Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier: B++Elv1WqOSRk2RFrxeE/pioggE67p0TPGRdfJ7RZRw=
Subject key identifier: BB:08:0C:72:F2:03:0A:C4:1F:A6:BB:D6:5D:FB:59:A2:57:BA:4A:6F
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial: 0197BF6CBD5B76B9039624EDD56B4691DE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 06:01:04 +0000
Manifest this update: Mon 30 Jun 2025 06:01:04 +0000
Manifest next update: Tue 01 Jul 2025 06:01:04 +0000
Files and hashes: 1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: LPRgMqTcmIn7kYxh/W1qqg1IW9XtIRnuMyssW5Pkc8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:6c:bd:5b:76:b9:03:96:24:ed:d5:6b:46:91:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Validity
Not Before: Jun 30 06:01:04 2025 GMT
Not After : Jul 1 06:01:04 2025 GMT
Subject: CN=bb080c72f2030ac41fa6bbd65dfb59a257ba4a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:5f:10:5d:10:de:1f:90:fe:42:d9:d0:83:
ba:ea:f6:f8:58:ee:f1:16:74:b3:0f:66:91:41:35:
e4:6e:bb:eb:1f:df:52:96:08:41:b5:e1:f6:30:69:
4c:55:57:ad:a0:c8:d2:5b:36:81:78:4b:c7:6f:1b:
57:43:c8:46:0b:50:53:6d:06:43:25:a0:23:d8:b5:
77:70:7f:01:83:74:c8:24:74:a2:f9:87:0f:20:5c:
5f:cf:ef:2d:f9:2e:58:bf:29:5f:72:af:88:ae:29:
89:4a:0d:8f:15:3a:64:83:4d:36:01:2d:2a:17:19:
4f:bf:fb:ff:18:d4:96:d3:a5:b2:48:21:cb:ed:6a:
1d:94:6f:9b:90:a3:7d:66:5b:13:28:78:90:8d:94:
26:49:4f:87:ab:57:29:a3:19:13:a4:6e:e5:d2:03:
b7:25:f1:6f:92:19:8f:3f:ad:b2:61:53:bd:cc:13:
42:a4:3d:67:96:ad:05:36:f9:bc:dc:07:8b:b6:1d:
1a:e2:bb:fc:79:aa:7f:ec:7a:66:a7:e1:42:f0:58:
46:b7:b7:9d:a2:41:ee:39:65:2d:54:35:c9:7e:47:
05:e3:08:91:f1:0b:dc:c6:ad:71:11:55:fc:09:30:
00:04:e2:58:a6:30:35:77:bc:5f:02:ca:aa:8d:64:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:0C:72:F2:03:0A:C4:1F:A6:BB:D6:5D:FB:59:A2:57:BA:4A:6F
X509v3 Authority Key Identifier:
keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:49:e2:0e:91:49:90:d5:49:0f:c1:bb:92:63:8e:cb:2d:
72:6b:a6:b5:0a:4f:c0:d4:11:ab:f8:d3:35:ba:cc:0b:36:32:
52:26:1b:75:8a:ac:f9:c3:ba:c0:53:db:ce:54:c2:9f:78:52:
5d:cf:69:64:2b:fe:b9:56:74:43:3b:ce:e2:c1:2b:d7:2f:3c:
80:3d:af:a2:29:c8:28:a1:59:d8:d2:a0:5c:52:c1:10:9d:bb:
6d:45:db:33:ea:44:e8:fb:34:e6:2b:7e:03:eb:82:56:87:0d:
a9:af:15:81:fd:c7:f3:a7:4c:31:d8:63:7d:cf:1e:29:fc:97:
fe:80:a3:b9:09:21:d9:50:92:5d:5a:58:7e:25:e8:bc:10:b1:
6d:f6:96:e9:7f:e3:43:7f:73:f6:09:93:a4:45:49:79:db:14:
3e:39:7f:8c:80:36:30:e7:4c:e7:32:4d:2c:00:d2:2e:90:49:
2e:68:64:22:1e:48:a9:fe:b8:2b:54:98:9a:08:44:66:0b:39:
5d:b3:85:60:e2:be:1e:57:04:36:9d:3d:d1:4e:a6:0b:23:cb:
76:bd:e5:c1:22:87:b1:ad:91:16:a9:c4:60:4a:a9:a8:e6:f9:
ad:6e:0d:92:c3:73:34:22:1f:48:1d:4e:2a:e1:b1:ea:0c:28:
7f:8b:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:00:26 2025 by rpki-client