Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: TP56jpOMhBY08RKyDEprUkD0Anz4skIjJm1tcELYxLg=
Subject key identifier: 3E:78:2B:E2:7C:0F:75:23:BE:3C:E6:C6:44:8D:79:0B:56:18:78:7F
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 0198D65F0DB3E64612EDFF5E670C08A3502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 129C
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: M93HV6Y+5FDa1wFWROg4pdsCocyKfCd94tJDAmWuJ2Y=)
2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0d:b3:e6:46:12:ed:ff:5e:67:0c:08:a3:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=3e782be27c0f7523be3ce6c6448d790b5618787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:64:13:ab:fa:bc:1d:74:49:30:c4:0b:90:
ce:46:14:e8:13:57:d7:76:af:ef:05:34:8f:e7:5c:
0f:a8:87:2a:d5:df:93:4f:5c:27:e9:9c:37:45:e7:
be:3a:c6:89:55:3b:14:3b:68:2f:e8:49:83:df:79:
d1:d2:8d:b2:ce:fb:9f:05:bb:0d:0c:f7:c2:d3:c4:
5a:b2:ce:d7:b2:5e:8f:16:a9:39:80:bf:ad:74:d8:
cf:fc:0b:00:62:4e:57:22:cb:74:cc:d9:01:c4:7f:
1f:6f:2a:a3:f6:9a:3a:61:a4:c9:fe:28:06:51:e1:
8d:a3:e2:4e:e2:2b:43:ba:50:e1:bf:b5:7a:fa:b5:
3a:a8:fe:74:90:e3:f2:35:12:bf:1e:f5:87:4d:6e:
ec:fb:99:5d:26:ae:fd:58:d9:c5:de:ca:0e:4c:73:
6b:eb:5e:6f:31:b1:e6:bb:ac:f9:11:fc:80:5f:1b:
a6:db:aa:4e:0a:19:55:86:c7:de:bd:e3:3e:72:d7:
87:7d:10:39:0c:12:2c:92:2c:78:d7:67:ec:b5:cc:
9e:5c:b9:2d:74:0f:36:13:33:fc:67:f9:12:6a:84:
ab:a1:89:e0:d0:ac:f9:08:bf:0d:a1:78:98:b2:65:
74:9c:9c:2b:9c:bc:e8:4d:7e:79:be:6e:67:13:4b:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:2B:E2:7C:0F:75:23:BE:3C:E6:C6:44:8D:79:0B:56:18:78:7F
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:c3:6d:a1:21:e2:d7:0e:6b:5f:ff:e2:e1:68:00:98:8e:
dd:8c:fd:52:40:69:50:8e:a9:85:ed:12:93:b1:32:b2:e3:c8:
09:7d:14:53:c6:1c:4b:2d:0b:7a:35:72:31:9d:96:44:f5:20:
46:29:08:be:0c:ed:1c:0c:c4:b5:6a:ef:0b:c4:eb:02:18:f1:
48:f2:8f:fa:a6:81:39:e0:c2:2e:ca:22:73:11:06:63:7f:83:
55:2c:ee:58:2b:85:fb:af:20:c0:9f:f5:4d:43:53:1e:0c:1f:
82:11:05:fe:de:31:93:cb:cb:71:8f:1a:c6:4c:8b:3a:24:11:
fc:d7:9c:7d:35:cc:1a:46:b7:c9:83:56:f3:ce:fa:df:34:35:
1f:af:61:06:9a:bf:44:66:f2:3f:9a:7c:91:7a:75:65:00:69:
81:12:c1:94:a8:b4:02:9a:da:6f:ef:c7:a5:19:f6:c8:d5:b8:
1d:c6:76:97:4c:2e:3f:c4:f6:fd:e3:95:6f:ae:3c:c6:80:24:
f1:74:5b:65:2c:82:f6:95:50:b0:8b:77:d5:fb:a9:88:f0:32:
f5:da:df:34:5c:d5:90:7b:fe:78:c5:9d:4d:85:54:a1:85:37:
d5:40:21:f9:1d:3d:a7:05:f5:99:28:dc:1b:85:4f:08:b4:88:
84:a2:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:46 2025 by rpki-client