Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: yX7rmMEGM1+ODHZnJKe2evSDpd6NJYbdi3Ghtx2YCCk=
Subject key identifier: D6:B7:98:7C:DB:79:CE:71:8C:F3:42:13:38:4A:13:34:CE:CB:38:94
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 0198D583836201226179C798F4BFA8200C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: A3N3j+rBRD2URMYPLyjARMUfG0B1VLQkKlU5xk/mjMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:83:62:01:22:61:79:c7:98:f4:bf:a8:20:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=d6b7987cdb79ce718cf34213384a1334cecb3894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:0b:19:5e:ae:22:40:f2:6e:46:fa:01:96:
2b:48:0c:a5:34:8f:8c:04:9f:99:5a:38:ea:0a:5c:
03:ff:7c:30:4b:2f:97:e5:85:6d:80:6a:cd:2b:07:
0a:38:14:15:88:7e:b6:3f:ca:a2:5d:ff:5c:c5:84:
df:94:88:9e:03:ed:bd:e7:9e:ad:75:23:8c:e6:5e:
50:1f:20:7a:c5:fe:b6:d2:d2:ed:b6:73:d9:5e:6e:
4e:96:af:f3:8b:a3:c4:9a:51:fd:c7:d7:f0:7b:fb:
c2:b0:82:e2:90:a9:a5:ff:87:7b:ac:29:63:80:33:
13:96:38:5d:66:f3:79:0b:b5:c0:e5:f8:34:1f:db:
7b:93:40:da:ac:19:90:e1:7d:d9:5e:44:0e:0b:f0:
7e:07:fc:34:30:aa:5b:47:eb:7c:0b:cf:00:f1:0f:
10:22:67:39:3a:e5:52:17:3c:a7:a8:3a:64:b2:8e:
31:99:1c:59:a4:6a:64:6a:4a:b3:33:83:d7:ab:31:
cd:00:fe:fc:c5:7b:4e:5e:c1:34:a4:45:8c:fb:1b:
5e:7e:90:30:74:c1:83:d0:b0:b9:df:19:d4:95:48:
ac:91:db:0e:8a:08:66:d6:c7:64:d2:d1:8b:dd:50:
8e:bb:62:f4:8f:91:c3:54:02:2d:62:ee:fe:40:7d:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:98:7C:DB:79:CE:71:8C:F3:42:13:38:4A:13:34:CE:CB:38:94
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:99:37:dd:78:47:a2:4f:ab:6c:de:51:45:12:9e:29:c2:07:
d5:b7:2b:52:ad:f9:59:46:9e:5c:fb:ec:48:dc:56:fa:37:f2:
37:3d:97:8e:b2:dc:6b:97:89:8a:72:3e:8a:96:92:3e:4f:03:
71:68:61:c4:63:31:ff:22:65:8e:70:13:1f:2f:c4:c7:29:72:
ed:c5:16:8a:63:6d:3e:1b:45:00:03:1c:2e:ba:ca:46:0b:0b:
01:50:1d:7f:8e:03:22:97:da:bd:53:f7:59:32:22:91:ca:24:
ee:10:12:67:cf:ac:15:30:f4:56:d6:72:8a:02:90:da:db:46:
f2:12:40:5f:a6:eb:2c:9d:7e:e0:cd:78:50:2a:d4:b7:96:20:
4e:64:a5:f5:91:bb:6e:a9:5b:97:30:7b:aa:b1:61:b7:66:11:
5c:54:29:46:cd:7c:63:0a:33:44:8f:e0:b8:5f:5f:d9:84:0b:
ab:49:71:b3:cb:aa:e8:92:5d:6c:2c:12:93:d9:f3:15:0f:b3:
1d:f0:22:a1:fb:35:8f:a8:ac:63:38:e0:74:5d:31:46:8b:bd:
d5:ab:1e:ad:79:94:30:60:28:c8:b9:74:d0:f7:cd:b9:1e:d5:
02:70:4f:af:86:ba:87:fb:fd:64:96:f9:10:a6:5d:b2:3d:ac:
d0:02:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:47 2025 by rpki-client