Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: G9TDtTWq6EFS+piZEN8cQFTlAqVUFcKQ+DlkxAFikGY=
Subject key identifier: 32:04:90:1E:47:3A:3F:0E:9B:76:36:AC:5B:B3:F6:4B:BA:8B:CA:53
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 0198D473472BD39DE9488A88F67A9864BD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 0635
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: xdcJUa8IGnAxyENwoXMfApDazB2Ktr8bumTuLNinREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:47:2b:d3:9d:e9:48:8a:88:f6:7a:98:64:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=3204901e473a3f0e9b7636ac5bb3f64bba8bca53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:cd:5a:1a:fe:20:51:85:ba:95:54:2b:e8:
8b:5c:97:a1:a9:a7:d1:00:3b:2c:5c:93:da:5d:9d:
66:8b:de:2d:d8:92:82:43:7a:49:80:38:d4:13:30:
30:6a:da:97:55:02:a5:40:76:67:a3:44:50:a1:e2:
93:24:ec:31:67:d2:97:c6:bb:27:8c:02:3e:5f:72:
b9:4c:de:a0:cd:23:ca:9a:c3:c2:a9:b9:40:16:e2:
f0:9b:66:43:09:37:0d:64:36:bb:03:5e:68:ed:85:
f0:0a:fa:88:7f:18:bc:15:2e:fa:10:a4:35:2c:2d:
4f:96:b9:28:de:68:fd:3b:12:0a:cd:23:c6:f9:ec:
25:ff:5f:44:09:f8:5f:e7:5b:ca:dc:71:50:0b:04:
37:7e:aa:67:43:4e:73:c2:cd:d4:34:6e:2e:70:8d:
79:23:85:8f:43:d1:91:1f:6f:4b:04:f2:d8:27:7d:
49:ce:10:3e:bd:27:d0:5a:45:54:c7:a5:c5:35:9c:
87:54:4d:31:a6:ed:04:18:94:20:72:30:50:89:c5:
c5:79:c6:a2:7b:19:4e:dc:5d:f8:2a:4c:0b:33:4c:
fc:f4:01:78:32:f4:aa:4d:2a:08:33:4a:24:29:2d:
91:5d:72:cf:3a:ec:0e:06:d8:f9:35:4c:c1:c0:6e:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:90:1E:47:3A:3F:0E:9B:76:36:AC:5B:B3:F6:4B:BA:8B:CA:53
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:17:7e:c7:ee:f0:ad:6c:49:e6:c7:d1:55:cb:5d:d8:e2:2c:
67:bb:29:05:15:31:b6:8e:2f:77:8e:cc:8c:40:ae:e2:09:a2:
47:5c:52:31:d7:74:ee:ec:1f:d0:14:19:05:fa:0d:ee:b1:2a:
38:d7:c2:00:e8:2b:bd:45:df:f2:87:28:87:37:7e:05:b1:ca:
a1:de:fb:64:0d:11:0b:a8:1b:95:5f:c0:a6:3e:8e:26:42:24:
78:59:bc:1b:59:85:06:4f:ce:65:e0:ff:ae:5f:68:85:84:64:
62:25:9b:8e:e6:c4:90:5b:bd:d3:48:d6:85:6b:6a:a2:38:a1:
20:f5:1e:c9:8a:a9:1e:f9:29:85:2d:8b:ea:2e:c5:ab:a1:2e:
ee:43:77:ee:a1:8d:db:3d:0c:be:97:80:df:c8:fd:42:2a:56:
0c:44:2e:07:68:97:66:e8:87:8e:f2:15:b8:70:29:34:d4:fe:
6c:3c:44:cb:ed:3b:d6:68:c0:6d:0e:7e:5e:ac:78:01:aa:80:
f3:aa:6f:66:9c:1d:d9:fd:c4:52:3f:8b:54:1e:9d:4e:ac:23:
49:17:ea:d2:8e:0f:23:cb:04:45:68:d3:51:36:c1:25:ba:f0:
9a:b5:c6:3f:8b:cf:c8:ec:00:51:10:3c:e4:9c:6f:45:77:05:
cb:fe:d1:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0cr053pSIqI9nqYZL0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm
ZWI3NDEwHhcNMjUwODIzMDEwMzAxWhcNMjUwODI0MDEwMzAxWjAzMTEwLwYDVQQD
EygzMjA0OTAxZTQ3M2EzZjBlOWI3NjM2YWM1YmIzZjY0YmJhOGJjYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DfNWhr+IFGFupVUK+iLXJehqafR
ADssXJPaXZ1mi94t2JKCQ3pJgDjUEzAwatqXVQKlQHZno0RQoeKTJOwxZ9KXxrsn
jAI+X3K5TN6gzSPKmsPCqblAFuLwm2ZDCTcNZDa7A15o7YXwCvqIfxi8FS76EKQ1
LC1Plrko3mj9OxIKzSPG+ewl/19ECfhf51vK3HFQCwQ3fqpnQ05zws3UNG4ucI15
I4WPQ9GRH29LBPLYJ31JzhA+vSfQWkVUx6XFNZyHVE0xpu0EGJQgcjBQicXFecai
exlO3F34KkwLM0z89AF4MvSqTSoIM0okKS2RXXLPOuwOBtj5NUzBwG4h9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIEkB5HOj8Om3Y2rFuz9ku6i8pTMB8GA1UdIwQY
MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt
ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi
LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhd+x+7w
rWxJ5sfRVctd2OIsZ7spBRUxto4vd47MjECu4gmiR1xSMdd07uwf0BQZBfoN7rEq
ONfCAOgrvUXf8ocohzd+BbHKod77ZA0RC6gblV/Apj6OJkIkeFm8G1mFBk/OZeD/
rl9ohYRkYiWbjubEkFu900jWhWtqojihIPUeyYqpHvkphS2L6i7Fq6Eu7kN37qGN
2z0MvpeA38j9QipWDEQuB2iXZuiHjvIVuHApNNT+bDxEy+071mjAbQ5+Xqx4AaqA
86pvZpwd2f3EUj+LVB6dTqwjSRfq0o4PI8sERWjTUTbBJbrwmrXGP4vPyOwAURA8
5JxvRXcFy/7RMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:03 2025 by rpki-client