Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: TYuSAyrJCqALkmiUvB2gyla6pQVNhp9jfbKHyaUj4PQ=
Subject key identifier: 12:05:63:10:72:C5:84:7B:AE:89:DE:CF:7A:92:BF:68:DB:EA:F8:41
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 019773089F42282B476BB01832D192225972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 054E
Signing time: Sun 15 Jun 2025 10:00:34 +0000
Manifest this update: Sun 15 Jun 2025 10:00:34 +0000
Manifest next update: Mon 16 Jun 2025 10:00:34 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: fFk3+nU26ORW0IkJoKFEyzTlucnf7NqkQ9WjtDTgLT4=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:9f:42:28:2b:47:6b:b0:18:32:d1:92:22:59:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Jun 15 10:00:34 2025 GMT
Not After : Jun 16 10:00:34 2025 GMT
Subject: CN=1205631072c5847bae89decf7a92bf68dbeaf841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:6a:bc:3a:16:fb:35:cc:66:f3:a7:4c:e5:
03:37:b2:b2:8b:99:ed:71:5a:89:a2:2d:a7:44:b2:
cb:2b:c6:5b:dc:6d:62:53:49:01:b6:8b:d7:60:c8:
f3:20:6c:fd:44:e3:53:ff:e4:d8:63:37:cf:97:3d:
98:7f:91:80:6e:ee:0b:76:a3:e8:84:d5:3e:5c:bb:
9f:7f:6f:7d:8c:ba:64:b5:a7:8d:96:d8:ba:fe:78:
97:81:48:2c:8a:c5:58:e7:f4:2e:6b:45:80:c4:9c:
90:dc:3f:c3:1e:42:de:1f:4f:bd:88:2a:2c:4b:64:
93:9b:a7:3a:65:b5:36:68:17:56:b6:a8:19:c4:f8:
f0:47:66:2c:5e:18:64:31:0d:c2:07:6b:3a:1c:51:
06:9c:fd:f2:4f:c6:e8:40:75:00:15:19:85:7e:95:
8f:f3:b8:5a:08:71:98:56:b4:8d:e7:c4:9d:da:00:
36:9a:83:36:66:a9:db:3e:65:ee:77:ac:de:98:0b:
09:10:21:37:e9:e5:f8:de:97:43:9c:49:44:66:0f:
45:ea:99:26:46:99:ac:a7:36:90:f0:71:77:ce:0d:
af:2d:18:9b:83:5b:e0:3b:cf:f4:7e:7b:04:80:ae:
0b:6a:ba:64:8c:48:df:50:1a:71:74:f3:cf:35:32:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:63:10:72:C5:84:7B:AE:89:DE:CF:7A:92:BF:68:DB:EA:F8:41
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2e:0a:cc:5e:61:20:34:56:0c:15:e1:4b:fc:0d:1e:98:9c:
46:de:66:56:86:1b:f6:c2:23:85:0f:9c:e4:55:29:79:17:09:
66:b1:22:51:90:03:65:3e:e8:c4:b2:05:81:03:e0:99:8f:32:
c7:47:9b:cf:45:4c:66:2f:5a:35:e3:e6:f5:15:74:4c:f3:c3:
3d:50:5d:70:e1:0d:cd:16:0c:18:df:33:77:29:a1:b0:d1:93:
e9:30:b1:e3:2d:1d:59:61:ae:2e:a5:13:af:46:6f:b1:0d:bf:
0e:31:91:69:35:a3:1d:08:73:21:8c:11:11:10:05:27:f1:b4:
d8:19:23:31:45:43:56:f8:dd:28:6b:b4:90:c1:7b:c6:25:e8:
ef:1e:27:97:a2:6b:60:3b:54:b9:cf:09:c5:c0:6e:70:b7:63:
4a:80:bd:4b:15:04:27:de:d9:54:4d:f3:f8:db:fd:72:1b:87:
86:d1:a0:fd:d6:71:ce:ee:10:cb:3c:16:19:0a:2b:21:8f:4e:
91:63:f2:af:ae:96:d8:59:c9:eb:54:ee:bb:74:0e:bd:a6:ae:
cf:b5:61:70:21:ff:95:11:1c:a4:95:1e:a1:75:2a:82:9f:98:
10:43:20:02:24:0e:de:9b:d9:ae:2d:0b:f7:fb:f6:8f:56:02:
68:9b:35:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCJ9CKCtHa7AYMtGSIllyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODkyMmQzNDgxMzA4ZGJkNGMyYWI2ZTcwZWFkYTlmNzVm
NmRiNjgwHhcNMjUwNjE1MTAwMDM0WhcNMjUwNjE2MTAwMDM0WjAzMTEwLwYDVQQD
EygxMjA1NjMxMDcyYzU4NDdiYWU4OWRlY2Y3YTkyYmY2OGRiZWFmODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRqvDoW+zXMZvOnTOUDN7Kyi5nt
cVqJoi2nRLLLK8Zb3G1iU0kBtovXYMjzIGz9RONT/+TYYzfPlz2Yf5GAbu4LdqPo
hNU+XLuff299jLpktaeNlti6/niXgUgsisVY5/Qua0WAxJyQ3D/DHkLeH0+9iCos
S2STm6c6ZbU2aBdWtqgZxPjwR2YsXhhkMQ3CB2s6HFEGnP3yT8boQHUAFRmFfpWP
87haCHGYVrSN58Sd2gA2moM2ZqnbPmXud6zemAsJECE36eX43pdDnElEZg9F6pkm
RpmspzaQ8HF3zg2vLRibg1vgO8/0fnsEgK4LarpkjEjfUBpxdPPPNTKgRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIFYxByxYR7ronez3qSv2jb6vhBMB8GA1UdIwQY
MBaAFBqJItNIEwjb1MKrbnDq2p919ttoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgt
N2FlMjYzOTIyODIyLzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgtN2FlMjYzOTIyODIy
LzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC4KzF5h
IDRWDBXhS/wNHpicRt5mVoYb9sIjhQ+c5FUpeRcJZrEiUZADZT7oxLIFgQPgmY8y
x0ebz0VMZi9aNePm9RV0TPPDPVBdcOENzRYMGN8zdymhsNGT6TCx4y0dWWGuLqUT
r0ZvsQ2/DjGRaTWjHQhzIYwRERAFJ/G02BkjMUVDVvjdKGu0kMF7xiXo7x4nl6Jr
YDtUuc8JxcBucLdjSoC9SxUEJ97ZVE3z+Nv9chuHhtGg/dZxzu4QyzwWGQorIY9O
kWPyr66W2FnJ61Tuu3QOvaauz7VhcCH/lREcpJUeoXUqgp+YEEMgAiQO3pvZri0L
9/v2j1YCaJs1Jg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:32 2025 by rpki-client