Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File: GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier: jMpZBnKmSROLdCXjg5PI22j0K2D1HzbFI+ahsp9RFLM=
Subject key identifier: 36:14:90:CB:31:9F:3E:5B:AE:B2:77:95:72:91:92:58:5C:24:51:00
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 0197B77C8DA793CB6AA8F4AEB9FD9F1E7211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number: 0E06
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: 83ODbO+JGto+N1LQ2TvjU9diSyQYIAQzao+M9jEDtAY=)
2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=)
3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8d:a7:93:cb:6a:a8:f4:ae:b9:fd:9f:1e:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=361490cb319f3e5baeb27795729192585c245100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:05:94:ff:b0:47:bc:5e:78:cb:10:51:b8:
4a:a1:89:b1:11:4e:35:c5:f5:fb:3a:f6:7f:2e:fc:
60:84:11:6a:d8:6a:e6:20:4e:1f:b0:90:76:d7:80:
0b:d0:a1:05:eb:5a:a3:3f:cd:45:8b:48:ac:a6:c4:
07:72:99:56:73:e9:e9:b0:b6:57:99:b2:60:d0:65:
37:a3:45:41:36:a7:30:eb:91:80:8a:28:9c:88:88:
b8:46:bf:6a:7c:cb:c6:a9:48:30:84:55:82:cb:f3:
98:ca:51:ff:8b:95:d0:72:e8:ed:a5:14:05:f9:66:
6f:d2:ae:b5:48:7a:06:eb:db:eb:b2:91:d2:d9:a1:
22:78:97:b4:6b:a5:e5:cc:c0:00:03:05:0d:53:18:
54:6c:1c:a3:cc:81:65:6f:18:76:6b:2e:6e:1d:84:
e1:46:b4:75:53:a1:6e:4c:e5:4b:19:b2:bc:55:f2:
a2:1c:11:70:24:78:dc:b3:5e:3b:4c:ae:b6:ca:11:
c9:5a:08:ef:22:ed:26:f6:4c:af:2d:5a:fd:c0:15:
c7:35:3f:1d:b1:52:7d:4a:a5:60:a0:42:0e:b6:da:
08:c9:46:8c:56:90:18:fe:ac:64:36:20:56:8e:62:
6c:2d:e1:87:60:2c:e8:42:67:70:86:11:44:b8:63:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:90:CB:31:9F:3E:5B:AE:B2:77:95:72:91:92:58:5C:24:51:00
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:7a:95:64:b9:23:dd:e9:fc:d1:06:39:bb:12:38:35:f6:
66:83:0d:27:f4:6a:81:8c:f7:7b:6a:80:24:e1:0d:88:3e:65:
6e:68:2e:8b:ea:93:3b:d4:9c:1c:d1:5f:0c:7c:7f:00:c0:99:
78:72:76:cb:c6:00:cf:d4:73:15:47:5b:5a:c6:cc:69:b9:22:
59:ee:40:2d:31:5b:2c:37:fb:ab:0c:e3:46:da:16:55:f7:38:
b3:66:a2:d5:9e:99:b1:62:ec:b1:05:16:8b:00:20:8c:24:ce:
65:44:b1:2b:4c:5e:94:9e:a8:09:1f:5b:d9:c6:7e:66:1a:c0:
ef:e5:82:d4:db:2f:b3:17:37:1b:e4:17:73:22:47:c6:74:87:
08:0c:1e:24:0c:c0:e0:a1:fe:c3:01:ad:a7:08:55:ad:ff:41:
06:8d:e4:0c:b3:fe:34:92:9b:b9:1f:94:2f:4d:44:99:ad:04:
46:69:68:9f:b4:3b:a2:a1:a2:a0:62:d5:66:e0:ca:27:04:1c:
dd:8d:26:b5:7c:9b:06:13:c0:00:53:d8:2e:d8:a2:1e:10:86:
28:49:23:fd:3e:3d:8e:64:2c:20:9b:f6:88:9a:6a:54:57:16:
ce:75:f9:ab:d9:0f:d3:4f:58:f0:44:a5:94:ea:14:9b:2a:b0:
52:3f:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:44 2025 by rpki-client