Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: QSI8TXwAc0XP77xYs66RnSctXOXktPfDYjOtfrvH2r8=
Subject key identifier: FC:87:9D:C3:78:7F:13:2F:A0:75:25:AA:43:02:91:BF:40:B2:71:50
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 019A33EC53646A9176965E5A3D1CD8DE71D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 06BB
Signing time: Thu 30 Oct 2025 07:01:56 +0000
Manifest this update: Thu 30 Oct 2025 07:01:56 +0000
Manifest next update: Fri 31 Oct 2025 07:01:56 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: Z/KpBoAd9WFbQiQbij/3/O/a32TLLBwxMXEXL6+3GPk=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:ec:53:64:6a:91:76:96:5e:5a:3d:1c:d8:de:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Oct 30 07:01:56 2025 GMT
Not After : Oct 31 07:01:56 2025 GMT
Subject: CN=fc879dc3787f132fa07525aa430291bf40b27150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:7f:01:6d:d1:1d:73:a7:af:2e:b7:33:e5:
a8:e1:e3:25:7d:ed:fd:4f:f2:39:58:f4:e2:d7:02:
9f:77:1c:ce:88:d3:6b:d3:ea:77:ec:d1:b3:c4:73:
34:36:aa:f2:81:ee:ed:e2:6b:c9:7a:c2:46:4c:49:
42:60:f6:73:72:b8:44:30:fa:de:0d:43:b6:d2:97:
fe:20:f6:ca:87:de:15:bb:0e:53:31:6b:5e:73:2a:
96:b2:4a:de:f5:48:b9:47:22:b2:f7:52:3e:9c:19:
01:37:7b:4b:a2:9b:dd:86:1a:62:9f:51:30:54:4c:
1d:d3:37:02:d9:ae:f1:e7:f9:f2:56:06:38:3f:32:
c7:ba:e2:96:51:a0:7e:ed:0a:0e:4e:3b:db:9c:fc:
4f:4b:75:54:9a:41:a8:59:15:21:0c:90:58:3c:c8:
fb:d5:50:21:5c:68:53:2a:1a:36:c2:17:55:70:1d:
2c:a6:67:62:ce:e9:fa:16:49:40:9a:d0:f8:7b:34:
2f:84:14:81:cc:de:9b:74:4b:c5:fa:e5:24:27:8a:
b3:22:89:2d:87:d0:0b:e4:0b:e5:f5:0a:1c:1f:ae:
47:bc:07:1a:e5:18:e9:41:cc:ff:b4:d4:7e:37:c9:
06:c1:d0:03:6f:9d:23:b8:1a:bb:70:1e:f3:4f:b5:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:9D:C3:78:7F:13:2F:A0:75:25:AA:43:02:91:BF:40:B2:71:50
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:32:9f:34:35:0e:77:00:fb:51:65:82:60:bd:e3:13:81:
46:3f:b5:e3:82:6b:b9:65:24:7a:a1:3e:12:3b:52:40:ab:eb:
a0:c2:fb:68:c6:7b:b5:ca:69:e2:10:2c:4b:61:ea:0d:c9:01:
b0:f9:d6:66:e9:45:c0:0f:4e:84:d2:ce:2f:22:fa:62:17:d1:
5c:08:ac:94:02:c1:8a:63:78:f1:f3:62:e6:68:b6:8a:cb:e9:
62:2a:d0:49:da:2e:e9:0f:b2:38:8e:33:26:e6:79:f9:28:01:
bf:62:b2:71:42:b7:53:b1:b0:e1:19:17:8e:f5:56:6e:d2:10:
fa:00:33:6b:19:2f:f6:0e:58:e6:79:77:68:4f:0b:cc:3f:9f:
21:14:d3:60:9b:c8:e1:2d:ee:52:fc:dd:b9:24:91:05:09:5a:
b3:0b:3b:88:0c:de:c6:b6:ba:af:0e:7e:5c:c9:55:6a:62:74:
a6:7f:fb:6a:02:c1:94:61:a2:c2:c5:49:c7:b8:f2:c7:e5:97:
a4:e7:20:04:2d:98:e4:24:77:da:6a:78:f6:a0:b2:37:ff:97:
ba:ea:c5:77:ae:6e:4b:07:8c:82:41:15:2a:bf:10:65:8f:e4:
cd:fa:52:32:a3:e1:a1:3e:66:7f:82:91:e1:7b:d1:fc:cc:20:
2b:fb:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:14 2025 by rpki-client