Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: Vq3U8KMEjXnQnzEZl+lw2pStz+qc6x2G/o9nO8KoPUM=
Subject key identifier: C0:95:4D:A0:5B:E8:DD:02:EE:57:D9:58:22:9F:CC:9E:EA:A2:48:B4
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 01989CA6B74560687F4CB51FE48BB585B8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 05:00:28 +0000
Manifest this update: Tue 12 Aug 2025 05:00:28 +0000
Manifest next update: Wed 13 Aug 2025 05:00:28 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: ZXbCaMcekFJuSqCStZ9345BRGa4fXaZvNExFt4SMplU=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:b7:45:60:68:7f:4c:b5:1f:e4:8b:b5:85:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Aug 12 05:00:28 2025 GMT
Not After : Aug 13 05:00:28 2025 GMT
Subject: CN=c0954da05be8dd02ee57d958229fcc9eeaa248b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:14:26:33:87:cf:27:d4:9e:49:ec:b6:f6:
b7:93:97:c4:b0:79:94:e5:9f:53:27:29:e8:31:81:
45:5c:0b:6d:70:16:df:ff:95:38:6a:1e:0d:15:7b:
3c:e1:c6:4c:8b:7c:10:8f:0e:ab:34:4c:3a:e0:17:
8f:be:60:82:c6:f9:da:1b:2c:2a:87:bc:08:c2:0e:
bf:a1:5d:2e:65:90:76:44:e1:e3:f3:c2:3b:98:35:
c3:8d:b2:d0:33:aa:52:3b:50:76:eb:96:fc:54:f9:
90:30:9e:c4:35:a5:35:37:6c:ea:1f:ee:7e:b6:2e:
e4:9b:50:f5:00:0c:93:ec:6a:c9:d7:5a:62:07:8b:
47:7e:b8:7f:b3:5e:f4:31:a1:40:a2:9d:48:70:5e:
cc:2d:19:9b:43:e2:5d:22:9f:00:02:41:5e:32:8b:
c9:b1:a8:af:3f:49:1b:50:73:d4:41:34:16:9c:b2:
3d:80:d2:91:b7:30:56:49:42:88:68:bb:1e:6e:58:
fb:42:92:73:43:1e:8e:51:27:82:85:43:28:99:65:
03:62:79:59:83:a9:16:81:e0:4e:69:fc:ae:a9:da:
5f:ce:92:eb:b5:92:f8:22:2a:d0:c1:98:7e:16:cd:
52:32:95:8c:e9:36:15:0c:ee:a7:bd:b5:7a:38:c5:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:4D:A0:5B:E8:DD:02:EE:57:D9:58:22:9F:CC:9E:EA:A2:48:B4
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:51:c2:cf:e3:88:a5:07:4e:e7:8d:45:d9:aa:ae:80:12:
13:b6:43:0e:55:dc:f2:4b:d0:3b:cc:5e:39:8e:83:75:9e:18:
17:97:45:f9:05:f6:29:48:cc:f4:a3:58:88:7e:a7:05:2b:50:
bd:13:03:d4:83:f6:0f:04:cf:6e:6e:ab:9f:e5:6d:69:a6:d9:
ab:60:fc:49:1c:7d:b4:2c:5b:b9:8d:b0:49:dd:20:2c:82:ad:
d2:7e:9f:24:d9:a8:d0:de:71:8a:2f:d0:9e:93:19:dd:10:04:
fc:f0:72:e7:80:0c:29:bc:56:97:51:a3:14:87:07:48:b2:fa:
73:4b:85:3c:06:c7:bc:f0:0e:1d:bc:b5:b6:e9:cc:3d:43:a2:
e1:de:43:d2:3e:61:10:90:29:45:b7:fd:b5:d1:ae:fb:93:68:
6a:fe:dc:14:89:1d:69:c7:d1:87:ac:5d:05:43:3a:91:51:00:
4e:bf:01:bf:fc:d1:0e:6e:c0:90:33:45:bf:44:43:05:f4:62:
32:23:6b:59:ad:cc:a7:d1:4e:6a:20:48:6e:67:2a:e1:7d:6d:
ce:c6:3f:11:36:93:74:80:6f:d0:85:49:53:f8:d3:44:54:3a:
b0:29:38:cf:3c:7d:96:21:15:43:b3:3d:eb:47:da:d5:29:88:
ea:8b:74:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZicprdFYGh/TLUf5Iu1hbjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTBlOWEzZDIwY2ZhYzZjYmUzY2NmNzRhYjU3ODRhNzc2
ODI5MzMwHhcNMjUwODEyMDUwMDI4WhcNMjUwODEzMDUwMDI4WjAzMTEwLwYDVQQD
EyhjMDk1NGRhMDViZThkZDAyZWU1N2Q5NTgyMjlmY2M5ZWVhYTI0OGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4QUJjOHzyfUnknstva3k5fEsHmU
5Z9TJynoMYFFXAttcBbf/5U4ah4NFXs84cZMi3wQjw6rNEw64BePvmCCxvnaGywq
h7wIwg6/oV0uZZB2ROHj88I7mDXDjbLQM6pSO1B265b8VPmQMJ7ENaU1N2zqH+5+
ti7km1D1AAyT7GrJ11piB4tHfrh/s170MaFAop1IcF7MLRmbQ+JdIp8AAkFeMovJ
saivP0kbUHPUQTQWnLI9gNKRtzBWSUKIaLseblj7QpJzQx6OUSeChUMomWUDYnlZ
g6kWgeBOafyuqdpfzpLrtZL4IirQwZh+Fs1SMpWM6TYVDO6nvbV6OMVHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCVTaBb6N0C7lfZWCKfzJ7qoki0MB8GA1UdIwQY
MBaAFBjg6aPSDPrGy+PM90q1eEp3aCkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt
OTVhYjgxYjc3NjkxLzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx
LzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxdRws/j
iKUHTueNRdmqroASE7ZDDlXc8kvQO8xeOY6DdZ4YF5dF+QX2KUjM9KNYiH6nBStQ
vRMD1IP2DwTPbm6rn+VtaabZq2D8SRx9tCxbuY2wSd0gLIKt0n6fJNmo0N5xii/Q
npMZ3RAE/PBy54AMKbxWl1GjFIcHSLL6c0uFPAbHvPAOHby1tunMPUOi4d5D0j5h
EJApRbf9tdGu+5Noav7cFIkdacfRh6xdBUM6kVEATr8Bv/zRDm7AkDNFv0RDBfRi
MiNrWa3Mp9FOaiBIbmcq4X1tzsY/ETaTdIBv0IVJU/jTRFQ6sCk4zzx9liEVQ7M9
60fa1SmI6ot0Pw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:46:16 2025 by rpki-client