Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: KyfcwIxkAZd6+lg92eDOSo43ThW+Cfz4WXs68tFzgEE=
Subject key identifier: 90:3F:DF:65:B3:3F:29:47:5F:FA:73:13:13:42:4C:F0:26:3D:DF:F3
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0198D4736CBB1EDDBF12F7D164B93FC42924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: EzfXppliezG/J/DhEQa9xs/l2TaQKqKvh/w1PZcuYSo=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6c:bb:1e:dd:bf:12:f7:d1:64:b9:3f:c4:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=903fdf65b33f29475ffa731313424cf0263ddff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:82:7c:20:f9:b0:97:8d:f2:7a:23:f2:da:
89:2d:f0:a6:48:f2:99:24:67:16:56:51:a0:9e:a5:
3c:04:e7:2c:66:d3:79:b5:ac:54:76:05:1a:03:0e:
90:c4:36:16:c8:0e:7a:d2:92:e2:c5:b0:b9:de:f4:
7b:75:8f:eb:ca:8f:79:dc:2a:b6:08:af:a0:ff:b7:
f0:e4:ef:d4:fb:ce:67:43:49:c1:d6:0c:45:f3:50:
37:ea:c0:ce:9d:b5:c7:49:81:54:22:e3:20:5d:7c:
95:c1:6d:0a:c5:e0:e2:3c:75:69:fc:99:09:29:2f:
20:44:b4:ef:a3:d1:2b:a8:10:f7:15:3a:10:46:65:
a6:dc:5c:2f:09:0e:b0:06:b3:88:bf:61:87:50:f9:
a9:64:59:e6:42:11:56:5b:8b:35:ce:7a:cf:e7:b3:
74:f2:cc:19:53:af:86:bb:d1:dd:07:e8:ef:79:29:
8e:c3:69:55:d9:bd:43:43:56:aa:18:92:b0:b3:6d:
bf:a2:f5:cb:4d:f2:78:b7:47:3d:a3:39:45:9f:da:
ed:bc:09:f8:ae:c8:60:00:32:48:42:11:09:98:f2:
0f:3f:6f:63:48:84:81:ca:c1:76:a0:c2:38:97:26:
93:ea:fa:dc:c1:ba:17:07:96:1f:50:98:2c:4a:be:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:DF:65:B3:3F:29:47:5F:FA:73:13:13:42:4C:F0:26:3D:DF:F3
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:95:16:1e:aa:0f:1d:03:6d:81:61:9a:35:14:43:71:4d:
13:97:0e:27:39:13:e5:57:e2:9e:5f:ab:a8:a2:a6:d6:93:3f:
2b:97:14:70:01:f6:bc:68:07:cd:f8:fa:55:97:f5:05:08:a7:
4f:18:ee:de:11:0b:ab:45:80:00:4b:04:0c:e6:9d:ed:22:b3:
ca:38:a0:e2:a8:51:05:72:e9:8c:02:71:a1:d5:f5:80:4f:64:
51:0a:02:2b:6a:1b:17:a4:0d:7e:5e:ff:ad:2c:9a:f0:70:49:
5c:fd:5e:53:40:3d:12:14:a0:d1:92:81:07:22:72:7e:f7:97:
0f:66:45:09:cb:10:26:83:1c:02:5e:68:f6:ad:fe:bf:cd:d8:
41:c6:94:67:6b:c4:2c:fa:af:9c:9c:f5:47:a6:ee:08:e4:89:
80:f0:16:c9:06:bc:a1:7e:25:91:88:5c:b9:8a:f7:0b:b1:d5:
df:a7:7c:11:ec:43:5f:7a:ac:07:4f:50:bd:c4:bc:96:27:9f:
52:e3:ca:09:b5:8f:c5:b0:fe:4f:f4:7f:15:69:9e:2f:4f:ce:
d7:10:45:2b:05:df:58:0d:ba:92:0d:42:e1:69:fb:52:ea:e9:
eb:e1:77:b7:a2:42:de:ac:82:1c:37:63:cc:48:56:ad:d2:d0:
31:f2:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:09 2025 by rpki-client