Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File: GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier: Nti5bTpQP8VxYAVdlEQ9DH3pYsJsASmrnYVTDi9E5Qw=
Subject key identifier: 6E:73:46:45:B4:E4:28:5B:C0:98:52:0D:A9:A8:6F:0E:99:8E:D2:2C
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 0199FCC6806D72BFA3FF146290C3E546CD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: TM/zvUImY5m2U9HQltcrPY26kkRg0lYv5FkcjmsYGII=)
2: QBagqPGH9MLRe8v6cA3uWwY6NVM.roa (hash: yxEIq1L1gWldcG6QnZu0HcP9v0cGJt+tqJuemcpe71U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:80:6d:72:bf:a3:ff:14:62:90:c3:e5:46:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=6e734645b4e4285bc098520da9a86f0e998ed22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:d9:96:74:bd:ee:50:c4:47:66:40:02:1a:
3b:cf:c5:e2:88:29:a0:a3:d4:b3:25:c2:a8:ab:11:
24:7b:24:f8:a1:af:ce:13:1f:28:72:f8:27:79:05:
95:ff:b3:a8:99:0d:fa:ed:85:c5:11:a2:f9:97:0a:
35:e1:b3:5a:26:ef:be:3f:6c:cb:25:ed:f8:76:05:
80:f9:30:4e:da:f1:bb:a1:5c:6a:d0:30:61:fb:9b:
6e:b1:12:c8:ac:4d:47:0f:27:3d:18:40:37:24:41:
e2:f1:27:01:00:98:88:17:48:0c:ee:e1:65:3c:79:
82:38:72:80:70:e6:e1:66:75:20:dc:68:b1:28:d7:
7b:5c:1e:82:cb:ff:2c:3d:b6:7e:be:e4:45:f5:e4:
fe:82:40:66:8b:59:8a:22:80:bc:66:8f:4d:a8:f7:
ef:53:0d:fa:e3:95:12:a2:55:cc:16:8b:90:d5:ff:
ad:66:40:d6:d6:5b:f1:3e:a8:2e:a3:d4:ce:7d:45:
a5:ae:38:36:35:c4:eb:f5:c0:d7:a5:83:5a:ae:0b:
80:79:35:6e:1c:8c:31:4e:47:6c:60:5b:e2:25:ab:
4e:9a:9a:89:b5:68:f4:7b:38:04:19:b4:b1:59:65:
a8:54:e5:13:be:72:fd:03:96:0b:7c:67:95:9c:26:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:46:45:B4:E4:28:5B:C0:98:52:0D:A9:A8:6F:0E:99:8E:D2:2C
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:63:08:0f:50:96:b4:93:46:c0:27:85:4d:18:ad:aa:19:
9d:dd:70:bb:ed:6b:d1:6e:84:f7:52:a9:25:04:64:90:e5:7f:
7e:7d:44:17:41:f2:89:35:9d:6b:41:e6:f2:a5:e6:b7:93:d1:
07:30:76:58:8e:da:1c:41:8f:96:00:aa:9e:03:e5:6b:9c:e4:
de:38:4a:f9:4c:91:63:25:e4:c0:97:e6:a4:70:d0:51:27:19:
f7:d4:84:97:c7:37:61:0c:fc:17:2e:c7:d6:4a:8a:c4:60:1c:
ca:1f:99:81:35:1a:43:ef:ef:f0:dd:30:19:7d:a5:db:d3:bc:
08:6e:bf:b4:c6:34:fb:4b:82:63:74:cb:be:8c:43:94:95:b0:
f4:07:f4:4d:f3:b4:33:aa:d7:0d:11:43:eb:5f:41:93:88:2f:
b7:fe:d5:5f:0b:11:ae:50:e0:a9:08:ea:75:fd:35:f8:a0:ba:
65:80:f6:ca:c9:13:45:cf:92:c3:ea:91:5b:a1:56:41:05:57:
6b:70:64:e9:16:a1:3a:d5:a0:fb:88:7f:66:12:f0:4a:39:20:
55:50:cd:bb:25:f6:e9:68:29:e8:eb:6f:f7:04:85:10:9f:73:
fc:56:72:b2:80:f2:82:19:8e:6d:b3:4a:ed:d3:46:da:00:9a:
5e:43:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:07 2025 by rpki-client