Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: t8Ue+E14+m3lAMucaTD8eoHYGcDqYDNMEtRXJGhVcS8=
Subject key identifier: 3D:07:83:52:C7:98:4D:BA:8C:38:29:8A:18:EE:42:8B:58:D2:7F:47
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 0197B7451BBEC398F7283F9397F629EE1ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1300
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: FeRCYFT7B+b7HWBuFRjXEljxVcpD5EXQhKxBdsUmwZ0=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1b:be:c3:98:f7:28:3f:93:97:f6:29:ee:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=3d078352c7984dba8c38298a18ee428b58d27f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:f0:56:6e:d4:9c:6d:74:21:b3:45:e4:f0:
8b:6c:aa:4a:6c:22:96:6f:9e:ea:6c:b0:14:6e:4a:
48:e8:66:8c:ef:dd:59:c8:22:65:62:89:00:fc:ae:
d4:46:a9:1c:30:cd:1b:f9:64:34:91:cd:8c:b5:15:
18:a9:ad:d5:12:96:dd:31:9e:dd:c8:d1:6a:d9:92:
08:66:12:db:a5:7d:b4:8c:b4:17:35:e1:26:72:51:
fc:a4:22:09:ca:db:a0:5f:da:04:ca:be:bd:03:70:
17:86:31:f3:37:c6:dd:82:64:48:cb:e3:99:1e:cb:
10:e3:1b:d0:39:bc:11:26:1c:75:0f:7f:2d:ec:25:
c0:c7:3c:4f:3e:56:f9:bf:da:31:8e:8f:7c:86:e8:
f7:bc:88:a6:f5:82:f9:55:3a:d0:d7:b1:2e:ed:10:
3b:ff:75:c7:e3:6b:43:01:28:e4:ed:a2:8d:c7:4b:
66:8e:99:86:b4:c3:d9:f6:f3:18:e3:ec:09:fd:88:
d4:01:35:3a:e5:aa:c7:a4:08:f7:01:f6:ae:33:8f:
63:80:a8:5a:c7:a5:5d:05:7e:7f:2f:f5:07:fb:78:
32:ba:25:f9:38:d7:e5:ca:fa:83:36:e0:c1:79:57:
c0:20:fc:b0:75:39:73:b1:d4:99:86:38:7e:8d:af:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:83:52:C7:98:4D:BA:8C:38:29:8A:18:EE:42:8B:58:D2:7F:47
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:e5:1b:d5:fd:1d:81:e0:22:06:45:8d:27:53:9d:9a:71:
dc:bc:00:6d:d3:45:dd:e2:e8:8f:e2:34:b2:88:a6:b0:84:7e:
d3:c2:ab:20:39:25:4b:24:3c:b4:e1:32:11:dc:86:16:02:42:
5c:20:5c:01:9b:ca:cb:0b:96:2d:70:95:73:9e:08:45:5a:30:
86:f1:84:41:53:ec:70:1e:63:b9:75:79:26:1c:d4:f9:4d:38:
17:75:e0:a0:fa:1b:24:d6:21:51:a4:d5:c6:12:7a:7f:50:5f:
c8:93:0c:d1:7d:9c:f7:b7:bc:ac:9a:a0:12:f9:ac:a3:c6:11:
8f:cc:7c:9b:e1:c5:df:14:fa:58:5b:0c:d6:d8:83:1f:bf:0e:
12:1c:13:df:18:b1:c3:0f:82:2d:d6:fb:1f:43:dc:f3:6e:c1:
35:98:50:49:2b:a7:a5:6e:80:99:03:e0:b6:48:bc:63:b9:e5:
7b:83:04:9f:fc:57:53:03:c1:97:26:1d:35:41:d9:17:90:82:
25:bb:37:9a:1c:09:f6:c9:ab:ca:2f:7e:bd:09:ae:98:20:77:
db:50:a3:1d:e3:e2:18:7b:8e:d5:c2:36:44:37:43:97:be:c5:
5d:e3:6f:29:37:b5:7e:2d:c9:c3:80:8d:b5:5f:e5:c2:fd:12:
c7:c1:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:05 2025 by rpki-client