Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File: GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier: Qe1hKwxPLs0Gw5r05QkiNeUoIE7UoyZrEUJj8HtBH/c=
Subject key identifier: 47:09:F8:9E:F6:4B:11:A2:21:59:97:5B:35:F4:47:6A:AD:AB:29:6D
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 0199FCC6481EBF78ACB34238E57D97A420D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number: 0F33
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: C4u6MzXywYzm7e6ch3SOJj34EWzzpD384baIPaLa5IM=)
2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=)
3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:48:1e:bf:78:ac:b3:42:38:e5:7d:97:a4:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=4709f89ef64b11a22159975b35f4476aadab296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:31:8d:96:b3:27:26:3f:a8:46:ac:f6:7e:
d5:99:e5:06:fb:cd:9a:da:88:66:54:f9:a4:34:50:
fb:1c:47:f9:d7:80:2f:6b:44:6b:be:30:dd:04:b5:
3b:94:bc:49:1e:55:91:1b:63:36:a9:c5:bd:ba:42:
5f:bb:ed:95:9c:17:84:74:be:b9:4a:68:ec:ea:92:
ce:9c:aa:d8:06:d2:36:8a:69:08:8f:b1:cf:03:5c:
7f:c3:af:22:db:a7:a8:06:fd:bc:ef:77:de:5a:fd:
f0:1f:04:63:e7:ee:f6:ce:5f:fb:3e:6e:12:41:19:
5c:a6:a7:a1:6e:45:8f:c1:85:cb:10:63:62:f5:d2:
b8:84:9c:9b:de:78:5e:6d:28:56:ee:78:9b:ff:c8:
3e:e8:92:45:a6:5d:7d:b3:d3:2e:32:d2:a6:62:97:
3d:0e:e9:ec:7d:63:32:30:94:1d:9c:10:0e:e7:b6:
3b:5f:1e:ca:ee:5b:26:4a:97:25:2d:15:62:2a:79:
90:5d:70:db:fb:49:3b:18:cb:29:75:32:7b:17:e9:
e7:6c:f1:66:b9:e0:fb:d4:ce:41:1e:52:c0:be:6c:
47:03:b9:5b:b7:2c:7d:5f:93:1d:71:67:c1:78:5b:
38:4a:04:30:5a:9c:a2:fd:23:93:77:d0:78:d3:c6:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:F8:9E:F6:4B:11:A2:21:59:97:5B:35:F4:47:6A:AD:AB:29:6D
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:aa:82:51:e8:9c:a6:90:0a:8c:31:9b:ba:a7:98:f0:ed:e3:
c2:81:cf:74:91:54:92:c7:c7:9a:6a:c4:3b:70:45:a7:d5:cc:
b7:13:68:06:b4:75:cf:fb:d4:b1:79:1f:32:05:2c:91:27:22:
62:28:b5:9f:b3:30:22:0f:96:4e:4e:30:ec:b6:11:c3:16:a0:
b2:2c:b8:43:23:48:3f:5b:5b:36:d4:cc:97:da:95:f6:cd:2a:
0f:18:29:1e:e0:3d:de:5d:e7:08:e4:e5:8f:5d:f3:88:72:56:
d1:a7:3f:10:8f:a0:01:dd:68:70:08:b6:82:ae:71:63:3b:36:
45:12:68:36:0d:f6:58:a3:f7:26:7d:6b:b9:42:65:1e:42:41:
0c:fe:82:be:c7:fb:3a:21:01:24:b5:62:fb:2c:d6:5a:a3:72:
41:4a:12:e0:ff:e0:8d:2a:75:62:75:12:4a:d2:57:a5:aa:9a:
96:df:ed:97:c4:69:98:f0:ff:9f:50:b8:a0:ac:22:e9:1f:52:
5d:d5:f9:0e:11:83:1b:70:fb:5e:61:01:2a:5e:88:0a:0a:0b:
0e:7e:b8:cb:bb:b2:db:4f:90:4f:be:a7:95:b9:0a:35:1b:16:
37:da:c7:53:d5:5f:30:2d:c3:6d:ec:e8:2e:a6:9a:42:48:41:
ff:6e:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:08 2025 by rpki-client