Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 9Zt1iwEDxEHuxVOHBVJ4Zx9vF2uW1LZzQxUHpCVicvs=
Subject key identifier: 31:9E:A0:94:A1:13:AE:1C:62:05:29:56:CC:51:D6:5A:83:A3:DD:49
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019768851608B4DAE3D59907784D36AAA079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 09:00:41 +0000
Manifest this update: Fri 13 Jun 2025 09:00:41 +0000
Manifest next update: Sat 14 Jun 2025 09:00:41 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: 6qyxMNn2mJg8Dba3zBQdtKLmvmyt2T9b/f7f9dDNnr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:16:08:b4:da:e3:d5:99:07:78:4d:36:aa:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jun 13 09:00:41 2025 GMT
Not After : Jun 14 09:00:41 2025 GMT
Subject: CN=319ea094a113ae1c62052956cc51d65a83a3dd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:12:f4:d3:b3:3d:39:66:ca:c8:5c:e1:71:17:
88:75:91:83:76:d5:72:5d:51:3c:85:2f:ce:14:55:
ad:7d:4e:83:11:16:bc:72:57:b1:51:ea:4e:a1:eb:
0a:9e:40:74:07:12:38:32:34:47:8a:a1:9d:b2:7e:
d6:45:0e:17:d0:1f:4c:85:01:08:b6:3d:52:a5:2c:
4b:93:aa:ce:32:37:79:a4:61:14:15:a2:98:db:c5:
8f:09:6c:41:ae:ad:c2:ee:d2:91:ce:92:95:79:87:
63:f6:34:0c:46:db:d1:41:1f:69:60:da:f8:ed:54:
8a:7e:ae:63:b8:13:8a:8b:77:08:f9:00:84:0f:06:
5d:14:04:ea:0c:f6:81:3e:3d:b6:92:ca:9a:b9:de:
e1:4d:9a:e4:19:1a:75:48:37:a7:62:62:ea:f0:f2:
9b:ad:db:4e:1d:60:69:6d:d1:17:98:51:32:1d:17:
67:0e:aa:f6:5a:3c:8b:48:3f:e7:cc:7c:95:2d:fe:
01:ec:ae:6a:ea:39:c6:c8:f4:47:99:73:30:e0:99:
39:18:a0:94:c2:18:d8:46:72:a4:bc:f7:ae:d1:84:
e6:fe:dc:21:8a:7a:50:fb:5e:8d:66:ea:9f:5a:54:
d6:99:69:f5:38:16:64:cf:e7:f2:75:4c:0d:bf:c8:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:A0:94:A1:13:AE:1C:62:05:29:56:CC:51:D6:5A:83:A3:DD:49
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3d:cd:54:81:6b:ec:f0:9c:02:2f:41:37:d7:96:dc:4d:96:
65:67:2d:de:2b:fd:4c:dc:61:e6:97:34:72:74:fd:d7:61:1d:
90:36:ca:67:73:b0:eb:41:43:14:b6:d2:59:49:31:f8:7e:bf:
0b:08:d2:42:a3:c3:ca:71:48:ed:b5:2d:56:83:0a:7d:fc:a4:
5c:6d:9e:70:45:0a:18:70:df:64:ab:1f:9e:ed:2d:87:93:b9:
94:75:27:fe:5c:8a:0c:ae:59:24:82:89:49:81:9a:19:ef:ad:
d4:c2:b4:59:b2:1f:ff:6a:b7:36:62:0b:7e:3a:a4:c4:37:49:
65:67:5a:c2:c4:e6:8a:88:e6:11:1f:a2:a3:ea:e0:58:75:36:
f8:f6:84:be:3f:68:d2:1c:cf:bc:0f:60:fa:5c:84:16:91:13:
a4:51:94:f1:f8:b9:c6:24:06:c3:a9:95:52:23:72:75:9a:d0:
82:a5:11:56:5d:69:3b:16:6a:0e:a3:84:c7:a5:d9:e8:c1:49:
a1:ee:aa:43:87:09:4c:0a:c4:99:9b:d1:16:0d:d0:6c:bf:9c:
64:e6:e9:75:9d:82:e2:d5:ba:c7:4d:b8:6c:43:4a:34:82:6b:
6b:b7:b0:e3:aa:62:4f:a1:5d:da:91:2c:91:a9:f2:77:49:99:
9f:2b:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:53 2025 by rpki-client