Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: D0uDMl9TbCmONmFCSBYAplxV4JvmzQ9lxSd58/gUUg8=
Subject key identifier: 0B:00:88:1A:A1:6A:DB:14:ED:87:F2:FB:4A:E7:54:7D:94:DD:7B:9D
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 0199FBEB6056573465CF0C16F21486B2A5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 1334
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: Z8bwxIPI2xCzQYu38AqL97wSSgxfy8F/vGw2qz+HhTk=)
2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:60:56:57:34:65:cf:0c:16:f2:14:86:b2:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=0b00881aa16adb14ed87f2fb4ae7547d94dd7b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:03:8b:26:1e:cd:a7:01:0b:02:2b:e8:ad:
09:df:6c:fa:59:3b:cf:b8:bf:c4:92:72:69:44:ac:
84:9e:63:1c:2a:a6:e8:ff:4d:ce:b6:15:6e:12:55:
87:40:2f:90:6a:d3:75:17:b8:6a:3d:b3:67:c9:41:
77:5f:aa:95:0e:ac:98:84:07:f2:eb:b8:3c:c0:17:
55:8b:92:f9:3f:ce:01:66:b9:4f:79:36:f5:46:5f:
dc:26:e4:0a:19:ac:38:1e:07:14:c0:7d:5b:c9:48:
59:25:18:15:c2:63:cf:6f:28:cf:bf:02:2f:f2:aa:
c2:4b:81:35:da:f5:ee:e5:9a:52:c8:55:ac:fd:66:
c4:a1:a6:ba:40:5f:72:26:f7:b1:71:db:79:fe:ec:
a5:77:ba:c2:1f:f1:e1:da:11:da:40:c6:f9:c9:10:
d1:91:89:1b:b3:b8:e7:fd:6c:b5:28:46:b6:57:eb:
f4:5f:4e:36:dd:b9:5a:20:3e:1e:88:a8:eb:11:f8:
c0:c9:e3:e0:f2:1a:e4:a4:c9:d0:7a:47:64:dc:c6:
c4:8f:64:13:42:e2:50:a9:be:da:17:d6:fc:b1:41:
23:6b:43:bc:74:97:58:5d:42:27:d5:c1:bf:76:f7:
04:2c:90:ce:7e:f0:8b:61:67:b9:4e:75:26:f4:5c:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:88:1A:A1:6A:DB:14:ED:87:F2:FB:4A:E7:54:7D:94:DD:7B:9D
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:20:69:65:22:a9:ba:03:81:f5:f3:72:a5:5d:d2:91:ad:
c6:a6:aa:e0:94:f3:77:9f:d7:ba:86:40:e5:de:0b:2a:9e:d1:
89:17:eb:e1:e7:03:23:78:fe:51:64:78:69:fa:29:ca:c5:f8:
5d:d9:73:0b:b9:2c:cc:44:c7:82:89:ee:d9:42:33:98:08:e5:
1f:f9:92:49:56:50:26:c3:e0:dd:57:65:80:f2:68:ce:83:87:
26:62:4d:ab:61:c7:73:17:be:29:7f:0f:1c:70:b0:cb:48:16:
27:6a:ec:0e:79:1d:b5:5a:54:3b:04:86:20:05:50:6b:20:59:
56:cc:bc:fb:28:3b:19:bd:26:05:70:de:2d:90:c1:af:18:d7:
cf:07:3a:a4:35:59:91:61:c4:86:e7:c8:40:1d:6a:f1:64:1a:
c2:0f:e5:0e:2c:3d:be:3d:ed:81:4a:1c:08:99:e4:c3:e9:ca:
9d:a6:4b:62:d8:3a:bd:ef:55:b6:05:54:d7:f3:4b:25:ab:82:
bc:e7:08:20:a4:99:58:11:33:02:00:87:65:bc:5b:ae:35:72:
82:8b:7a:88:ff:e2:a5:af:49:b0:cc:7b:34:67:fe:b8:16:93:
7d:d9:86:67:36:f4:25:b1:61:f1:40:4b:2a:38:ff:c9:11:10:
ea:09:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:55 2025 by rpki-client