Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier: BAT8ygZz4tZRZg6hLbeY1jpcizYTez77P5UUQjlKs2E=
Subject key identifier: D2:0D:C1:93:C4:54:02:E3:C4:D8:E5:CE:6D:D6:51:9C:18:B2:01:00
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 0199FFC8A40D5E6CCCDE605B4772980B87D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:43 +0000
Manifest this update: Mon 20 Oct 2025 04:02:43 +0000
Manifest next update: Tue 21 Oct 2025 04:02:43 +0000
Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: pUa0gd3KA1Eoz571qsetza3z8DZWgEQGb6UHAiiStLk=)
2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:a4:0d:5e:6c:cc:de:60:5b:47:72:98:0b:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Oct 20 04:02:43 2025 GMT
Not After : Oct 21 04:02:43 2025 GMT
Subject: CN=d20dc193c45402e3c4d8e5ce6dd6519c18b20100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:b7:5e:82:b4:9d:1b:bd:71:fa:d3:da:30:
2f:21:03:f1:d6:da:63:2e:55:23:9d:b1:7a:11:e7:
b0:8b:e2:d2:55:6f:0f:7b:51:fc:de:b2:4c:38:35:
da:5b:9c:0a:5e:d3:3a:d2:2b:57:6d:c4:92:31:d7:
4a:0c:5f:d8:d3:f6:3b:77:6a:26:9f:52:1d:2b:81:
f4:82:16:f5:36:8f:3a:cc:59:14:7f:4b:73:b2:88:
62:7c:49:fd:c0:8f:22:6d:52:7f:a9:e6:7f:98:a5:
bb:2d:2e:97:40:8c:19:e3:2c:7f:77:56:85:72:fd:
6b:3a:0d:59:54:7b:c6:a4:80:bb:1b:3f:b2:19:9b:
68:3b:d4:0d:ec:be:e9:2b:fa:c2:55:17:bf:39:32:
ad:00:39:2a:2d:5d:82:37:0b:63:d4:34:d1:07:23:
7d:d3:c7:e7:89:e9:e3:49:d8:51:bd:71:f5:2c:8e:
86:a9:33:75:ff:f5:11:e6:02:ef:4e:c0:9a:58:5f:
28:d5:f3:65:86:8d:d5:8e:b9:79:20:3f:6c:b3:83:
2a:8b:3a:48:07:77:3b:ae:b0:f9:c1:40:8c:d9:51:
97:eb:b3:b0:b9:40:e7:ee:82:c0:ae:17:84:8a:08:
e2:ba:05:e3:12:5b:a7:93:28:08:90:9f:5b:9d:1d:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:C1:93:C4:54:02:E3:C4:D8:E5:CE:6D:D6:51:9C:18:B2:01:00
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:04:da:02:74:28:95:92:32:1d:e5:22:c7:55:d8:3f:be:e1:
28:55:09:1c:26:4f:2a:70:20:fa:cc:60:1b:67:c1:ed:24:b8:
41:28:b2:c8:9f:27:bd:42:e4:55:1d:1d:26:85:02:a7:2c:be:
40:06:7d:c5:81:29:ff:64:e4:e7:dd:e0:ca:62:b3:b3:9d:42:
0c:5c:05:fe:0c:e7:9c:f2:a1:8d:1c:8f:28:bf:33:12:ee:b6:
15:88:08:58:94:2e:30:aa:52:7a:c1:b5:3a:b6:b4:21:30:54:
a7:8d:63:55:36:a1:cf:6c:2b:c4:81:54:5a:f3:e4:ea:93:fc:
d4:6d:0d:03:17:df:6b:40:95:d6:80:a6:b4:61:ed:0f:3c:71:
15:21:df:46:82:63:f9:12:20:05:ed:ba:e9:55:0a:a1:8e:de:
ee:65:1b:2e:93:39:96:0a:80:73:f3:75:7e:4c:94:e4:90:c8:
2d:f5:db:fd:74:d5:d1:df:18:3c:4a:32:0c:51:08:50:67:4f:
3e:ac:c8:f0:f3:96:3e:7b:38:1d:16:42:fa:0e:82:25:bc:3c:
02:48:b5:f4:61:5a:2e:92:eb:a9:4c:ce:0f:20:28:91:74:ee:
eb:32:89:3c:c5:16:42:75:c3:11:ca:49:84:2a:47:7c:00:37:
b3:89:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:26 2025 by rpki-client