Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier: MdgzeVm8lbwMsfNO0+iKE8/7zhgUZaD5ghJdHcwFKHU=
Subject key identifier: 9F:B5:CE:F7:4A:4F:D1:4D:D4:65:56:FB:B7:E0:49:E2:BC:34:5B:EF
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 019A4EF51B8E6BA72DE99C9D39621059BD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: 6brDoEBgIwHpi2Lb+VHm50fCtwUxC1+Hsby7lGb9zPU=)
2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1b:8e:6b:a7:2d:e9:9c:9d:39:62:10:59:bd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=9fb5cef74a4fd14dd46556fbb7e049e2bc345bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:6f:c8:36:59:fa:80:4f:b0:48:26:35:38:
0e:c4:29:44:6b:58:fa:0f:3c:5e:d8:84:e6:a3:7b:
5f:9a:b0:57:b2:a6:14:a4:d0:81:0f:8d:53:24:06:
d4:d4:89:ff:cb:b1:80:7b:0a:3f:dc:e4:18:40:5c:
42:2b:28:20:a1:e1:18:72:c5:68:36:c5:f8:6e:05:
c6:23:61:f2:8c:be:42:8a:59:ac:8b:24:51:b3:0b:
8a:b3:cf:6a:58:53:a2:64:6b:75:b8:b5:37:67:f7:
c9:a0:54:d3:8e:56:b7:db:82:ae:27:e1:48:ec:92:
93:b9:37:80:26:88:19:c2:9d:80:ef:aa:5e:95:8e:
97:1d:63:ac:86:e9:61:27:1a:b5:cd:7e:06:79:8e:
4e:75:b3:48:64:6f:f6:ee:67:22:1c:bd:20:82:c6:
74:c4:45:f7:9c:f3:fd:93:0a:f7:e2:42:be:b4:f1:
84:a2:0b:58:46:5b:2d:d1:1f:eb:5c:8b:6a:e1:45:
58:3a:6b:17:d8:6c:f0:b5:ad:93:4d:19:83:49:59:
6a:a4:15:44:30:95:4d:40:42:ce:a8:a7:ba:68:83:
bc:e6:25:24:e5:9e:fa:df:e0:16:a9:6a:ab:ba:6f:
3e:62:06:4d:ca:6b:d8:96:89:3f:f7:15:ba:19:6c:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:CE:F7:4A:4F:D1:4D:D4:65:56:FB:B7:E0:49:E2:BC:34:5B:EF
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d2:2e:5f:be:90:2e:e5:fb:2c:f6:4b:27:8a:04:54:36:93:
35:e9:c4:64:7c:50:e2:33:50:54:42:6c:fb:6b:d2:f0:90:fa:
d8:7f:22:5e:4d:c5:6b:53:9a:d8:19:98:55:e5:a4:60:e6:72:
51:87:15:91:13:79:ba:61:c4:0a:88:97:14:dc:3b:c4:c0:b8:
16:a7:ad:c8:c6:8d:b7:ce:b4:2d:67:5e:11:57:ea:f0:df:91:
e6:c3:5b:c9:4f:37:77:e9:01:5c:7c:94:36:c4:af:19:b6:e8:
5b:a7:0b:e7:81:a6:04:55:9d:0a:27:c8:4d:83:03:bb:0e:85:
94:e9:2a:92:4c:dd:03:70:2d:27:a8:5c:9c:38:d6:a1:9f:51:
18:95:22:f0:ae:c9:7c:60:6d:72:1c:04:48:4d:c7:42:02:0e:
0c:7b:55:2a:32:39:73:69:b4:c0:15:a7:70:74:0a:75:95:7c:
29:73:f4:5e:f5:78:49:93:20:79:6b:e4:65:5a:cd:e8:a3:9a:
c2:e0:9f:55:b5:45:2c:70:0a:99:03:11:d1:6f:0e:a5:57:09:
87:39:8b:6d:9d:45:8c:bd:17:c9:b9:08:65:cc:70:2b:e3:dc:
c4:81:55:54:f6:a8:ee:23:b9:7a:85:80:76:db:e9:33:4f:40:
70:90:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:26 2025 by rpki-client