Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: 2EaY+pyDo2Q8YVQek/Jjogf1xxqVkm5K2TzRr/wMN2k=
Subject key identifier: 0B:E2:88:29:56:2A:FE:22:37:DA:55:48:EE:D6:7A:20:CF:20:E7:99
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0199FDD941074D1DAAB3276B149915C4B8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 069F
Signing time: Sun 19 Oct 2025 19:01:37 +0000
Manifest this update: Sun 19 Oct 2025 19:01:37 +0000
Manifest next update: Mon 20 Oct 2025 19:01:37 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: KUBgBOuS5Ie5puSOOkd8if9+7/dXC0p83ElYHXotupA=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:41:07:4d:1d:aa:b3:27:6b:14:99:15:c4:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Oct 19 19:01:37 2025 GMT
Not After : Oct 20 19:01:37 2025 GMT
Subject: CN=0be28829562afe2237da5548eed67a20cf20e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:e6:00:4d:72:ce:92:30:9b:2f:e3:b4:03:
d9:7b:10:0d:94:08:31:1e:7b:74:e4:48:8f:18:79:
23:c6:94:fe:3a:e7:76:fa:be:36:d0:23:15:d8:59:
f4:69:8b:df:82:a2:c8:62:6b:f5:36:fc:ba:20:4f:
6f:37:dc:b9:d4:3d:86:9f:41:75:42:64:b3:f6:92:
c4:1f:26:85:e9:88:08:67:47:7d:7d:5c:f4:6f:27:
af:e8:0d:49:a6:e9:25:b2:2c:04:af:b2:00:7f:58:
69:ee:67:13:bd:cf:9b:14:7f:f7:64:08:88:08:7f:
24:41:33:8e:8e:12:cd:88:c5:5d:33:f5:21:a1:dd:
c5:be:f0:4e:99:7e:96:e2:87:6c:3f:cc:32:93:d6:
68:35:6d:32:43:d3:a1:8b:02:25:22:99:4f:9c:1a:
81:0d:39:7e:87:fb:06:66:ed:96:2e:89:fa:59:f4:
0f:6e:d3:6f:ae:70:53:44:2b:cf:c8:df:86:3c:22:
90:f6:4f:4e:3a:d7:58:8b:96:cd:b7:fd:02:26:73:
4d:28:49:7e:50:4c:1e:06:5c:30:e9:8c:e9:e9:d7:
e4:2f:08:ba:56:51:28:6d:12:01:3b:85:93:5c:c7:
ae:4a:e5:33:07:c8:42:01:38:66:bf:36:f0:de:0a:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:88:29:56:2A:FE:22:37:DA:55:48:EE:D6:7A:20:CF:20:E7:99
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a1:35:b7:6c:09:a4:78:d4:98:ba:d8:5a:65:df:ed:2e:03:
5e:d0:37:7e:11:d7:45:05:03:f4:7c:1f:ee:3c:45:ad:50:e7:
2e:1e:5e:10:27:66:43:c3:a0:f1:42:27:81:60:ab:85:21:00:
52:81:19:a2:62:e1:37:47:b5:d8:d7:e9:f8:da:94:de:63:bc:
21:90:17:fe:0d:09:81:c5:fb:ba:72:38:eb:54:f8:8a:90:86:
b4:b7:7b:69:48:3b:79:9d:10:7c:2c:b1:b6:b0:6f:08:4e:43:
d3:da:25:2e:93:7c:e0:c6:7d:39:7a:fa:72:91:44:c9:6d:9d:
d9:ff:7d:98:3f:9d:f7:59:41:2c:f9:10:5e:23:d9:b6:c4:7a:
a0:88:27:de:ac:83:be:6c:77:86:fd:b1:76:ab:5e:dc:d7:58:
f8:aa:27:46:37:a1:84:a1:bb:f8:d1:61:64:d7:a9:ae:fa:a0:
88:e3:ef:98:01:ce:2b:d9:95:ee:4d:06:fa:75:cd:b1:9f:e0:
57:88:c9:c5:96:f0:ad:30:5e:b8:0c:2d:ba:db:b0:8c:01:db:
11:ad:f6:8e:d7:44:7c:b7:8b:74:c8:af:9d:f3:7b:8f:eb:68:
12:9f:ab:6e:ca:09:cc:a6:cd:81:53:e9:01:8f:25:56:52:00:
73:af:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:45 2025 by rpki-client