Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier: MIS2dy1ECXI3Ka7Iv8s8ZO6k8uugLACmU5O2E7Fkb/I=
Subject key identifier: 67:3A:76:BB:C8:6B:F9:DC:BF:BF:92:05:07:EC:EF:E9:69:B5:C7:F9
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 0198D5F12E207AB799E78834AEB5BA3E5B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number: 0D9C
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: fb2KUBi8dRKOTA3OARe90b6okggcnFCWNbQqRIdQV+I=)
2: xs7enPVeNIMyt7yLlWdZQsBjc6E.roa (hash: Hl7Zc5f4P4RuVLf0+lM7s4f9NcFGJ5Df6CUhJF0dl6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2e:20:7a:b7:99:e7:88:34:ae:b5:ba:3e:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=673a76bbc86bf9dcbfbf920507ecefe969b5c7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:79:93:e3:c3:6c:b5:00:08:b9:98:37:d9:
52:cc:6f:cd:e8:19:31:88:d3:62:26:6c:b4:3f:f5:
b8:5d:91:df:db:5b:38:6c:28:27:07:09:37:21:45:
dd:36:1f:b4:27:3e:3e:a9:32:7c:b4:37:e0:49:47:
f6:cb:38:9e:de:f7:66:20:57:f8:f9:86:b7:73:40:
18:8c:c2:58:de:f2:b7:de:e7:a1:e9:81:53:d6:5c:
72:8b:39:d1:dc:58:aa:8b:27:fd:41:2f:82:f8:85:
c8:70:46:58:7c:e9:4a:f7:41:97:21:dc:b4:3e:82:
c3:56:ec:3f:72:0d:82:f4:b7:53:8f:b0:f1:0c:dc:
c8:0d:d0:7b:c5:c6:20:de:fb:6d:97:78:e2:25:7b:
cd:1a:4f:2c:bf:43:37:91:ed:44:ab:7a:ee:6b:b0:
5d:29:00:7f:80:11:93:15:fc:c6:5f:d2:1a:53:70:
7c:6b:93:92:9b:ad:bd:13:04:c0:ac:78:d6:ea:96:
31:b6:e4:e7:3f:18:b1:f9:5a:94:94:63:d5:6b:87:
2f:31:79:db:23:9a:82:e1:44:d3:e1:73:fd:3e:f0:
05:ce:3a:ea:3e:78:d3:8d:88:b2:00:1f:16:ee:64:
d6:5b:80:ef:94:99:bb:29:ca:aa:31:9b:b6:7e:1c:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:76:BB:C8:6B:F9:DC:BF:BF:92:05:07:EC:EF:E9:69:B5:C7:F9
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:62:7b:a2:fd:1e:0e:d1:ff:0a:d9:ad:96:60:4d:47:25:
17:4b:f1:04:dd:2c:e5:45:2b:8f:26:58:d4:ac:eb:8e:3e:99:
a0:64:d1:25:e5:cd:a3:10:79:94:77:a3:78:12:02:10:bc:41:
2f:28:56:d9:81:84:4a:1e:35:11:49:ef:0d:50:31:d7:03:65:
df:71:04:4e:a7:82:8b:05:b5:18:63:a0:1b:af:85:c5:74:ae:
8d:a0:9e:1d:66:68:c0:db:86:f3:5c:d0:37:ed:df:c9:46:64:
c9:32:30:b2:43:63:b7:3b:ed:47:b7:c4:da:37:3c:7a:f7:ba:
af:4c:0d:61:24:03:c7:7c:f8:16:46:cf:3b:59:00:59:9b:c5:
01:af:19:a6:b0:59:80:9f:1f:e4:c9:0d:ee:50:b0:f2:8a:d9:
49:c9:8a:05:48:0f:a7:3e:54:b1:cd:45:6f:d1:dc:d4:89:3c:
c3:8c:67:fd:e1:0d:af:91:6d:81:84:ef:81:50:a6:5e:e0:72:
21:fc:b8:d0:d2:3c:05:e0:fc:ae:96:5d:e5:df:f2:b0:8c:25:
a0:dd:1f:3f:3c:41:7f:84:44:77:a9:4b:44:30:d1:84:ed:c3:
79:09:38:20:cf:c6:fb:fb:07:18:aa:fa:22:72:1a:f9:40:d0:
1a:b8:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:15 2025 by rpki-client