Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: U1RIVgPqNzKfo0i7WE/220HGb7bHvnWNJ8SjabrKcHY=
Subject key identifier: 1B:9C:9D:62:CB:10:45:FF:3F:C3:7E:F6:4E:5F:C2:02:7D:4D:DC:DD
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01987E2E99CF62454A6B7C46CF5F6328E52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 1367
Signing time: Wed 06 Aug 2025 07:00:39 +0000
Manifest this update: Wed 06 Aug 2025 07:00:39 +0000
Manifest next update: Thu 07 Aug 2025 07:00:39 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: NN2sTLKO8k/qwhEi3ESGIQFDuSSxtc/PlKqwrdaVHRA=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:99:cf:62:45:4a:6b:7c:46:cf:5f:63:28:e5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Aug 6 07:00:39 2025 GMT
Not After : Aug 7 07:00:39 2025 GMT
Subject: CN=1b9c9d62cb1045ff3fc37ef64e5fc2027d4ddcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:f0:d3:6c:ff:d4:cc:eb:0b:c9:f3:a3:47:
a8:42:84:13:e1:59:34:bb:ca:9e:2e:16:c8:74:26:
94:ce:e5:7f:75:92:f4:aa:9d:5b:5a:22:e7:4d:10:
f8:7f:63:22:58:bd:ac:54:f9:9f:7e:aa:ad:da:70:
32:09:69:69:0b:61:4d:33:d3:37:51:10:6b:4c:1c:
b4:55:2f:94:52:42:72:c0:40:01:3f:77:21:36:59:
d8:95:0b:59:f7:b6:2f:9b:6c:b8:11:e0:44:3b:7c:
d0:63:07:44:68:45:1a:4d:ab:5b:98:5d:91:9b:24:
51:46:0e:50:2a:14:ab:01:eb:5b:9e:9a:c2:7c:d3:
4d:a6:15:d8:41:10:39:7e:ff:2f:98:b6:11:0c:96:
88:c9:26:ce:25:67:59:d9:26:b8:ce:46:b7:cf:39:
cb:d6:eb:01:82:3b:ac:b8:26:33:15:d0:73:9e:d2:
31:23:a2:68:18:5c:fa:b4:60:ce:59:af:6b:37:5b:
38:0d:47:c9:a3:bf:cd:48:3e:77:5b:7e:64:6d:00:
d7:cc:f6:45:45:3d:79:d4:07:13:f1:f4:13:eb:39:
2e:94:e5:c2:46:7e:d1:c3:35:ee:5a:e3:ca:82:fa:
05:6b:18:4f:ef:0c:fb:68:3e:b0:1a:9e:af:f9:5d:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:9D:62:CB:10:45:FF:3F:C3:7E:F6:4E:5F:C2:02:7D:4D:DC:DD
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:fb:53:4f:d0:cc:91:ee:ef:7f:66:18:ec:c5:d9:c0:79:
dd:59:4c:54:10:30:81:dc:d5:99:cc:cd:e8:56:fb:be:b4:03:
e2:6f:2e:12:d5:a3:6a:02:a3:83:c3:bb:e0:2e:90:90:c1:cf:
9b:8c:6a:05:2e:8a:8b:c8:71:30:4a:6e:8d:ad:43:e2:bf:f6:
f8:9b:f8:56:66:b7:e5:be:99:3c:cd:43:bd:bc:2c:e3:b8:a1:
3a:ce:eb:d3:d0:b3:da:25:6e:62:ce:3b:e0:98:2f:a0:b2:0d:
91:ef:50:62:b3:88:75:46:0b:00:6d:80:b0:36:fb:5d:2e:91:
ad:83:dc:ce:4a:5f:c7:87:61:3e:11:ac:73:ff:42:48:13:ee:
3b:14:40:0e:2f:00:2e:2a:c0:e8:f6:4b:01:fa:99:8b:c9:9b:
b9:3a:dc:9d:32:08:ef:53:58:74:a1:5a:56:2a:6e:ab:05:4f:
35:b7:48:e3:fe:ab:aa:6e:09:70:f3:fc:26:bb:9a:80:5d:44:
fd:e4:13:6f:1c:4b:96:10:4a:8d:84:b5:c0:98:ba:d9:8f:96:
44:91:d9:da:5c:18:37:67:11:a4:e2:5b:ec:97:a1:16:d4:35:
d9:e2:1f:b9:68:af:4e:0b:9d:21:76:ea:10:bf:44:4e:c4:8f:
3f:23:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:11 2025 by rpki-client