Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: VzPQTTMq53IatVJc3kHnh/3yrpTUNR2XEqApeJDru/o=
Subject key identifier: 95:B9:90:E8:75:A7:F5:CC:21:AA:7D:74:31:8F:9B:FF:06:A3:A0:44
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019A5375AE8DF0E2EC80CBB66AF26ACFC034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 145A
Signing time: Wed 05 Nov 2025 10:00:12 +0000
Manifest this update: Wed 05 Nov 2025 10:00:12 +0000
Manifest next update: Thu 06 Nov 2025 10:00:12 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: j3YUIRtm9AXhmydD+RmNMD00w+9xv/Ask+bChkW2NvI=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ae:8d:f0:e2:ec:80:cb:b6:6a:f2:6a:cf:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Nov 5 10:00:12 2025 GMT
Not After : Nov 6 10:00:12 2025 GMT
Subject: CN=95b990e875a7f5cc21aa7d74318f9bff06a3a044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:f8:ea:e5:99:3d:88:b1:a0:6c:a2:05:fe:
49:b4:b7:51:00:25:93:af:df:3d:2d:87:c1:04:66:
67:d8:fe:0f:18:b0:cc:79:d6:f1:94:2c:64:63:c0:
ce:83:b2:28:22:96:6d:ec:b9:89:85:ff:47:83:54:
06:9c:9f:45:de:22:d8:c0:14:52:43:98:ca:bc:67:
c9:a1:d8:94:fc:1f:9d:57:d7:64:dd:4d:f7:c0:e5:
b4:80:25:39:66:bb:ee:6e:09:3b:31:9e:d6:4a:db:
66:39:db:38:89:04:14:fc:60:0e:d4:b4:00:ed:00:
9a:7c:37:51:a8:e0:66:9f:4e:38:c0:bc:66:6b:5a:
47:5c:10:da:69:e5:2c:9e:e1:db:3d:54:a8:0f:34:
95:30:c0:bb:60:11:0d:fc:7a:e9:51:8b:8f:72:e3:
be:20:88:0f:3b:9c:49:29:cf:6b:25:da:4f:57:71:
ca:2e:dc:f9:42:8b:d7:b6:3f:87:fb:43:da:dd:64:
56:ce:a6:65:35:5a:12:e5:eb:ec:29:b4:bc:7b:25:
73:e1:2d:63:dd:c4:1e:f0:25:1c:a5:2b:5a:a5:e7:
c9:54:40:d9:b3:4a:40:2b:e3:27:e5:09:19:e7:b0:
8c:ed:e2:fd:13:8f:26:17:d5:28:e3:45:ac:f6:bc:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:90:E8:75:A7:F5:CC:21:AA:7D:74:31:8F:9B:FF:06:A3:A0:44
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2d:d8:79:f5:47:3f:1f:4b:42:54:52:d6:49:21:68:09:6a:
65:f8:c5:22:99:a4:04:39:da:02:a0:f2:f3:f5:39:df:75:dd:
0d:35:03:96:ac:4b:d8:16:bb:30:f0:31:75:c3:59:49:94:39:
56:cd:38:d3:89:60:ce:a8:a3:68:78:04:29:a5:b7:d1:1c:04:
3d:a6:3f:e0:e9:a6:60:e9:e5:6c:e1:a5:69:72:63:fe:71:7d:
e8:b6:9c:70:96:61:fd:78:dd:99:21:d8:42:a1:e0:bd:5b:a6:
b1:50:d0:88:d8:0c:de:0b:cf:a5:bb:84:17:8f:00:83:ef:d6:
7e:c2:e5:d0:e8:cd:c4:5c:36:7a:f8:7b:a1:4f:8d:81:0b:0b:
d8:7a:b5:be:dd:ab:1f:69:02:06:79:9c:82:a8:be:7d:b6:d4:
e5:fe:52:38:10:09:34:bd:31:8b:d9:05:25:23:2e:b3:e0:28:
24:88:3a:27:85:ea:5e:96:12:99:3b:ec:a0:51:4b:9d:cd:31:
da:56:4e:cf:b1:c2:79:e3:19:fb:89:46:28:b2:3b:d2:cb:1e:
10:aa:7b:8d:53:ea:9d:31:28:c2:89:a7:75:78:a8:8d:ff:34:
4d:c9:73:fe:1d:c1:f3:72:7d:ae:d3:e8:b3:1b:56:47:e2:56:
50:7e:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:46 2025 by rpki-client