d:9a:15:57:62:cb:74:
4d:57:45:5b:08:08:01:33:39:82:ac:a1:d8:fa:38:d6:88:8c:
05:68:43:04:c2:9c:d6:c4:d3:9b:0f:b3:32:c2:2a:01:20:f7:
85:ee:e1:33:56:ca:e8:5b:be:3b:66:8a:a3:63:d1:a2:da:05:
8c:11:2b:4d:13:56:5b:63:52:0b:bf:f4:4e:2f:59:88:cb:c3:
73:56:0a:3d:e9:e5:f9:65:cf:f2:30:cd:e1:a5:75:50:93:ee:
be:44:48:89:97:c4:f6:f9:95:92:8c:d9:bd:63:2f:b4:94:e6:
02:35:53:0f:62:f7:a5:fe:7b:de:ef:ca:ce:90:9c:8d:2f:65:
fd:d0:20:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYgCXyFqspCoEkIWF64gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi
MGYzZjEwHhcNMjUwODA0MDAwMTIxWhcNMjUwODA1MDAwMTIxWjAzMTEwLwYDVQQD
EyhmMTFlYmJjZjg2MGZhZmVmNjAwOGFmODM5ZDM3ODk1NDdjMzgzN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdnf/MK5kyQt2CMp86R9Zv/j/z97
RYns4FiSrO+zolbTV+jcu5ein8+c1ctCEAiuQA0Du9IbQ0rmmX8Xy0ScecVdBdAs
tqqQDzm/MYrp4hH9ekWPDpdmUE2jn5wSWJAVz5Rz2119+XmGbsJTSw6ab2RR7eT/
1/5WaJJk0gPrhL7uYfbBPdgXEFaN98dQVFiyIrJIaE+7b6qmyDJMa8sWKI6JtIjQ
fshzxwaq5aCakoN2zADSdxdUd7c0yyvfhXNDPAWWmcnyP8sXK/kvsFsVr5WcHM9X
ytDLw3KevJYCZ11pAj8jGSGJSb6sB1LN/XOZLvXoIN3kYwBrHgOM3KuzsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEeu8+GD6/vYAivg503iVR8ODfYMB8GA1UdIwQY
MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt
NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk
LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEZmI/TV
3lc2ZE1aQDi6NoXEkcofqAfTmotARuruATCSAhCGsRGwcd7pzNhPfA/JamYVTSbX
JBx2M466pfwa1foe/SDmGBQFjbJ4nmDo6kI++WXr7VgMi2RxXxeNbnVhOaxr7OUS
g44gAd8wUkyD1AT34DG0fDUtmhVXYst0TVdFWwgIATM5gqyh2Po41oiMBWhDBMKc
1sTTmw+zMsIqASD3he7hM1bK6Fu+O2aKo2PRotoFjBErTRNWW2NSC7/0Ti9ZiMvD
c1YKPenl+WXP8jDN4aV1UJPuvkRIiZfE9vmVkozZvWMvtJTmAjVTD2L3pf573u/K
zpCcjS9l/dAgkg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:38 2025 by rpki-client