Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: YeOjnKUUjCuWQoZYYAmBck+QBGQobMmto95fAWOFVGA=
Subject key identifier: 16:16:0E:E1:46:F3:88:89:04:09:B5:13:A0:70:5F:D9:99:4E:9F:20
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0197B7B3719DF076B09A7EC31B7ADDFFD652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0A4C
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: p7EXN/o3b4HzAabUPVb332jfVo6X620ysmywsBU5QiA=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:71:9d:f0:76:b0:9a:7e:c3:1b:7a:dd:ff:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=16160ee146f388890409b513a0705fd9994e9f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:11:9e:f9:c9:69:61:5c:69:0b:a7:e4:71:
b6:69:2f:56:1c:ee:4f:51:a4:c3:78:48:19:08:0b:
d7:e0:54:3d:32:4f:5f:de:dd:87:c1:c4:20:f6:93:
4d:62:9a:d6:ed:84:ef:03:d5:3c:f1:19:17:74:9e:
40:37:d8:e0:aa:5f:c1:6e:1c:d9:9a:59:de:d2:6b:
98:f3:d8:94:09:d9:c9:00:c3:6f:07:03:f7:a1:8e:
79:64:f1:e2:22:78:22:94:17:85:b3:dc:d0:dc:06:
9c:c4:64:bc:29:26:d0:6a:40:96:a5:c6:7d:9c:b6:
bf:1e:dc:e1:2f:7b:84:97:8d:a5:2a:21:2c:af:84:
8c:66:03:91:c9:bb:fb:75:5e:28:b0:82:53:30:89:
06:cb:29:21:36:52:40:76:87:7a:a9:4b:bd:1c:ec:
03:e5:c6:98:ae:49:48:c2:11:e7:15:5c:a5:91:88:
7e:96:a9:3c:89:80:29:8e:96:df:9d:67:a1:1f:f7:
0d:a9:3b:ae:89:6f:e9:f4:45:d8:b1:92:69:0b:e6:
5a:c7:15:78:b4:9a:f8:b8:04:12:e7:e2:bc:72:e0:
88:d8:c7:be:f4:f7:1b:e6:48:4b:68:09:89:74:8a:
f0:cb:dd:69:0e:25:51:be:44:02:17:95:be:d8:a8:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:0E:E1:46:F3:88:89:04:09:B5:13:A0:70:5F:D9:99:4E:9F:20
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d0:3b:4f:3c:bc:02:94:b8:5f:af:cb:47:cc:a8:9f:55:6a:
1d:61:9b:68:6a:b5:52:f0:7f:0b:56:bf:6b:09:06:4f:46:59:
e9:85:c7:d6:53:11:d4:58:11:29:c8:2b:ee:82:1b:96:34:b9:
e9:7d:22:b9:48:61:91:8c:c2:a1:2d:db:81:8a:18:c9:ff:08:
8b:e6:b7:3e:30:5a:bd:bc:75:22:cf:cf:16:6c:6f:f7:1c:6e:
da:cf:9a:91:01:07:ea:a7:4e:9b:c7:b8:09:a9:45:c7:67:52:
18:c2:49:eb:b2:1f:51:ee:df:1b:4f:a2:4f:73:7b:8d:81:eb:
50:73:26:49:cb:01:21:1a:0e:c8:d3:5e:25:7e:a5:c9:11:15:
bb:8b:67:37:e1:08:63:f8:15:aa:f2:c7:11:7f:5b:fa:8d:5b:
56:0e:fb:fc:9a:60:83:3c:64:84:99:fa:ce:e8:37:73:49:ef:
11:a4:1f:30:55:a4:2b:55:58:ee:13:4e:7f:ae:c8:1b:de:17:
7e:48:9c:6d:91:7e:34:aa:80:a2:b0:cb:3f:98:45:4c:69:ed:
01:ec:67:41:cf:a6:5b:63:0a:9e:46:ad:70:57:dd:63:cf:07:
33:1d:9a:67:f2:15:ff:0a:99:9e:cb:3d:d0:12:bc:7b:b6:db:
17:34:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:36 2025 by rpki-client