Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier: 6AyKZ9kzDEnG9lbgp1Ydqn6zoqK0S/OICKrQ+1DmkXM=
Subject key identifier: EA:82:D8:EF:14:EE:31:8A:4F:7A:08:2F:44:41:42:DE:32:22:D8:17
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial: 0198D583695C3FAD49F7771EA3753C3E0D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: 2Inyd3hzy+ysTxcs34rT1Q1GgAFELybWghg2cus7ujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:69:5c:3f:ad:49:f7:77:1e:a3:75:3c:3e:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=ea82d8ef14ee318a4f7a082f444142de3222d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:1f:95:bd:65:e9:08:b9:60:00:08:ad:31:
b8:ce:ee:25:d3:8c:f4:9b:06:c3:c7:10:88:eb:b9:
e2:ee:e4:d9:22:c5:80:ed:bb:45:a6:da:34:a1:63:
32:a1:d0:32:3e:12:d6:e1:73:c9:24:96:12:f9:9d:
b3:93:3b:96:39:17:35:2a:72:25:52:52:6f:4a:46:
e4:5a:db:18:f3:03:bc:48:e3:69:ba:85:af:45:5b:
46:d2:15:49:f6:a0:98:20:ee:05:fa:56:3e:63:7b:
91:8b:5a:44:e0:b9:52:6c:39:dd:d2:66:b0:a3:03:
90:fc:b8:4c:88:b0:42:c6:01:ab:81:13:ed:f8:b1:
c9:60:58:ea:39:45:7b:a4:ab:24:d9:16:f1:08:9f:
8f:74:93:1f:89:30:b3:d6:af:ae:28:15:81:56:63:
9f:1d:41:f2:10:a4:f0:f3:44:90:20:31:88:22:8c:
1c:d0:64:65:13:fe:83:cb:e0:ce:56:31:03:31:86:
6c:9c:07:28:28:a0:ed:24:1f:62:1e:18:0e:33:ad:
c8:27:40:91:60:d2:57:47:38:d1:fb:5d:c4:e4:f2:
01:c5:6b:2d:ed:e0:73:a7:09:d9:30:08:d5:38:89:
1b:0f:59:05:c9:a4:63:48:16:8c:12:fb:31:e9:6d:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:D8:EF:14:EE:31:8A:4F:7A:08:2F:44:41:42:DE:32:22:D8:17
X509v3 Authority Key Identifier:
keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c8:08:4b:9a:3c:5e:7e:b5:d3:fb:f5:8d:d8:9a:a9:e8:c9:
75:f6:00:76:4d:26:55:16:11:45:c3:48:77:e8:c8:d3:46:67:
5c:82:25:80:d7:9d:61:0f:9f:06:15:69:9a:d4:7c:5c:22:3b:
fd:fa:6d:fe:64:20:c8:49:ec:5e:29:18:ec:b7:da:6e:22:63:
89:51:42:39:51:d1:70:b8:47:db:e1:40:ce:41:1e:45:dc:4b:
b2:2a:d3:96:ad:aa:ac:e7:dc:88:9f:29:fe:25:88:ac:f2:f2:
e2:e0:89:ed:28:d9:2e:4b:6d:1b:8e:c7:ce:61:dd:75:f9:78:
2e:9d:2e:b3:50:42:21:c3:97:bd:04:85:4f:51:29:e6:5d:4f:
3b:80:b6:bf:89:c4:55:29:cd:1b:3b:53:04:6e:fc:b2:a4:71:
d9:f5:c9:d2:be:dd:ac:52:61:97:f2:40:27:91:7b:88:93:98:
c8:58:33:41:28:57:fc:28:ea:f8:79:8f:fd:75:38:97:7b:33:
33:ce:c6:66:0d:6a:62:00:52:8f:05:1f:fd:b1:02:fb:4a:c5:
e5:b0:9f:ac:b8:27:3c:65:cb:73:db:8b:39:a4:cf:20:bb:d8:
c1:bf:80:00:fa:dd:f5:c7:64:bd:99:66:98:1d:27:dc:89:c5:
69:d9:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:58 2025 by rpki-client