Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: Nh3d953iCHw7hRZpCCHbind+59drqWtzXo7/UboJJsY=
Subject key identifier: F3:3D:C6:D5:04:95:2D:C2:40:BF:83:FD:FD:8B:71:65:62:55:9A:95
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 019A003580E5561D785A759D484DC1A44656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 157E
Signing time: Mon 20 Oct 2025 06:01:37 +0000
Manifest this update: Mon 20 Oct 2025 06:01:37 +0000
Manifest next update: Tue 21 Oct 2025 06:01:37 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: ere2SCA0OPUy01dIBKjEbxbkF1ytYNIV3V3UWcJ1urE=)
2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:80:e5:56:1d:78:5a:75:9d:48:4d:c1:a4:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Oct 20 06:01:37 2025 GMT
Not After : Oct 21 06:01:37 2025 GMT
Subject: CN=f33dc6d504952dc240bf83fdfd8b716562559a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:ee:1c:9b:b8:1a:d5:ce:d7:0c:86:51:70:
61:f6:d2:30:54:8b:01:f5:0d:be:40:39:7e:8a:b4:
1b:1e:3d:48:2b:16:d2:24:b0:1c:e5:e2:5a:03:29:
72:b4:cc:82:0b:00:25:4e:08:26:a7:18:1b:34:03:
bf:b9:22:a7:e6:df:7a:68:70:47:ba:33:01:58:27:
04:4d:b6:51:88:37:66:f7:01:40:1d:31:40:14:16:
3f:30:32:4f:0e:fa:2d:4d:78:bb:e5:35:77:9d:45:
50:e8:5b:f9:c0:91:d1:4b:5e:2f:8c:76:7a:37:a7:
6f:5c:29:c7:d7:a4:89:bd:37:52:c6:bd:4e:ca:a8:
35:0b:78:77:57:2c:e0:88:22:99:37:1f:39:8f:15:
9d:35:83:a0:46:41:f8:bb:7f:68:c1:6e:c1:d3:a1:
60:da:72:9c:87:71:19:79:97:75:ff:c5:90:17:25:
3c:2c:94:4e:a5:04:fb:af:ed:6d:e3:64:5f:cf:3b:
8d:5a:03:48:d8:f1:a7:6c:18:2d:5e:e6:0c:10:88:
05:cf:cb:50:49:bd:ad:af:1e:31:63:32:38:59:f0:
2f:6f:d2:1c:90:9a:c5:8c:c7:3d:40:82:3c:71:a6:
c3:d0:a6:eb:bf:2d:f6:88:26:ce:35:08:74:41:3c:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:C6:D5:04:95:2D:C2:40:BF:83:FD:FD:8B:71:65:62:55:9A:95
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:3e:5d:2c:a0:2e:76:95:94:7a:d2:48:aa:6a:d7:b0:2c:
69:10:88:00:59:8f:ce:5b:94:c6:ca:04:ee:4a:f0:5c:84:f8:
82:ed:d2:cc:fe:f2:fa:79:ee:86:c9:a0:18:19:31:f2:43:88:
55:3e:c3:6e:19:3a:06:61:be:20:9c:1b:5f:03:fa:34:32:fe:
ba:d8:77:41:b9:20:ea:f0:20:8c:15:c4:f7:64:3c:8f:d7:c3:
6f:0a:0f:79:ef:63:fe:dc:b7:01:d5:07:80:25:8e:40:ce:e6:
a2:01:02:61:d3:ad:ae:6b:76:70:ee:b7:09:c0:69:0d:93:aa:
57:89:c8:49:e1:32:23:35:71:3c:41:df:d0:26:46:fb:53:bd:
24:ea:6c:64:bb:d1:bd:4f:1d:86:84:bd:57:65:6f:b9:c3:ca:
bf:3c:0b:30:a0:01:d5:f8:90:2c:75:77:12:7d:87:5b:f6:32:
a0:3f:4d:49:7c:a4:00:f6:09:01:b7:73:d2:6c:bb:20:c3:e5:
58:f9:80:92:da:e9:8a:f8:64:3b:e3:d6:e7:83:14:20:2b:ab:
ea:4f:81:82:e3:a6:90:d1:7a:7e:95:32:ab:8c:47:59:72:08:
16:c1:fd:27:ab:0c:f9:78:8b:77:92:9b:c4:c4:39:68:04:38:
7b:23:6e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANYDlVh14WnWdSE3BpEZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODhhZjkzODQ1YmQyNTM4NjQ1MmRiZGZhYTAyMTZlMTNj
YWY4YzcwHhcNMjUxMDIwMDYwMTM3WhcNMjUxMDIxMDYwMTM3WjAzMTEwLwYDVQQD
EyhmMzNkYzZkNTA0OTUyZGMyNDBiZjgzZmRmZDhiNzE2NTYyNTU5YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTDuHJu4GtXO1wyGUXBh9tIwVIsB
9Q2+QDl+irQbHj1IKxbSJLAc5eJaAylytMyCCwAlTggmpxgbNAO/uSKn5t96aHBH
ujMBWCcETbZRiDdm9wFAHTFAFBY/MDJPDvotTXi75TV3nUVQ6Fv5wJHRS14vjHZ6
N6dvXCnH16SJvTdSxr1Oyqg1C3h3VyzgiCKZNx85jxWdNYOgRkH4u39owW7B06Fg
2nKch3EZeZd1/8WQFyU8LJROpQT7r+1t42RfzzuNWgNI2PGnbBgtXuYMEIgFz8tQ
Sb2trx4xYzI4WfAvb9IckJrFjMc9QII8cabD0Kbrvy32iCbONQh0QTyvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM9xtUElS3CQL+D/f2LcWViVZqVMB8GA1UdIwQY
MBaAFBqIr5OEW9JThkUtvfqgIW4TyvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUt
NWY5ZjBhYzBmYWU3LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUtNWY5ZjBhYzBmYWU3
LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXM+XSyg
LnaVlHrSSKpq17AsaRCIAFmPzluUxsoE7krwXIT4gu3SzP7y+nnuhsmgGBkx8kOI
VT7Dbhk6BmG+IJwbXwP6NDL+uth3Qbkg6vAgjBXE92Q8j9fDbwoPee9j/ty3AdUH
gCWOQM7mogECYdOtrmt2cO63CcBpDZOqV4nISeEyIzVxPEHf0CZG+1O9JOpsZLvR
vU8dhoS9V2VvucPKvzwLMKAB1fiQLHV3En2HW/YyoD9NSXykAPYJAbdz0my7IMPl
WPmAktrpivhkO+PW54MUICur6k+BguOmkNF6fpUyq4xHWXIIFsH9J6sM+XiLd5Kb
xMQ5aAQ4eyNuow==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:46 2025 by rpki-client