Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: xSCXDtPlcjaPFbeQKWklY0c6o43VVgUg59P8aX9uITY=
Subject key identifier: F6:B7:90:F9:8C:CE:D0:D0:64:91:EF:CD:93:60:E0:7F:AE:FC:29:1D
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 019A503DCC847A8F134A18460EB331648D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: 5saxvaEmWNew5B4VHrXqfxYj2swTjMNTRcm/mfGEaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:cc:84:7a:8f:13:4a:18:46:0e:b3:31:64:8d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=f6b790f98cced0d06491efcd9360e07faefc291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:d0:55:e6:82:1d:09:42:a4:8c:eb:94:07:
38:ad:b0:05:96:6b:ba:16:f5:f1:55:c5:a3:b9:bd:
e6:22:2c:50:29:87:3d:76:55:eb:7b:f4:7a:ac:d7:
24:e4:eb:6d:2e:35:ed:b1:1c:78:db:9f:e9:96:0c:
d4:6b:c4:62:dd:35:4a:a0:83:6e:9c:84:a3:08:2b:
a2:07:b6:6c:b1:36:11:eb:2e:4a:d4:f7:69:9e:d3:
0d:ca:03:e3:84:93:c7:08:7b:3e:28:32:ad:0a:e1:
1a:71:e5:09:8b:16:59:b3:e6:f6:a5:33:5f:12:f4:
f1:76:d7:73:03:b3:e7:57:0d:5a:2b:70:0a:37:f2:
98:b0:95:d5:f7:7a:7c:5d:1e:71:42:80:62:20:39:
89:52:84:87:0a:84:0d:01:15:91:3c:0a:09:d7:2d:
e8:d6:7d:7c:e2:b9:eb:ea:36:a5:91:6e:a5:66:39:
36:64:42:de:fa:13:42:08:4a:75:63:72:ae:3a:5c:
4c:04:6b:37:3d:62:e5:7e:d1:80:cc:64:bd:47:24:
7d:79:f5:35:74:97:2f:7a:fe:18:02:7a:ed:98:4d:
59:9a:93:1e:75:b2:71:1c:69:fa:6c:e6:81:12:c4:
2b:9a:b1:aa:43:c1:a3:2f:db:e1:2e:8d:9a:21:12:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:90:F9:8C:CE:D0:D0:64:91:EF:CD:93:60:E0:7F:AE:FC:29:1D
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:37:2d:4e:92:77:77:5e:f5:c2:e0:fc:b5:6d:b7:43:b8:1d:
02:f8:91:ad:6e:f1:a2:0a:f2:1c:9a:b5:84:54:5e:e7:cf:d4:
e6:31:d1:86:f1:b4:1d:5d:69:d0:e9:37:f0:1e:a1:9f:a5:59:
92:af:eb:2f:be:a7:f9:f2:c9:9d:58:17:b8:de:86:43:6c:a4:
29:11:6c:d9:c6:05:6a:06:a8:a2:c0:c2:cc:57:4f:1c:6d:a9:
f0:46:42:84:dc:5b:b1:89:5d:fa:f2:b9:1c:f2:f0:25:05:7a:
45:3e:b6:8e:43:36:63:5c:63:1c:1f:92:40:a2:ce:9d:63:7f:
fe:a6:94:48:51:61:74:e4:a1:4c:a6:08:57:c4:69:43:f8:bc:
36:d5:ec:35:78:7f:71:75:f7:42:92:c8:98:f0:e1:85:dd:4f:
bd:68:65:e2:94:0c:79:64:71:6b:8f:55:54:b8:dd:d5:34:17:
62:53:09:63:58:5a:80:12:46:db:58:42:a7:41:6c:f9:30:ee:
2d:4d:bc:ac:59:ef:f5:48:c3:94:0a:8a:3c:84:e5:85:32:cb:
1d:8d:6c:67:cb:d7:fd:f7:9b:32:bb:ec:c4:74:a5:f4:47:8b:
46:fc:aa:9b:a3:05:40:84:e2:38:72:14:1b:11:28:eb:c4:18:
6d:42:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:13 2025 by rpki-client