Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: HNoLQbY+JT67yhOjDTdwqq02Qv0lV2Uh5U6nwka0DJQ=
Subject key identifier: 58:51:A8:A8:41:82:5B:E6:1F:7B:B3:0B:26:A3:A0:1E:3E:F3:3E:30
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 0197B6328F686FC5565C6FB94D90C0A93D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 01D4
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: KPCOol8YH4u0sAVQCCosGVBPf6BAzDhLsN9Bd/zeDpA=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8f:68:6f:c5:56:5c:6f:b9:4d:90:c0:a9:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=5851a8a841825be61f7bb30b26a3a01e3ef33e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:71:90:09:33:c1:03:3f:96:2f:87:21:19:
e8:9f:cc:95:c9:f4:87:86:f2:9a:f2:f0:29:fc:c7:
93:7e:90:b1:f9:2f:89:50:80:17:4e:f6:40:7d:c4:
82:23:b4:41:62:93:55:48:c3:df:3a:e7:a2:56:a9:
d1:3a:50:c6:9d:8a:69:49:2b:fe:7f:ce:b9:ae:4c:
31:c3:3d:5b:87:38:1b:29:77:47:08:12:c0:89:d0:
07:d4:c3:cd:d9:c9:98:69:a2:93:e7:75:05:ea:ca:
44:13:6c:bf:d1:2b:f0:f9:90:d0:b9:b1:b2:f2:5a:
f0:8d:45:ba:01:cc:39:f3:1e:dc:5e:1f:05:6a:50:
25:4f:e7:b8:2b:c4:ed:25:df:69:5e:ec:1d:ad:56:
a7:f8:ed:9f:19:2a:59:74:2a:1b:f3:3a:d9:0f:1d:
de:20:90:10:8a:9f:18:5b:ff:9b:f3:d2:15:43:a1:
47:51:8c:ad:1f:0b:b6:e7:98:b3:41:f8:3f:11:e0:
ca:80:dc:59:8f:ee:fe:02:a3:fe:f6:58:3f:b6:8b:
26:74:0e:87:5b:ae:ab:32:07:66:e1:ed:71:0e:0b:
ea:3b:5e:48:af:5d:b8:0e:bd:bd:3c:bb:5e:8f:2e:
aa:a1:76:64:1a:4c:22:a5:d8:90:bb:38:9e:c8:22:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:A8:A8:41:82:5B:E6:1F:7B:B3:0B:26:A3:A0:1E:3E:F3:3E:30
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9c:d1:d8:c6:c3:81:2a:de:21:f5:6f:0e:4a:e9:11:a9:bb:
b3:f8:da:6e:89:4d:b9:89:a1:0e:08:31:d8:f2:84:c7:62:12:
4c:4c:55:40:76:07:c9:b0:53:38:0e:f3:04:3d:c2:99:2c:d8:
6b:ab:e0:b7:5a:74:d7:9f:0f:3f:23:9c:8d:6d:6d:eb:a1:7e:
4c:5a:30:c9:0e:c4:80:fa:23:4d:47:5a:1f:a3:fb:11:cd:da:
6d:4a:6c:4f:57:57:3c:47:1a:71:70:f2:1b:8c:1b:5d:a9:f0:
21:28:65:ef:d1:d2:77:e7:6c:b9:71:03:22:71:44:d8:29:94:
1f:cc:d9:5e:4a:2f:14:cb:7f:d2:49:07:fd:8e:f8:e6:ae:54:
26:c0:8b:ba:7a:9f:61:55:e9:7b:df:29:fc:cf:29:fd:b1:9b:
c3:81:8d:42:f6:4c:e0:32:65:ff:62:a8:b0:29:fa:ea:1a:88:
79:94:fa:6f:3f:9f:c3:55:b2:39:8c:f5:52:c6:e4:4e:ba:f7:
1e:d0:4f:ff:5a:38:cc:98:c3:d9:a1:21:f3:ce:d5:b8:00:1d:
3d:9e:db:3e:ab:a0:6d:03:37:79:63:5f:42:d1:a2:77:0b:cc:
09:19:38:f0:1f:07:bb:37:72:a1:ff:17:2e:e3:f8:c5:3d:5b:
dc:ee:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:10 2025 by rpki-client