Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: iqx72XoHG9Dryz/D9nXdK1Gv6zSofQiG3Lsf+zupkFo=
Subject key identifier: 03:FC:54:62:88:2E:29:B6:DC:A5:10:47:EA:C5:CF:1A:F2:CB:58:3F
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 0197B88FF88A25E9566510A74479C52FEF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 05A2
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: G1c3T5mbih6RZsJTWbTiwebzuFgivFWGBf5F/AVbqPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f8:8a:25:e9:56:65:10:a7:44:79:c5:2f:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=03fc5462882e29b6dca51047eac5cf1af2cb583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:7f:49:1e:a2:1e:57:bc:0a:4f:c8:4d:2a:
37:91:07:33:2d:ce:1f:e3:6c:a3:36:93:58:cd:71:
88:99:9a:1b:70:81:1e:8f:60:ba:09:09:89:c2:4d:
8f:fb:83:35:ce:ba:d5:b4:c5:86:da:07:f1:58:53:
84:94:6e:94:2a:4b:26:c8:38:40:03:eb:f8:7f:81:
a4:ae:a5:e3:bf:7a:6b:50:9b:35:e3:26:8d:5c:a7:
eb:54:bb:4b:11:42:ca:fe:de:eb:01:e6:20:fc:00:
76:e0:d0:a7:a4:9b:f5:b7:98:e2:81:13:80:01:8c:
98:01:58:cd:4d:d2:79:63:4c:29:be:10:1e:05:09:
89:1a:b9:5b:3d:61:3d:d9:46:52:5e:c7:1d:48:c3:
bc:77:9f:46:e7:d0:ce:50:22:ad:01:7e:d0:75:d9:
c5:7b:c3:2e:1b:f6:32:70:88:dc:f0:9b:5b:b6:d5:
43:cb:25:5f:16:ce:71:39:d2:fe:52:6f:5c:00:8a:
c7:b1:16:24:9a:62:32:ce:f3:35:75:c5:7b:ba:d2:
68:26:98:3e:67:10:85:a2:5f:80:66:cd:28:5e:db:
af:c5:3b:e3:e4:51:fc:db:7e:c9:98:d4:d8:ed:4f:
37:69:72:be:3a:76:31:f7:ec:18:94:eb:21:59:60:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:54:62:88:2E:29:B6:DC:A5:10:47:EA:C5:CF:1A:F2:CB:58:3F
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:b6:3c:4d:47:03:02:c5:3c:67:c9:c5:7f:12:bd:12:c8:
55:62:19:d6:e2:93:ac:79:43:d2:7f:86:a2:6f:14:f9:ec:68:
a7:f0:a0:54:fa:bb:6d:84:0e:0d:0c:96:b6:8e:26:f8:75:b7:
01:2b:ac:b7:60:3c:cb:55:95:74:a2:b7:03:3c:f2:92:f8:5b:
94:86:a9:d1:98:c5:3c:b2:c4:03:88:48:40:27:74:e8:8b:e0:
d1:82:d9:c1:3f:06:63:c4:d5:ad:77:96:2c:8a:fb:bc:23:4e:
c7:08:12:c8:8a:97:16:1a:f3:1c:bd:db:f5:4b:f6:43:48:10:
96:53:87:d5:a1:db:38:95:2d:f8:39:93:96:86:b1:ad:1f:ce:
c7:f0:c5:f2:ce:8e:d9:22:51:46:b4:ae:3d:72:af:be:6a:8d:
92:60:24:e3:3e:dd:bc:38:ac:70:a7:67:e1:fc:54:63:6b:43:
59:ee:2b:22:06:66:95:c8:cc:09:93:ec:7b:ba:00:41:b4:cb:
3d:21:ba:5b:f3:df:09:82:97:3f:54:b4:fe:3a:99:78:bd:41:
9b:4f:c1:b2:73:ef:27:f3:f9:6f:d5:0d:93:24:9c:84:05:bc:
1e:f7:3f:08:18:a1:3a:13:01:84:a1:41:ad:55:c0:d8:0c:76:
6b:07:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:09:32 2025 by rpki-client