Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File: GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier: 2NY99FlLT6LQst0Srfr2jn9of6SX8t5b+dsAqKyRYEM=
Subject key identifier: 6E:2B:FF:46:A1:55:7E:06:A2:2A:7D:8B:9B:E7:97:C3:67:3B:78:E0
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 019A4DE191A27BE2EADE39038C534A535D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number: 0F5D
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: HbvBx3g762HUW2hE09nSikjSJXGBfg6Ju0wldoVJWAM=)
2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=)
3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:91:a2:7b:e2:ea:de:39:03:8c:53:4a:53:5d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=6e2bff46a1557e06a22a7d8b9be797c3673b78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:18:96:76:fa:fd:03:6a:21:cb:22:7f:68:
3e:98:79:02:a5:4f:d6:c1:27:75:40:15:9c:64:24:
d2:92:ee:0c:91:57:56:c8:55:9f:30:05:be:b1:9a:
70:66:6d:4c:3b:85:2a:b5:22:cc:d2:b9:b0:ab:99:
22:98:0b:e9:76:86:60:1d:f5:d0:18:89:c3:42:e2:
92:fa:2f:2e:90:7b:08:75:55:92:d2:21:b1:0b:86:
91:9b:8e:99:3b:08:87:89:03:0f:f9:20:7c:0c:b7:
4f:4d:6a:1b:3f:5e:08:94:b0:1d:16:4e:45:e2:3c:
56:78:76:37:e1:7f:9a:50:35:57:65:66:f2:f5:ce:
e2:e3:18:10:05:cf:25:13:3d:02:1a:b8:1b:d9:1b:
21:21:d2:f2:a1:2f:da:a6:84:0c:fe:9e:e4:d5:c7:
32:47:79:88:c1:5b:c2:75:58:5e:55:40:27:d7:d7:
45:90:d9:55:24:77:14:f5:f1:1a:bb:7e:32:33:46:
74:83:dc:2e:5f:19:d6:e7:f7:44:a4:3a:79:43:d9:
f8:43:9c:82:17:13:c1:0c:c5:2d:c0:fa:ac:59:26:
63:9d:02:5a:52:29:3b:5e:0c:59:33:6d:bc:a1:ab:
71:29:f8:f2:c3:11:bf:65:28:50:9d:68:b9:ca:1e:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:FF:46:A1:55:7E:06:A2:2A:7D:8B:9B:E7:97:C3:67:3B:78:E0
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d3:b3:32:c3:50:ef:c7:6c:bd:8d:20:2f:4c:a4:3d:24:c6:
80:7a:49:1d:06:f8:06:5d:a8:ea:ef:c4:6f:c8:7a:6e:fe:34:
be:46:73:de:24:32:67:01:0f:17:34:52:4f:f4:89:25:70:44:
9d:63:bf:98:0a:1e:76:00:f2:f5:67:f3:fe:43:60:7c:1d:db:
6a:f7:05:72:c9:f8:45:fa:6c:58:76:53:b9:a0:53:8d:fc:59:
59:00:c8:8c:11:f2:24:c8:d3:23:78:00:c4:55:fd:d8:b2:6d:
03:61:b1:d9:22:09:2a:c4:ab:0e:2a:e0:9d:7c:88:53:a8:4b:
4f:13:c1:bd:cd:de:04:b6:7f:50:87:45:77:c0:fb:af:ee:d0:
6d:81:4f:1c:9e:bb:49:e4:68:7f:d9:22:be:98:29:0b:2f:59:
54:d5:c6:36:5e:8f:04:ab:85:57:40:ca:95:31:d8:4d:04:71:
4d:db:9f:7f:97:9b:33:43:e4:67:fa:7c:dc:d9:f5:98:65:69:
bc:e3:42:7d:11:35:ac:a6:0d:61:9f:99:a1:73:be:75:05:5b:
9c:8f:36:ed:1e:f9:5e:ad:04:d3:47:12:bd:fc:80:55:03:e5:
aa:5e:d5:c6:8f:29:75:e9:52:48:72:b6:44:29:81:65:3d:34:
a7:4d:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:50 2025 by rpki-client