Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: gp0Ojjp+rMH1JYVhcaOk+RNL1e7kZJqpgdoSSHhS+6I=
Subject key identifier: 32:BF:E6:67:5B:51:3B:0F:28:F2:F8:EF:B5:CD:89:76:44:86:66:47
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 01987B9C4F72E2671D31D59EFFBB583AF402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 05D7
Signing time: Tue 05 Aug 2025 19:01:38 +0000
Manifest this update: Tue 05 Aug 2025 19:01:38 +0000
Manifest next update: Wed 06 Aug 2025 19:01:38 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: WJ21j/62+iKFynpyx13Qq81ql2nNt6dTA7v4439IE8I=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:4f:72:e2:67:1d:31:d5:9e:ff:bb:58:3a:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Aug 5 19:01:38 2025 GMT
Not After : Aug 6 19:01:38 2025 GMT
Subject: CN=32bfe6675b513b0f28f2f8efb5cd897644866647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:dc:d9:a6:60:15:0d:3a:62:2f:3d:80:75:
fe:bd:a6:3a:05:e9:25:aa:ca:be:69:27:04:7d:4f:
4a:90:5f:a8:a8:de:df:db:a9:d9:2d:0f:94:d1:43:
02:80:ee:ef:83:d9:60:e6:67:e7:2f:2b:6d:b8:e4:
03:eb:d0:b3:15:3b:6c:a3:c6:b9:d9:05:6e:f1:ad:
71:cd:1f:cd:8c:2b:06:d2:f5:75:81:ad:81:ff:5e:
b8:24:d1:16:0d:09:c7:85:58:ff:a4:53:a7:4a:89:
71:e9:51:50:4f:dd:19:77:61:f8:25:0b:a8:74:bc:
0c:12:d3:a7:82:27:4d:00:0a:24:98:1b:74:41:31:
dd:02:fe:c0:46:5c:18:63:88:41:f3:c8:bd:4c:a0:
22:a5:97:1e:95:47:87:29:c5:f4:ca:3b:61:81:67:
80:2e:3b:93:34:5c:f4:43:e9:7a:5b:6a:7f:46:62:
b5:31:21:d8:52:bd:65:45:c7:40:60:97:6d:5c:b9:
20:86:4b:a3:33:dd:00:cd:ad:92:48:71:02:5b:a9:
df:ae:52:9b:da:eb:0e:15:7e:48:bd:66:93:63:e2:
90:3b:ec:23:66:7c:53:93:83:2d:5e:f8:cc:6e:92:
eb:1d:34:1f:42:5a:4a:1f:fa:b5:49:6e:cb:3e:fc:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:E6:67:5B:51:3B:0F:28:F2:F8:EF:B5:CD:89:76:44:86:66:47
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:66:ce:48:45:36:57:c9:70:d3:4e:83:30:f8:a8:67:c5:
b2:ff:55:02:06:5a:2e:b7:e4:5e:0d:d1:c7:29:5b:05:70:69:
18:aa:71:bd:3b:92:71:49:1a:81:e0:58:38:22:f0:6b:26:c8:
58:c8:f4:bf:01:5f:02:36:3a:18:0e:0a:a3:c8:e2:25:90:34:
db:4a:63:2f:c9:5f:7f:b0:ca:b0:19:29:8f:bb:3a:52:f7:ea:
e8:bc:d0:b5:2e:b6:ae:26:c2:65:68:c7:2f:1f:01:e2:7b:5f:
40:9d:ce:23:26:42:5b:8e:8b:05:b9:1e:01:a9:83:57:bc:e3:
f7:ce:8c:21:99:bd:f7:c2:5c:67:f8:59:a2:75:54:9a:9b:e1:
e6:bc:5a:93:df:11:34:3c:d1:ee:43:f3:37:69:58:b9:54:15:
40:a8:da:f6:84:d6:3c:a8:b5:fd:88:d6:73:89:82:cd:56:d4:
98:12:ce:ac:eb:8b:11:10:ee:2e:85:a6:a5:a5:d3:c9:dc:fc:
c8:e2:a1:76:d8:6c:94:72:44:b0:05:f8:64:74:f6:f8:fa:eb:
24:ee:35:cc:f5:60:dc:ae:08:07:10:ea:69:40:fa:9c:c0:80:
dc:59:fd:55:11:54:d0:4a:f3:25:8c:7a:2b:37:d0:21:78:5f:
ab:43:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:14 2025 by rpki-client