Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: eaIudo4BKTMP/Iyn9mnsisNyma63oT3HskyutzgN43I=
Subject key identifier: 6E:0F:4A:97:19:30:59:E5:04:2F:20:CA:9C:DA:14:41:96:4F:65:68
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019A533F77F42C52A10CEEFD8EBDDBF3F5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 02B4
Signing time: Wed 05 Nov 2025 09:00:59 +0000
Manifest this update: Wed 05 Nov 2025 09:00:59 +0000
Manifest next update: Thu 06 Nov 2025 09:00:59 +0000
Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=)
2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: 8M8fmNEtS2ibY7t2z5BBi6n2br74U70sUU0oukeMIns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:77:f4:2c:52:a1:0c:ee:fd:8e:bd:db:f3:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Nov 5 09:00:59 2025 GMT
Not After : Nov 6 09:00:59 2025 GMT
Subject: CN=6e0f4a97193059e5042f20ca9cda1441964f6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:93:ce:c7:ea:b4:27:be:07:6b:f0:bc:42:
03:f0:a6:2e:fe:5a:5c:0c:72:33:bf:4b:a3:1f:67:
64:72:3b:1a:6a:72:96:84:37:32:81:2e:d5:31:63:
e1:36:6c:9e:9e:9a:5e:7f:d7:0f:c7:cb:4e:82:ec:
ae:1e:79:48:80:5c:be:83:80:51:ed:98:f1:8d:a1:
8f:58:ac:05:42:40:0e:b2:b3:99:c2:58:07:75:3c:
74:d4:c3:c7:3d:98:96:c1:7b:9b:fa:ac:b0:54:14:
73:79:99:8a:23:c3:d0:e4:1c:b7:ac:9f:d9:b6:01:
97:55:7e:b1:f8:df:99:7a:0d:60:1b:51:c6:60:1f:
82:fe:4b:10:83:2b:a6:01:23:19:4f:f0:03:32:03:
7f:dd:ac:b9:a0:89:55:d8:b9:4a:5e:c1:83:4b:fd:
76:f1:97:54:8a:18:5e:e5:f4:30:9c:c9:c1:df:11:
42:89:c3:7f:16:ea:e1:07:ef:00:9e:d6:f2:ff:a4:
64:20:f3:fd:de:3d:7c:83:1f:58:85:7b:9f:30:02:
51:20:58:34:bf:90:2a:22:df:45:0a:98:40:b3:e7:
ed:6d:b8:f0:39:38:5c:ab:86:9c:f6:32:28:c9:2b:
1d:97:c4:7f:bd:ea:91:6e:4e:b3:4f:15:ec:c3:7a:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0F:4A:97:19:30:59:E5:04:2F:20:CA:9C:DA:14:41:96:4F:65:68
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:56:d6:6a:af:3b:be:89:34:b1:41:33:bf:90:66:78:df:aa:
16:67:c9:05:87:ae:b1:5f:9a:32:8f:41:92:8d:f7:86:04:95:
e1:c4:c8:cd:45:0f:65:64:75:36:c1:1d:37:a9:af:40:64:83:
2f:66:11:91:c1:14:de:53:c3:79:fb:3a:0e:96:1c:4d:fc:10:
fc:08:67:2f:4d:89:42:b0:99:d1:58:fb:6a:0f:ce:e9:a9:4c:
0e:e1:0f:2f:d1:2a:8a:d1:25:4e:1f:3c:41:ee:b4:e1:eb:41:
88:17:f9:6f:eb:00:40:fd:fd:79:15:1b:ee:a9:a8:fc:7f:b1:
9c:42:22:55:ad:98:3e:e6:b6:da:d8:60:79:1e:76:2d:9c:bc:
0d:58:33:1d:f5:33:92:92:e1:e3:ef:47:81:29:92:94:68:62:
ec:2c:c2:44:c1:80:83:b1:86:02:a2:5c:51:95:b6:0b:5f:e8:
fa:37:34:dc:b3:18:da:ed:e0:67:78:03:60:bf:2f:be:8d:c7:
7c:00:07:5c:9d:61:a1:f7:45:19:53:8c:85:42:fb:ec:9a:72:
01:73:49:38:a1:da:6f:2d:d5:cd:91:d1:2d:01:81:92:92:78:
ab:65:47:87:d9:c9:03:b2:1f:ba:fe:86:e3:d9:70:0f:75:8c:
e3:64:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:03 2025 by rpki-client