Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: WZSRoBgN01bBP1ffvZMB+JLoNY6Nk1rAC62Ln9p3K6Q=
Subject key identifier: 1E:CE:1F:08:23:45:AF:64:90:07:7B:C9:E2:F8:E4:B8:8D:72:6D:32
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0199FEEBB331A28894DE91DDA5FD7D547B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0B7A
Signing time: Mon 20 Oct 2025 00:01:23 +0000
Manifest this update: Mon 20 Oct 2025 00:01:23 +0000
Manifest next update: Tue 21 Oct 2025 00:01:23 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: 2ZXwBK1v/kEZUHn28iDUO3B3b5KxcwjsPPF1wreEQ8Q=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b3:31:a2:88:94:de:91:dd:a5:fd:7d:54:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Oct 20 00:01:23 2025 GMT
Not After : Oct 21 00:01:23 2025 GMT
Subject: CN=1ece1f082345af6490077bc9e2f8e4b88d726d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:aa:80:0a:2f:4a:d6:f3:4c:00:34:e4:99:
72:05:25:69:58:98:50:46:87:54:9c:44:5e:83:6f:
ed:17:ca:04:86:8f:fb:db:0c:02:a0:90:07:dd:81:
30:3c:8c:dc:c3:03:9b:ca:05:20:cd:e2:b6:52:c2:
a6:65:43:ca:26:4e:6b:79:93:c9:36:53:f0:c8:14:
1c:4e:5c:b8:9b:c0:9e:37:54:b3:bb:a1:71:b0:ac:
bc:c3:7c:6d:bc:ab:24:4f:96:a2:0f:13:39:11:db:
aa:ec:4c:50:09:7b:8d:fd:ff:1b:33:bd:a8:01:32:
c3:ca:33:b9:db:2c:de:36:1c:83:37:90:15:63:5c:
30:50:44:3f:39:61:84:3c:22:30:b5:9e:23:05:9c:
a3:83:03:d7:c9:64:11:c0:70:93:6d:82:01:3c:60:
a0:dd:5c:64:58:d5:97:2c:b5:8f:87:48:fa:f0:a4:
68:80:e9:65:b7:c4:7f:f9:dc:37:29:bb:4a:9a:5c:
2e:dc:26:20:18:3d:82:17:ca:e5:ad:ec:6f:8c:46:
fd:f8:8c:c8:ae:c2:36:08:01:de:d5:be:8c:3f:0c:
f5:44:3d:3d:41:fc:ea:da:0d:73:27:46:ed:9c:ea:
6a:1f:d2:f7:41:72:5c:0e:18:3c:0e:77:f2:0d:4a:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:1F:08:23:45:AF:64:90:07:7B:C9:E2:F8:E4:B8:8D:72:6D:32
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bc:62:53:04:ac:f2:88:c4:53:9d:49:a7:2d:7f:aa:a3:f7:
4d:0e:5c:9b:f3:76:eb:9b:de:b0:b7:9e:66:a5:d1:03:b4:14:
b0:4b:40:7d:a4:da:53:f2:f7:17:43:11:d0:db:61:bc:8f:aa:
bf:65:21:aa:3c:0c:00:16:dd:c1:7f:6d:8c:94:9d:56:70:e1:
5a:27:61:88:43:17:ca:e3:f2:0f:e3:f9:c3:8d:6f:30:5d:7e:
0b:18:e7:a3:d6:2b:57:21:9d:f6:93:af:d2:0c:ae:be:2c:40:
c1:97:0e:16:34:19:2f:53:91:9f:1d:72:7c:01:e4:00:c4:73:
0e:03:bf:01:56:54:78:39:47:18:01:3c:dd:1b:3d:a9:bd:ed:
1d:c9:b1:0b:0d:b1:b8:d4:f7:c6:c0:15:c6:57:b5:d0:87:a0:
1c:ee:4a:ef:a6:ee:58:03:cd:e8:e0:89:ff:aa:62:7c:eb:4d:
1d:42:90:1d:df:7b:c4:df:47:cc:a8:06:18:41:3f:47:2c:57:
c4:36:12:4d:2b:8c:4e:ad:ac:42:4a:83:c4:34:b4:f7:22:62:
2f:b3:6b:e4:7b:1b:4a:be:e8:45:24:02:58:85:f6:f5:ea:7f:
25:b5:3a:fb:99:42:55:2f:7a:f0:e3:46:28:46:29:82:ac:c2:
0b:46:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:59:39 2025 by rpki-client