Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: 7mCKz/Gr9aZy5atSThJVG/bjUuH8gEGAa3JsQj7ZdAY=
Subject key identifier: 0F:FE:D0:BC:38:7A:69:7A:76:59:B4:2A:00:E8:39:BA:C9:7A:9F:5F
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 0198D51626960B9D4B2F80F7DBDA993D5B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1394
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: qWhL3eIW5WUZrJ5jZL6MKhClMdpdP0eECtR/RKJVoUE=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:26:96:0b:9d:4b:2f:80:f7:db:da:99:3d:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=0ffed0bc387a697a7659b42a00e839bac97a9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:6e:11:01:bf:14:59:db:d4:77:6b:26:0c:
4a:69:46:a6:c6:71:d5:01:4a:70:5a:81:95:1b:9a:
2c:76:ca:73:54:16:90:32:e3:96:17:42:d5:2d:37:
56:97:b5:1f:ca:30:32:45:fc:0c:3f:5c:33:59:26:
65:5b:fa:dc:b9:2f:53:5b:69:55:79:1d:4c:ae:ab:
1e:74:fc:04:78:ed:ba:9d:20:86:ce:ea:2e:c8:98:
a9:3f:c2:ca:b6:85:f5:2a:85:66:dd:41:a1:b8:8c:
d9:5d:9f:33:7d:34:e5:79:3c:9f:be:b5:89:58:d0:
16:68:3a:f6:cf:23:19:42:74:21:4b:e6:be:77:6a:
20:7c:15:ee:d8:53:0e:3e:7e:b3:e5:c3:bc:3e:08:
64:1c:74:8d:9f:fc:7f:af:89:52:2e:73:b2:f0:0c:
b6:c1:a9:7f:2f:43:87:04:8a:21:21:0a:d8:2a:64:
99:f1:6e:5b:b2:44:06:65:6a:d5:e3:69:e7:e8:93:
0c:08:f2:2a:dd:13:4c:1f:f7:6d:e3:37:56:89:94:
30:27:5c:bd:1a:a4:df:4f:9e:8d:f3:8c:96:1f:07:
1e:d3:67:f9:44:f3:16:d1:9c:05:d6:57:25:b0:b7:
81:b0:aa:2d:09:35:fb:fb:09:58:e4:a6:da:53:10:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:D0:BC:38:7A:69:7A:76:59:B4:2A:00:E8:39:BA:C9:7A:9F:5F
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:42:82:8c:75:0b:2b:bc:66:d5:52:43:38:db:13:6f:89:58:
5f:a6:8b:65:54:fa:18:d8:f0:48:2b:c1:d6:fd:26:55:42:6f:
1e:d5:c5:d8:c9:aa:4a:fb:4c:53:f0:28:44:f1:fe:51:97:ae:
c8:fc:bf:79:e0:d5:14:ee:b2:2b:d7:58:b4:55:a5:1c:f9:60:
09:7b:4f:63:7f:76:05:5a:31:ef:e5:d3:b4:b0:8d:dc:c6:3e:
bd:8f:09:31:ff:99:5e:ed:89:85:e6:16:70:f2:5d:a8:e4:31:
cc:e7:bb:77:6f:d0:2e:21:2a:c2:3a:5c:4f:23:31:8b:94:04:
c9:4e:51:45:59:c6:bb:59:b6:ec:a9:77:12:cf:05:ed:fd:3d:
5b:0b:f2:20:e0:17:0a:00:57:53:3e:72:05:c8:02:d1:2b:42:
7b:52:59:c2:3a:e3:14:1d:af:14:d6:5b:9f:0a:f6:b9:11:72:
14:f5:e7:98:13:b9:1f:cb:6d:af:3d:2e:cd:be:ce:aa:be:e1:
d1:b3:19:7e:66:c7:c7:bc:29:70:fb:c8:3d:f2:01:74:a5:a1:
40:16:0f:5a:5c:df:fa:ba:0a:6c:72:4c:9e:cb:2e:49:46:55:
0a:41:03:08:60:e2:0c:cb:45:98:3a:60:0a:53:4d:7d:42:9a:
e5:32:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:03 2025 by rpki-client