Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: IlStkEeSNjGpz1C03KEdCvholdPy6ivozDCxmWnmFpo=
Subject key identifier: B2:12:84:9C:52:8D:21:AF:32:DD:8A:41:F0:87:42:0D:77:87:9D:87
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019A53E3B3D7B12F9E25425DD1DE2D9F39DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0BA6
Signing time: Wed 05 Nov 2025 12:00:22 +0000
Manifest this update: Wed 05 Nov 2025 12:00:22 +0000
Manifest next update: Thu 06 Nov 2025 12:00:22 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: mroS3myuSa1oAi0uCxUezE+gMkCWaTumea0saJ26neA=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b3:d7:b1:2f:9e:25:42:5d:d1:de:2d:9f:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Nov 5 12:00:22 2025 GMT
Not After : Nov 6 12:00:22 2025 GMT
Subject: CN=b212849c528d21af32dd8a41f087420d77879d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:be:85:67:72:95:c1:0c:e3:f6:69:e6:fc:
44:0d:29:2f:b6:62:96:52:d3:03:9f:13:7a:c6:69:
45:b9:12:3c:d2:58:83:fe:06:91:5e:0d:95:4c:53:
a4:c0:30:0f:d1:7c:f1:c5:77:23:39:f0:25:42:1d:
0c:44:69:7f:e5:ed:3f:55:08:11:15:ff:a2:8c:33:
29:09:e1:04:c8:df:3b:3c:66:2c:2c:69:58:81:c9:
76:bc:d7:07:7a:e7:92:2e:b4:03:0b:e9:66:d1:4c:
dd:52:87:b4:37:2e:7b:5f:1c:c6:71:70:fb:79:15:
d1:1c:a8:92:4e:6d:fc:49:55:c4:6d:75:2f:72:b1:
02:c5:b3:0c:48:bd:65:a4:13:3c:3d:9d:ed:d0:05:
a9:45:ad:26:3f:a8:4e:c5:04:85:33:54:2c:11:00:
19:de:df:e7:d5:49:37:b0:46:26:0a:50:b7:46:9d:
c1:ad:92:a3:a4:03:eb:a7:ee:d0:6a:5f:a1:56:cc:
1f:b6:c7:3d:57:c6:8f:65:8f:d8:15:e2:61:95:0d:
9a:e8:ed:60:10:83:ae:47:60:3e:31:f6:90:c4:ae:
14:d5:9d:ac:a5:63:e4:78:be:24:62:02:54:f3:4c:
f0:9f:0a:12:e0:ab:ce:ee:38:6b:a3:00:fe:85:d5:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:84:9C:52:8D:21:AF:32:DD:8A:41:F0:87:42:0D:77:87:9D:87
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:95:da:e3:45:ca:db:a6:4f:00:5b:40:25:3b:46:c2:13:
a8:a8:42:2a:54:76:16:d9:cf:d0:13:47:fd:ba:8c:37:a7:29:
1d:44:f2:24:7d:79:39:11:bf:8f:8d:6b:87:cf:06:da:a0:5f:
56:85:62:5c:18:27:5c:41:98:fc:ae:62:75:97:58:9f:39:1b:
af:09:1b:27:f2:ab:b0:65:f7:7d:b3:f1:97:e8:e1:50:2e:b6:
c5:96:8e:d5:77:37:7d:68:a0:ee:63:56:77:6c:2a:6f:b3:f3:
a4:92:7a:64:34:24:23:77:b6:9f:af:19:5e:2c:25:8a:3c:31:
8a:7e:59:83:0f:1b:61:72:fe:53:df:6d:c2:09:f1:70:a1:5d:
24:40:0d:df:c5:7f:47:69:83:16:90:2a:07:e0:49:66:23:ad:
aa:62:46:84:be:aa:df:ca:61:df:5c:63:02:09:d0:7f:eb:d1:
8c:78:03:9f:83:33:38:f2:9e:7b:36:39:fa:aa:49:64:8d:aa:
dd:90:e8:7d:bb:f3:63:03:39:1c:b9:a8:31:c0:8c:b0:78:fe:
9a:4c:66:47:f5:02:b2:34:5e:89:cd:b0:dd:3a:ff:d9:01:78:
b0:3a:af:3c:32:0d:98:fd:f4:16:06:8a:4c:55:c0:9f:85:f4:
cd:50:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:46 2025 by rpki-client