Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: fSCs7OQZlItf5uWJr/5h1HDlIkCFwQZD6HyO6HUBFeo=
Subject key identifier: ED:7C:95:59:79:5A:F0:FF:52:E0:8D:A6:7F:DD:56:05:91:A4:34:4D
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0197B6A06BF3F0062E043F886CB752454147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: ccqCfu56TM0XM4DRGBbyfBBGGlJmovlwcZhKyYMBRh8=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6b:f3:f0:06:2e:04:3f:88:6c:b7:52:45:41:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=ed7c9559795af0ff52e08da67fdd560591a4344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:b1:64:66:81:5c:74:21:bf:d0:46:3a:d8:
7b:06:f4:cb:dc:76:3a:a1:07:1f:f1:94:86:1c:45:
72:53:90:6e:3e:24:7d:8d:8c:28:83:d5:1d:d4:91:
1b:b3:cf:1d:62:9c:00:5c:3e:df:06:b1:1e:14:cd:
24:c2:53:ed:c7:14:bf:fd:e3:df:58:e8:7c:02:d8:
dd:01:7e:70:5f:c4:f5:a4:7c:1d:61:68:54:91:2c:
f4:c5:40:b4:dc:76:5f:5a:8f:f7:f8:d7:ff:d4:95:
16:84:a7:11:c0:05:05:e8:0f:06:c1:65:f4:c3:ee:
a9:0d:f1:c2:d7:86:86:2c:28:15:f8:b5:64:9e:9f:
ae:e6:69:91:d7:41:c2:d8:06:16:91:03:e1:fa:8b:
1f:8d:2f:ff:ed:57:76:50:d5:a1:c5:8d:2d:ad:d0:
9a:9d:f5:75:c9:e8:73:1a:2a:9f:51:2c:a5:cb:7d:
a2:56:0a:d4:72:85:27:51:0a:1c:ef:f6:4d:8a:2f:
e9:05:51:3f:e4:7b:14:31:6c:80:61:30:78:c4:cf:
82:f9:99:76:b5:d0:dd:e1:e7:1e:f8:db:44:bd:e0:
5d:3f:44:46:71:77:15:f5:3e:f5:0d:5a:20:7e:9c:
92:02:91:8a:b3:79:2e:68:ac:cb:6a:59:ee:9a:7e:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:95:59:79:5A:F0:FF:52:E0:8D:A6:7F:DD:56:05:91:A4:34:4D
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7e:9d:de:40:c4:9b:58:27:f2:de:6f:68:5a:b0:c1:f1:28:
fe:35:d0:a3:62:8e:00:94:a4:1c:f6:d4:3a:ce:23:52:c6:c3:
f1:c9:24:0c:08:38:16:05:d6:48:1d:7e:07:78:0b:94:29:6e:
cb:20:9b:02:6e:a5:7c:f8:a5:ef:a4:ab:31:1d:41:47:a9:f7:
2a:e2:de:ea:3f:6b:82:b5:2d:62:f1:d2:9c:90:ac:63:e2:d1:
4f:02:52:2b:a2:84:71:03:57:05:da:54:3b:32:28:5a:26:0d:
a7:2d:22:ef:9d:b8:05:b4:4a:c8:6b:2f:a1:39:62:40:55:18:
d8:0f:54:68:fe:31:33:b7:0a:36:d8:d9:88:d9:2c:d4:40:14:
7c:bd:e7:8f:1c:6b:3d:76:a4:ca:d5:f6:e1:b8:ff:2e:bc:bf:
21:64:ef:3e:32:03:c6:ea:5c:55:51:56:52:b8:09:55:bc:f3:
66:a2:18:d7:05:fc:70:36:01:0b:e4:20:ff:b8:64:72:7f:5f:
ac:9f:ec:61:1e:37:d2:a3:5b:4c:e9:0e:52:d3:64:c1:ac:32:
da:6b:a3:16:2a:41:ea:7b:d4:24:6b:aa:ed:d5:b4:db:fc:a1:
69:cb:08:a8:53:81:9c:ea:f7:d1:a9:32:bf:19:84:4e:b8:cd:
91:11:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:54 2025 by rpki-client