Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: QC20nL7zqyv32XlrS9iqgAwxRf/MX3hk96iEDV1Lp78=
Subject key identifier: 00:87:76:4E:0C:27:9A:1C:7A:C1:7B:A1:16:06:8F:E3:43:86:B9:75
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 0198D4E0B08123D2857709A87FC359495A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 14E3
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: ny72pkSi/VDQMVNocHfY1bpZ/mScXsdEkwcMFBXOfJI=)
2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b0:81:23:d2:85:77:09:a8:7f:c3:59:49:5a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=0087764e0c279a1c7ac17ba116068fe34386b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:7f:0c:a3:1b:d8:1b:a3:50:93:60:98:f7:
41:b5:58:6a:fa:f7:91:1f:90:1a:8b:99:6f:78:38:
9f:f4:68:20:09:87:96:5c:6d:85:f8:a7:7f:92:ff:
31:91:17:77:b0:f3:37:35:92:9e:c6:aa:aa:42:ef:
66:b6:76:50:25:a3:be:20:1d:01:59:a4:5e:b9:4b:
0e:31:ea:4b:80:36:70:6d:c9:a7:c9:ed:97:9b:c6:
a1:a0:a3:54:26:bb:c7:c9:67:3a:53:91:31:fc:51:
77:06:a0:5e:91:2d:4e:8f:0c:e6:a4:0b:b7:aa:2c:
ff:62:bb:95:28:4c:85:f1:a8:af:10:b0:3d:0a:9b:
88:ff:3a:fe:22:b7:2d:e1:79:48:4d:09:13:b6:ee:
15:13:78:fb:5e:b3:14:2d:9e:b4:ca:d3:3a:86:05:
bf:bd:45:09:3b:df:1f:e1:da:24:21:54:7f:49:ab:
9d:7b:99:7c:c3:c9:36:ee:63:24:13:3a:d0:4f:15:
b4:bb:25:a4:14:ee:c4:32:e8:38:54:41:99:ab:e5:
f5:6c:1b:31:7b:08:17:ae:3a:15:fa:23:d2:73:fc:
21:96:6c:d8:42:d1:71:dc:db:d5:d2:56:e0:cc:b0:
c8:e2:51:ad:5d:31:d9:fd:19:5a:1f:93:d5:5a:f7:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:76:4E:0C:27:9A:1C:7A:C1:7B:A1:16:06:8F:E3:43:86:B9:75
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:18:3a:08:9f:f1:64:3c:40:8f:38:a0:92:94:e8:f2:bc:
34:91:0c:01:94:44:9a:60:aa:e8:24:5b:83:ea:57:0d:04:4c:
f3:da:c0:53:2a:c0:2d:35:7e:16:38:21:dc:6d:39:52:7e:e1:
ad:f5:9c:81:56:ea:79:76:cd:cc:cd:d6:db:96:ff:45:58:23:
f7:16:16:dc:6a:7f:37:4d:a1:96:59:44:d2:1d:35:b7:c1:df:
79:75:99:53:59:ea:46:b1:20:4d:24:a7:ec:7e:03:41:73:c4:
95:2d:36:7b:25:94:9e:bd:2b:37:a6:88:47:aa:3c:ce:df:67:
0b:54:e1:f1:11:9b:7b:97:c2:a9:cf:44:28:20:19:a5:cc:e5:
e7:57:52:a7:bf:ed:a0:2f:ba:3f:4f:54:af:2d:ad:71:da:e5:
58:38:f5:b6:cf:e8:15:f9:ee:cb:bb:fd:75:87:3e:1a:c5:3c:
9c:72:81:6a:87:10:5d:83:18:43:87:2a:13:bd:5a:40:3b:e5:
3f:63:92:4c:38:f3:bc:9b:af:d4:7c:74:8b:a7:1a:cd:44:6b:
51:1b:9e:47:9f:c3:ba:41:6d:a4:1f:1d:b2:d1:86:6e:3a:b3:
f7:25:1c:a5:f2:27:52:db:40:43:15:99:e2:a8:90:49:e7:48:
4b:db:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:08 2025 by rpki-client