Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: ZE58/2cHjGFAu5r6eSbHWlEGi3qz1uzAR3jxrDw+OdI=
Subject key identifier: 5A:33:27:D1:1C:33:62:31:DE:C3:CE:6E:41:03:F3:70:11:A5:58:14
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 019892C999AD89E72FD50AAC312173597749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 1279
Signing time: Sun 10 Aug 2025 07:02:22 +0000
Manifest this update: Sun 10 Aug 2025 07:02:22 +0000
Manifest next update: Mon 11 Aug 2025 07:02:22 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: L6pzCpThwRPE/AlPCfyuojfOaQnH9ssZkB3PxrNSCb8=)
2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:99:ad:89:e7:2f:d5:0a:ac:31:21:73:59:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Aug 10 07:02:22 2025 GMT
Not After : Aug 11 07:02:22 2025 GMT
Subject: CN=5a3327d11c336231dec3ce6e4103f37011a55814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:64:62:47:43:0a:48:5c:9b:9a:31:85:ee:
34:5e:77:01:a3:43:b4:22:04:36:32:f7:ec:e9:24:
9c:1a:49:ee:85:5a:1c:11:72:44:ef:53:3b:aa:dd:
0a:61:84:60:fb:96:11:ca:e5:d6:c4:ef:35:7d:3e:
6e:07:ab:ff:b2:52:11:44:65:67:af:ab:5a:9c:c8:
8d:53:bc:1a:2f:2a:53:85:5e:24:72:73:4e:e5:56:
58:c1:8d:7d:a6:b4:f5:e1:5b:48:19:30:e5:8a:81:
ef:e2:a6:0e:02:34:63:d3:f0:fa:5e:61:03:89:90:
96:09:97:65:d4:e4:25:90:ee:d3:2b:48:69:5e:6e:
13:06:fb:28:89:ee:6a:6c:b4:d1:b3:84:36:e1:6d:
90:df:5c:d3:2c:7e:ab:94:8f:e2:de:42:6c:8e:9e:
f3:27:15:1c:31:7a:b9:cd:58:91:c6:33:f7:4a:b3:
fa:1f:82:05:49:d9:26:3d:50:36:e4:2e:0a:68:80:
0a:08:dd:f1:96:2e:7f:d9:dd:f4:e6:5a:6c:92:b6:
a1:66:2b:83:2f:26:39:5e:f6:a1:f0:b8:1f:90:33:
a3:a7:29:26:af:f9:c6:c7:22:2d:0a:e2:ce:ec:7a:
98:37:c3:c4:fd:70:6b:c1:04:dc:80:8a:32:84:cd:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:27:D1:1C:33:62:31:DE:C3:CE:6E:41:03:F3:70:11:A5:58:14
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:60:dd:c4:07:53:15:46:7d:66:15:de:be:07:c3:34:a8:
e3:e7:84:04:44:f8:4c:24:00:f0:33:98:f2:6c:35:cd:e4:b6:
c9:33:c8:0b:13:5c:a4:a6:b6:3e:b9:ae:d7:24:3b:0f:85:f4:
3b:32:6d:75:00:38:f5:66:ac:b4:6c:36:a2:b0:17:c3:87:83:
56:8e:93:32:16:b6:17:24:55:44:11:57:7f:a7:f8:f9:e8:a2:
3f:80:29:54:ef:95:98:c1:cb:95:5b:08:1b:12:21:2d:01:00:
4e:11:8b:dd:e4:c7:71:d1:ba:96:d2:19:9b:dd:f1:6a:ec:d9:
c5:27:f9:cc:20:75:ea:6c:5a:46:b1:ea:82:05:6b:3d:60:c2:
cf:ba:27:fe:08:08:ff:e5:f4:ce:da:76:83:64:3f:8d:af:c9:
87:82:00:2b:ff:55:02:fc:2e:69:a0:25:6d:59:32:3b:df:f3:
b3:b5:66:cf:51:21:24:79:b3:35:20:1d:b9:95:cf:52:6c:ab:
b1:e5:5b:bd:fb:2d:2f:91:e2:7a:85:e4:59:72:b9:e1:10:c9:
f9:32:82:2e:4a:fd:dd:c9:fb:b1:71:b7:df:78:a7:f1:58:3c:
a6:2d:73:5c:39:7f:b1:5f:c3:85:76:86:44:03:e7:b7:c8:69:
3e:e3:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:26 2025 by rpki-client