Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: auP3d1x4mq7b30xrqWxg/fT5HTloK3+avksYf6T8U2I=
Subject key identifier: D3:A5:2E:E5:DB:19:0F:E7:52:E6:71:1B:E2:61:9E:EF:D9:86:1D:94
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 0197B7B36FF339615C83482F99C3ECFEA894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: dzYMp9ImW0eJ+vROyayoNAigF8lTcKpsWaE2IHa8G5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6f:f3:39:61:5c:83:48:2f:99:c3:ec:fe:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=d3a52ee5db190fe752e6711be2619eefd9861d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:ba:08:d4:95:9d:5d:b5:54:36:c7:76:08:
f0:33:1c:df:9c:94:fd:44:51:5e:8f:69:20:98:1c:
7b:a6:b8:32:a4:3a:20:e0:22:ff:fb:0b:02:08:e5:
41:52:26:c5:a1:f3:78:9b:52:a9:fb:f4:fe:ae:1f:
c4:5f:a2:7a:d4:0f:be:2b:32:91:80:1f:bc:34:7b:
f0:37:ca:1f:ae:21:37:7c:5b:11:65:bd:82:db:31:
7c:b5:e1:e7:56:d1:42:d2:a8:1e:56:72:41:b5:02:
6d:4f:b8:c6:01:01:df:db:cf:1c:f3:4f:62:ba:92:
2e:72:54:ba:d1:e4:a4:e8:46:ef:96:8d:80:94:b7:
8b:c7:17:03:ae:2e:3a:51:cd:8e:7f:fe:47:08:a4:
f9:0f:00:d2:c4:a1:0f:28:f6:f9:7e:e9:75:1e:6a:
b8:d7:95:19:00:d3:86:d7:48:0d:60:7b:57:36:d0:
b0:29:3e:ab:a1:e2:0a:7a:b1:b3:d3:1c:0c:87:da:
53:e3:31:ca:a8:56:eb:ab:68:24:ab:ea:68:66:5d:
85:b9:18:7d:95:42:5a:22:58:70:98:37:51:40:35:
d7:28:cc:ea:a3:ca:1b:18:43:70:47:fa:24:68:b0:
b4:e3:1d:0b:a9:01:d5:d6:d5:b3:7f:c7:e6:cc:de:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:2E:E5:DB:19:0F:E7:52:E6:71:1B:E2:61:9E:EF:D9:86:1D:94
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:3c:4b:88:e2:f3:c2:5a:04:92:6b:4d:8d:bf:83:fd:62:
8a:b7:8c:d1:ac:62:51:ac:f1:91:4b:9b:41:89:e3:7b:1e:b1:
b5:ba:1c:52:18:de:93:e9:e2:da:c3:50:5e:46:60:31:3e:16:
ac:62:b3:ff:8a:0b:6e:bc:c3:1b:cb:ae:5d:2e:92:4f:2b:c2:
83:40:bf:f9:69:21:79:28:a6:de:f2:fe:9b:b3:25:84:cb:11:
f7:38:bd:9a:73:89:5b:c6:e8:dc:9b:4e:e0:0c:2d:e7:23:8b:
9b:44:36:fe:21:0f:a6:67:0c:e6:78:3b:70:89:d6:5d:32:dd:
c0:8c:88:63:2c:1f:87:c5:e8:3c:93:0e:7f:2e:20:f8:00:4b:
69:21:0c:f0:6a:ee:7c:42:22:27:93:2f:bc:58:17:c5:31:6a:
08:0c:de:b4:65:f2:04:e6:71:33:0f:6d:87:bd:26:28:de:84:
9a:6f:9b:41:05:ad:18:91:2a:5b:c6:8b:5c:74:76:31:77:6a:
36:73:db:a5:21:76:16:8b:83:02:56:40:18:71:51:cf:dc:06:
f5:cf:fd:a5:2f:69:85:d7:7e:cf:8c:40:2d:57:28:3c:fb:a0:
6d:78:f7:1d:7f:c9:83:b1:c0:c8:f7:58:3c:6a:fb:97:f4:39:
bc:40:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:53 2025 by rpki-client