Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: 2XSXqK2noCemye0ck3zjwDduwEfeCbEfqeT8WfJc9Ac=
Subject key identifier: 71:B6:9D:0E:A2:55:1C:19:85:0F:03:6E:5A:19:30:C2:97:13:B9:CD
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 01989FA823EFD4A40FC8B74FBF4B0976CB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 19:00:53 +0000
Manifest this update: Tue 12 Aug 2025 19:00:53 +0000
Manifest next update: Wed 13 Aug 2025 19:00:53 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: kimFZd7UivZq2iRVzUX7R+hvrrImxo/egmcvwh1OQXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:23:ef:d4:a4:0f:c8:b7:4f:bf:4b:09:76:cb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Aug 12 19:00:53 2025 GMT
Not After : Aug 13 19:00:53 2025 GMT
Subject: CN=71b69d0ea2551c19850f036e5a1930c29713b9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:92:f1:50:c4:a6:b5:f0:3a:d0:9b:00:8e:
a2:56:df:76:ac:a5:32:39:78:e0:5d:73:30:62:c1:
f3:2b:e6:19:fd:58:82:2d:73:83:54:14:50:e0:fd:
75:bb:58:ed:b8:39:1d:71:c4:31:9a:ff:f7:7b:e9:
f7:33:b3:66:e4:78:67:b5:02:18:cf:48:7a:e6:7a:
d8:f8:40:a3:5c:f1:88:79:46:7e:6a:57:df:ba:9b:
b8:44:b2:2b:70:b1:27:1b:30:55:e3:65:f2:3d:b7:
6e:76:6c:51:ea:97:a7:90:1b:af:40:d7:4a:93:ad:
26:43:0a:20:74:cb:44:0b:d9:bc:b8:25:37:4c:12:
48:23:b3:89:c0:1b:d2:db:e7:a9:7c:77:3d:14:04:
d7:fa:11:9f:73:91:78:cc:a2:ac:0c:96:e0:b9:29:
0c:cd:44:bc:ab:f4:a0:7a:28:77:4e:c8:1d:6f:70:
28:45:5d:99:ab:35:de:11:fa:a0:27:45:f2:cb:09:
da:1d:9a:e2:a5:c2:d9:18:f4:dc:e3:06:09:5f:60:
35:ac:73:38:4d:c0:3b:24:dc:1b:38:44:4d:59:47:
d7:ff:33:e4:5a:84:cf:b7:34:8f:42:67:89:c9:70:
82:52:71:65:ff:50:2c:62:97:95:9c:c3:51:41:9c:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:9D:0E:A2:55:1C:19:85:0F:03:6E:5A:19:30:C2:97:13:B9:CD
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5e:f7:bf:77:7e:0d:09:2f:6a:eb:37:8e:2a:10:cb:66:85:
42:bf:8a:48:7d:00:c4:c1:20:23:e9:67:6d:fd:a0:17:0b:7e:
c8:96:b1:4e:97:59:bc:9b:fe:11:51:09:89:e0:52:34:fc:6d:
aa:66:06:be:ba:4b:b5:46:ba:42:e7:42:f4:84:8b:2e:ba:e3:
e7:9b:89:63:fe:dd:8a:a4:ee:68:3f:5f:b4:bf:0d:e2:67:a1:
c9:cd:e0:28:b0:27:57:69:84:ec:20:fb:0d:cd:eb:e3:6f:de:
50:4a:1f:a0:93:9c:47:71:64:15:a3:ac:73:a5:1f:31:1d:af:
e2:a0:83:81:c9:09:e3:ee:55:a1:34:64:21:dd:6e:63:2a:ff:
ec:f4:e1:0c:0e:61:60:5b:e5:97:2c:10:ff:cc:a6:1d:7c:8b:
12:12:ce:82:a8:72:03:d0:85:34:06:b4:75:ff:e4:e6:9c:8f:
33:2a:63:1e:e9:e6:cf:e4:f0:c7:fd:a0:dd:8c:f7:14:22:d1:
23:e5:81:5e:5a:ec:07:54:60:86:37:eb:6c:20:55:1d:cd:78:
30:e1:ba:0d:c7:de:7f:82:e6:ac:9d:7c:a7:a8:b9:75:8c:5b:
55:f0:2f:be:5f:71:fa:b8:ac:2e:39:0a:5d:67:14:32:7f:cb:
8f:77:24:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqCPv1KQPyLdPv0sJdstsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTRmMTY2MjM4NjdhMGJiMWYzMzc4NTBlYWNhYmZmODdj
NDdlMTAwHhcNMjUwODEyMTkwMDUzWhcNMjUwODEzMTkwMDUzWjAzMTEwLwYDVQQD
Eyg3MWI2OWQwZWEyNTUxYzE5ODUwZjAzNmU1YTE5MzBjMjk3MTNiOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVCS8VDEprXwOtCbAI6iVt92rKUy
OXjgXXMwYsHzK+YZ/ViCLXODVBRQ4P11u1jtuDkdccQxmv/3e+n3M7Nm5HhntQIY
z0h65nrY+ECjXPGIeUZ+alffupu4RLIrcLEnGzBV42XyPbdudmxR6penkBuvQNdK
k60mQwogdMtEC9m8uCU3TBJII7OJwBvS2+epfHc9FATX+hGfc5F4zKKsDJbguSkM
zUS8q/Sgeih3Tsgdb3AoRV2ZqzXeEfqgJ0XyywnaHZripcLZGPTc4wYJX2A1rHM4
TcA7JNwbOERNWUfX/zPkWoTPtzSPQmeJyXCCUnFl/1AsYpeVnMNRQZyFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG2nQ6iVRwZhQ8DbloZMMKXE7nNMB8GA1UdIwQY
MBaAFBjk8WYjhnoLsfM3hQ6sq/+HxH4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNWYwZmUtMjBlMC00MWFiLWIzMmIt
YmRmNTFhOWJkZjdhLzEvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNWYwZmUtMjBlMC00MWFiLWIzMmItYmRmNTFhOWJkZjdh
LzEvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuV73v3d+
DQkvaus3jioQy2aFQr+KSH0AxMEgI+lnbf2gFwt+yJaxTpdZvJv+EVEJieBSNPxt
qmYGvrpLtUa6QudC9ISLLrrj55uJY/7diqTuaD9ftL8N4mehyc3gKLAnV2mE7CD7
Dc3r42/eUEofoJOcR3FkFaOsc6UfMR2v4qCDgckJ4+5VoTRkId1uYyr/7PThDA5h
YFvllywQ/8ymHXyLEhLOgqhyA9CFNAa0df/k5pyPMypjHunmz+Twx/2g3Yz3FCLR
I+WBXlrsB1RghjfrbCBVHc14MOG6Dcfef4LmrJ18p6i5dYxbVfAvvl9x+risLjkK
XWcUMn/Lj3ckCg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:08 2025 by rpki-client