Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: oD3Lsqo13D03fzl5sb0Ylryk7ZEWakv+ACp202nBLfk=
Subject key identifier: 27:B3:E1:1C:18:CD:0C:F0:E7:1A:6D:64:4D:3F:94:21:14:F8:38:65
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 0197B6D7B696BB880473AF49EE182195D96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: I5j4b51V81gqNjNMjrIFG14tbY6trSMFpDkwAIUakZE=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b6:96:bb:88:04:73:af:49:ee:18:21:95:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=27b3e11c18cd0cf0e71a6d644d3f942114f83865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:7e:99:91:2c:d2:8a:6e:e1:9c:ef:23:c8:
f6:77:7f:39:ec:f2:0b:02:84:b2:22:42:35:64:e2:
df:13:12:e4:14:38:cc:0f:21:a3:48:a4:d8:cc:0b:
80:1c:ce:74:28:f7:d4:c1:08:5e:c5:2e:0b:b1:47:
8e:99:16:75:29:44:e1:2f:d9:4f:c7:d0:4a:17:67:
2f:58:08:c3:24:b7:33:b6:86:80:02:57:2c:42:fc:
85:ae:e5:ae:c1:a9:1a:ca:3a:da:58:7b:0c:1f:ad:
0f:b3:cc:35:14:63:d3:e9:33:c2:16:6e:7f:ca:75:
cb:59:1d:ab:72:eb:d0:3d:32:6f:92:0d:a1:44:5e:
cd:54:8d:c0:f3:a5:f5:9b:40:57:d7:a3:da:62:9c:
03:c5:59:d9:70:08:4b:a0:2f:b5:48:20:26:4d:98:
06:28:a0:11:93:2c:66:1b:f2:85:66:80:91:26:c6:
f6:32:08:38:0e:ed:66:60:59:73:44:62:ac:1a:a7:
5a:6b:f3:b1:39:f7:4c:b3:e7:48:51:5c:77:1e:83:
c0:53:21:34:40:1a:6a:31:f8:4f:b4:61:08:77:c2:
17:76:24:42:3c:7d:71:93:73:c1:f3:e1:53:e0:b1:
5c:46:b8:6e:6f:d1:15:d0:64:19:cc:65:90:8a:8c:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:E1:1C:18:CD:0C:F0:E7:1A:6D:64:4D:3F:94:21:14:F8:38:65
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:37:27:f6:55:e2:9e:a2:b5:70:1d:ca:ca:37:60:b6:85:
c2:41:37:b5:43:fb:86:56:82:27:59:d4:58:fa:de:4a:e6:c3:
71:d8:7c:03:9b:6a:ac:ca:2e:32:15:39:7d:46:0c:86:83:45:
4e:b9:8f:28:95:d9:89:70:4e:62:d0:d6:11:e9:02:72:54:1c:
7e:ea:50:1a:40:01:75:a5:69:e5:6b:98:41:12:07:0c:8e:e2:
7b:ff:6e:87:f7:e7:08:ad:ef:40:d2:ed:c1:db:6b:a8:6b:29:
b2:44:40:f3:39:1c:dd:9f:d4:0d:56:b8:cf:bc:9a:d4:72:21:
c4:1f:76:02:19:1c:3d:0a:47:a9:8f:74:1d:21:84:5c:51:d1:
f1:84:09:fb:3f:15:72:8c:bb:6a:39:ab:b4:4d:e0:fc:32:ee:
81:82:5b:fd:14:7b:c1:a3:ba:f5:51:d5:ee:6c:bb:91:80:e0:
be:da:d6:bd:f6:e0:35:10:2f:50:86:1b:94:7f:67:07:8a:e6:
8a:97:ae:38:de:cb:26:d9:5e:b5:49:2d:7d:dd:da:c4:ff:54:
c1:af:ad:35:68:7c:69:5f:38:aa:5a:ef:16:2b:74:b1:a7:5c:
eb:f2:1f:0c:be:e2:13:21:e6:8c:27:10:a9:a8:81:32:08:e1:
af:28:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:44 2025 by rpki-client