Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: o84MMxTuQlwxesoQ4kosjnx5oN8q9Je/FQXfyEwwXk8=
Subject key identifier: 88:CC:C3:96:BE:5A:4D:E9:14:A8:A3:32:2F:D7:D8:1E:8A:F4:9F:4E
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 019A0110F05BBC2B66E60A08011D070DA24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:18 +0000
Manifest this update: Mon 20 Oct 2025 10:01:18 +0000
Manifest next update: Tue 21 Oct 2025 10:01:18 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: YsfmkSlahrfxzxkIIqDvBYZQ1yebCVC43mLdGMMzIfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f0:5b:bc:2b:66:e6:0a:08:01:1d:07:0d:a2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Oct 20 10:01:18 2025 GMT
Not After : Oct 21 10:01:18 2025 GMT
Subject: CN=88ccc396be5a4de914a8a3322fd7d81e8af49f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:b3:bb:70:05:1b:35:51:0d:61:ea:65:58:
59:51:ef:c6:e4:8d:d4:e9:d1:07:89:cd:75:b5:54:
ba:e4:d5:14:02:23:4c:ac:e7:39:f7:b5:00:f9:7c:
e4:49:c6:1b:77:7d:d0:cf:05:c9:1a:99:d2:60:7c:
e7:d9:d2:9f:94:9a:f9:8f:7e:7e:d8:a6:79:0c:52:
3f:36:ca:c7:e0:59:26:cd:58:b7:d0:c3:81:d2:02:
7a:f5:38:05:87:d6:86:0d:e0:fa:83:dc:15:1a:a6:
15:3c:5c:bf:7b:e4:95:8f:b8:4a:23:01:ab:20:2a:
20:69:c3:56:71:20:82:1f:f1:86:dd:09:77:4d:83:
99:c3:9c:ae:2a:90:ed:a7:6a:52:a2:d9:6c:dd:3b:
51:f4:4c:80:6a:62:56:c0:c4:10:ac:1a:ba:df:ba:
0a:fb:48:28:d4:6e:ac:e6:5a:f5:5b:f2:66:83:05:
37:ba:b2:d7:fc:c6:8f:64:72:e3:f9:3a:65:ae:48:
69:ca:cc:44:25:3f:1f:34:c4:9d:24:1c:1a:bc:70:
a0:53:11:d9:bb:df:6a:f9:f6:9c:9f:22:0a:d5:ab:
28:88:9a:4c:3e:45:73:b2:bd:53:2d:d1:79:4f:cd:
cd:82:7b:22:9d:00:34:b9:3e:9e:aa:d5:9f:ee:3a:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:C3:96:BE:5A:4D:E9:14:A8:A3:32:2F:D7:D8:1E:8A:F4:9F:4E
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f6:d0:4e:9f:e5:50:e3:94:75:5c:7b:07:a1:1a:1e:2e:a4:
ee:a2:f7:2a:9a:2f:60:ba:53:26:6d:bc:94:83:b7:64:48:3d:
69:b5:78:fc:d9:ff:53:17:d5:3d:de:a9:0c:09:2a:05:25:13:
2f:5e:e5:ba:76:90:d4:1f:1f:9b:0b:09:79:5a:7e:23:38:f5:
90:bc:9a:81:3a:b1:a6:31:ee:6c:33:0f:92:7e:e9:d9:97:ef:
4f:2c:11:28:fa:f9:a4:8f:ae:97:3b:fd:f8:e2:9e:ef:f1:72:
01:ea:bf:e7:c0:ea:cb:14:dd:93:09:28:dd:9d:65:0c:d7:ef:
af:e9:10:01:fa:78:68:35:9a:1b:70:0f:ee:f9:0d:5d:75:1b:
75:dc:1c:fb:36:d3:ea:6c:d6:3d:04:6f:6b:29:34:d3:7d:8f:
ac:7a:a1:eb:39:90:bd:a3:c8:f2:c4:75:6b:b1:d2:a0:4e:f9:
c8:15:d9:0b:99:93:62:24:9b:48:82:91:72:12:a4:70:f6:a1:
2a:1e:ea:66:ab:21:1e:77:ac:a3:14:31:44:2b:30:30:cf:2e:
fe:fd:cb:cd:20:44:94:0c:9e:30:b3:88:5a:03:2d:8e:bd:07:
f9:da:94:72:ab:4e:ed:4b:a4:b2:73:f8:30:99:00:15:dc:dd:
24:5c:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:28 2025 by rpki-client