Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: MbZyLby08RPAfl6K88UTwtcmUA6DNkUlyBswa8t4O/Y=
Subject key identifier: DB:AA:1B:C2:55:21:07:F7:4D:A2:41:9E:C5:74:84:46:6A:4A:1F:91
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 019A4D7445A37F8A39F28D22241D3A71DD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 15A6
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: LDPi9iiUbc68LArXxgUruZ5qpc8Dgd1LedXG5C2tfT0=)
2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:45:a3:7f:8a:39:f2:8d:22:24:1d:3a:71:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=dbaa1bc2552107f74da2419ec57484466a4a1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:23:59:53:d5:12:e8:b9:c2:2e:22:aa:94:
83:a1:84:48:71:bb:7a:b2:56:fd:09:fb:12:e2:e2:
f9:41:5c:67:dd:fa:aa:de:ab:91:cd:d5:f8:38:ec:
47:ca:7a:3b:fb:49:78:ee:c0:5a:8a:c7:73:b1:c9:
c2:21:66:34:03:c7:28:e4:9d:98:78:7f:b2:ef:87:
8e:13:1f:57:ec:2a:96:00:43:03:9b:c7:2a:db:5d:
45:f5:75:f5:5c:f6:73:1b:2c:74:ef:85:dd:30:3c:
17:b6:ac:e4:dd:42:9a:2f:68:79:f7:1c:f4:13:3e:
4c:22:26:5a:cb:48:ca:27:a5:dd:e0:89:53:ec:57:
31:90:c0:0b:dc:4e:5a:ce:59:23:f1:a9:25:eb:62:
c5:13:7e:7b:2b:7e:f5:45:f8:b1:ee:63:e3:03:0c:
12:79:54:41:c5:e1:4d:e7:00:24:ef:b3:8b:72:e6:
16:04:20:3b:b9:f5:7d:d5:80:f3:7d:3f:93:fd:73:
3b:a6:e4:7a:69:a9:df:60:ac:27:2c:d6:95:0b:bd:
58:08:76:70:c2:c0:42:1f:8d:11:6d:80:d8:eb:54:
13:7f:39:26:ff:a5:01:50:a3:02:fe:a0:73:62:f8:
c3:80:46:77:08:f8:fe:fe:fe:36:0f:46:7d:65:9e:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:1B:C2:55:21:07:F7:4D:A2:41:9E:C5:74:84:46:6A:4A:1F:91
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:e4:c3:63:bf:78:bb:58:ff:19:ea:07:fc:d3:ff:08:8b:
b1:d1:fd:cb:50:a1:a3:c5:1f:41:7b:e1:ca:72:e0:fc:f6:ab:
fb:b3:10:f2:19:0d:ab:50:de:25:3f:5b:4d:2c:e5:9a:bb:86:
f0:f6:45:e5:31:0c:93:8b:2d:a2:15:c4:a4:e5:fb:44:dc:59:
84:28:07:7b:a5:b6:e4:6c:53:88:29:96:cb:fd:23:95:c6:de:
99:4b:10:22:99:cf:81:89:59:70:74:d5:c8:d1:d1:49:e1:94:
4c:14:fb:16:17:cd:91:84:76:01:3a:96:56:e8:77:ab:ae:33:
ff:81:67:d9:e7:77:8d:eb:14:1e:d0:9d:0e:f0:1c:c3:b1:67:
0d:69:af:32:b1:a1:0e:df:40:59:91:49:7f:0c:6e:c6:35:36:
1c:50:38:d7:93:92:bd:57:cd:49:b4:0a:b8:64:6d:0c:8d:74:
7c:0c:17:8e:5a:94:69:2d:33:17:46:5b:40:a5:22:50:69:90:
0f:e5:cb:0e:0e:36:49:40:da:bd:8f:e3:5b:14:4a:8f:bb:66:
54:c3:33:d2:b8:ec:3e:67:f1:69:bf:98:8c:97:d1:da:38:91:
d5:3f:53:ef:39:3e:c0:4a:f0:eb:18:cf:17:a9:a0:3b:f6:d4:
d5:26:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:38 2025 by rpki-client