Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: +83VnwE75/+oaKlTZeThiTSg4TmnDoTsXM+TH2WRe8c=
Subject key identifier: 6E:F8:7F:AF:99:74:F2:3D:CE:C5:47:04:DB:2C:8E:3D:84:13:67:BB
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0196B3D95E21498BB84C38B05B52E77211E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 04EB
Signing time: Fri 09 May 2025 07:01:29 +0000
Manifest this update: Fri 09 May 2025 07:01:29 +0000
Manifest next update: Sat 10 May 2025 07:01:29 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: /STcU8nnk2z8Z9SftCNYygG9WRQbrK6S+0F0Qfm5YO4=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:5e:21:49:8b:b8:4c:38:b0:5b:52:e7:72:11:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: May 9 07:01:29 2025 GMT
Not After : May 10 07:01:29 2025 GMT
Subject: CN=6ef87faf9974f23dcec54704db2c8e3d841367bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:4e:43:4e:11:29:b2:3c:4a:61:9c:ae:58:
50:2e:43:a2:56:5b:55:8d:bb:cc:8d:c4:9d:43:c4:
c0:07:1d:99:66:a4:aa:bc:63:d6:3f:92:25:c4:4c:
11:d8:75:38:ab:50:84:e7:b6:73:99:e5:43:5b:f4:
b8:8a:6c:6a:2c:e4:6d:9c:a1:95:0c:93:b3:1c:d8:
2d:a9:9d:42:9a:93:ca:6f:bc:90:19:4f:ca:8c:85:
51:a4:f3:79:5e:12:79:e3:f1:c0:1a:6c:02:29:23:
25:46:45:56:f2:b3:63:a1:72:1f:1d:e3:d2:42:03:
3f:32:31:a7:a2:63:31:84:63:bf:cc:a5:fa:f4:c3:
9c:7f:f0:00:fa:6f:f9:1c:0b:b5:d0:67:ee:a2:1d:
f9:07:e9:46:be:c1:9b:0c:fe:29:1f:7d:71:87:f1:
79:77:49:e3:89:75:a0:41:91:c3:08:64:94:8b:4c:
7e:4d:2a:3a:fe:c8:17:8f:a7:bc:ae:7f:54:df:cf:
83:d2:11:0c:91:13:38:95:ad:62:e8:5a:ab:50:1d:
02:f3:59:8f:a3:e5:b2:41:ba:bf:a3:45:fb:42:15:
2e:af:e5:7d:db:22:0c:07:e1:e3:db:7e:26:6a:62:
97:7c:75:7f:8b:71:fd:1a:ac:8f:e8:71:09:fe:ed:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:7F:AF:99:74:F2:3D:CE:C5:47:04:DB:2C:8E:3D:84:13:67:BB
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:de:1d:d3:b8:a1:7d:ca:3f:62:25:9c:6e:9b:b3:f4:ad:
60:a4:49:c8:50:6f:e7:9d:f8:00:73:3f:93:1a:64:c6:33:86:
84:63:cd:c4:02:3e:1a:d7:38:23:ba:44:37:06:a8:3d:b2:55:
8e:2f:c4:12:29:92:cf:28:04:64:82:0f:b9:ec:80:22:62:fa:
56:6f:d9:61:4a:ed:9e:4e:9a:dc:0e:c6:8a:9a:1e:53:36:60:
46:cd:04:97:d8:6e:ae:f8:22:b5:1e:81:06:8b:a4:f3:71:be:
9d:82:48:9b:ff:81:f7:7f:e6:aa:58:95:dd:df:e5:50:dd:c5:
a2:c4:c1:f1:a1:c2:4f:22:c7:d6:fc:fb:78:4d:24:2e:c4:f9:
cc:e8:93:6c:7e:16:5e:93:d7:b0:0c:c0:b0:88:49:e7:ab:62:
07:ab:68:2a:4d:f8:97:a5:6d:7f:f6:14:06:1a:78:12:6a:7b:
76:e9:1b:fd:df:fe:80:d2:9d:8b:7a:72:ba:47:43:e8:fc:92:
82:e7:2b:1b:01:d3:29:31:3b:54:4b:09:e2:4d:cc:31:f7:1f:
51:0d:be:ab:fe:cd:d3:f9:ae:db:71:cf:80:99:38:91:2d:59:
97:9f:cb:34:ab:52:f8:35:34:ce:c0:f5:ad:4d:23:37:5b:c2:
e9:49:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:03:53 2025 by rpki-client