Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: pe9ZQ53iwZKPI1/PDC48cWeo5u1GGxcMGJvhWsnj3sk=
Subject key identifier: 31:5A:D4:08:46:7B:D9:D4:5A:4C:6E:FE:FD:27:29:DA:22:48:BB:12
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 01988E0F6BC66824C97479B061774FE13A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0ABB
Signing time: Sat 09 Aug 2025 09:00:31 +0000
Manifest this update: Sat 09 Aug 2025 09:00:31 +0000
Manifest next update: Sun 10 Aug 2025 09:00:31 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: A1JHSPwf6tdWVJcJQXvKd8XuHJO2HueeorK9ChHcpdk=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:6b:c6:68:24:c9:74:79:b0:61:77:4f:e1:3a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Aug 9 09:00:31 2025 GMT
Not After : Aug 10 09:00:31 2025 GMT
Subject: CN=315ad408467bd9d45a4c6efefd2729da2248bb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:da:f1:c3:9c:26:a6:07:c3:15:d4:39:26:
17:be:ac:68:b2:15:3d:85:48:2b:d4:e7:10:3c:2c:
45:ac:9b:3b:ca:e6:fa:ab:45:6b:2f:59:a8:4e:94:
51:88:3e:21:e1:8c:04:24:c5:fc:25:7e:43:e4:bc:
92:e4:c9:d3:b7:32:7b:8c:be:3a:53:7b:9e:6d:5b:
a8:0d:81:86:89:d0:68:e2:a0:1d:c0:df:07:4f:58:
6c:1a:19:0f:3d:1a:ec:c4:e4:41:26:91:d9:0d:b0:
20:38:a6:88:1d:c5:40:60:4f:fe:4c:b6:60:97:e5:
db:ed:39:e5:03:ab:71:e3:25:b1:53:3f:79:09:ee:
40:73:e5:1e:69:6b:aa:a0:ee:ce:dc:85:dc:a5:0b:
15:11:4f:3e:c7:37:e4:e6:18:e1:e8:c1:6f:a5:b9:
11:59:e7:06:8a:25:06:a8:d4:0d:51:bb:30:42:19:
f7:b6:84:ad:0d:8a:a6:d5:68:f6:01:6d:33:ba:42:
80:ab:68:fb:da:2d:00:ca:8b:c9:91:93:b3:8f:c2:
19:00:a4:5f:42:07:1d:9c:9d:fb:73:9b:a9:d8:c4:
77:f0:6f:96:eb:62:e1:c5:c9:c8:15:36:06:d8:82:
4f:07:83:e6:cf:a8:b7:39:d2:9c:8d:23:ad:e7:72:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:D4:08:46:7B:D9:D4:5A:4C:6E:FE:FD:27:29:DA:22:48:BB:12
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:35:29:89:ed:c0:aa:e8:ec:69:e4:01:c6:fe:09:f0:cd:
4f:39:e1:7f:01:bc:c7:ab:2c:83:b4:db:1a:81:44:01:85:d4:
27:52:db:14:a6:2d:a0:01:98:4c:18:fc:49:d3:81:1d:85:00:
72:36:a8:8a:98:93:d8:1a:45:f6:bc:2e:ad:d0:d0:8c:88:ff:
f5:a6:70:17:3d:91:1d:7e:e5:07:8d:5b:a1:6a:64:10:6c:44:
97:5d:90:d9:c2:52:3b:42:b0:81:1b:ea:54:47:73:4f:a9:c8:
62:71:d1:80:07:9e:d4:e9:3f:59:a3:67:d1:f9:37:90:fb:36:
1e:b1:26:e2:11:2f:ad:c5:ab:d1:3b:59:b8:f0:0f:a6:2c:b3:
f7:14:18:c1:be:28:82:9a:ba:7d:4e:0c:8a:06:ec:4d:17:c6:
c6:8d:a0:5f:b0:70:66:51:94:de:2f:7b:dc:f4:25:83:8b:91:
a4:06:b5:a1:ef:d5:a1:d6:38:2c:7f:6e:68:90:95:9a:35:76:
cc:ad:85:fa:4e:75:a3:c8:d9:a6:d4:cc:18:9d:be:c5:ee:4a:
45:a1:bb:ad:dd:7b:92:1f:ef:4e:cf:59:e5:f3:d5:e1:12:9b:
6f:4a:1d:76:b8:9a:fc:cf:35:41:50:8d:a9:9d:72:e1:a4:ca:
66:09:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:17 2025 by rpki-client