Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 44o1hvkq3AGmkf79Fm5vkK+aYoM9W5gqmS6inkxT3WA=
Subject key identifier: 7C:1E:8C:0F:FE:30:7C:62:40:A8:02:6D:E6:93:09:4D:97:CD:CA:BC
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019874F54C55ADB7471B2D384D77C7ABC1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 12:01:29 +0000
Manifest this update: Mon 04 Aug 2025 12:01:29 +0000
Manifest next update: Tue 05 Aug 2025 12:01:29 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: mgUXpcKEnfmtr8TXZRerqvpDc/QeB7tm7hEoyDfG7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:4c:55:ad:b7:47:1b:2d:38:4d:77:c7:ab:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Aug 4 12:01:29 2025 GMT
Not After : Aug 5 12:01:29 2025 GMT
Subject: CN=7c1e8c0ffe307c6240a8026de693094d97cdcabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:34:97:d8:22:eb:40:45:88:f9:2b:4f:b1:
98:8d:c4:2e:d7:1d:27:0e:97:ba:28:6d:3e:af:d7:
c8:41:e2:60:01:67:0b:ea:f8:c2:13:cc:c0:70:60:
63:86:18:4c:2b:b3:a0:88:00:76:ef:19:ce:55:02:
ee:3f:47:0f:2b:56:b6:48:5d:33:cd:04:e2:c1:7d:
9e:1e:1f:25:b9:58:fb:a4:0f:b5:db:7c:7d:e0:8a:
8a:24:64:79:40:7e:3b:91:5a:d3:b5:f5:52:2a:43:
c0:6a:26:6c:2d:61:d5:85:21:4f:e6:de:69:21:f8:
f2:2b:44:ca:4b:17:49:d1:4b:6f:45:77:08:d8:29:
b3:de:d0:f7:f1:a6:39:63:11:cc:6b:08:e0:fe:b1:
86:33:84:7d:33:21:ff:d1:98:35:91:22:33:5f:08:
98:77:f5:50:6d:31:14:da:df:f4:91:90:78:3a:71:
b5:98:58:e5:bb:6a:76:4b:ee:67:a0:29:55:15:3a:
47:05:bb:79:7b:fd:7c:e4:52:84:69:b2:f0:4b:5a:
b8:4c:0c:6e:65:84:d6:ed:19:22:0a:3d:57:d3:f7:
f9:2f:4b:2f:7a:52:7b:fc:e6:84:05:dd:9e:1e:50:
ca:f9:8f:d1:6a:ca:c9:ee:7b:fd:90:a8:fc:cf:21:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:8C:0F:FE:30:7C:62:40:A8:02:6D:E6:93:09:4D:97:CD:CA:BC
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:8b:fc:db:91:4a:2b:e5:e4:58:fc:34:18:ce:22:41:a3:
f6:09:4e:4f:44:fe:6c:a3:9a:48:62:b5:cf:eb:f0:27:fa:cb:
d4:24:36:82:cb:30:5d:bd:b4:df:b0:af:ac:fa:38:49:8b:c9:
09:0c:19:2a:27:c7:8d:35:8a:f7:f2:93:fd:0c:46:03:52:7b:
75:42:b9:7d:83:96:e5:de:60:95:a6:5f:2c:61:1d:cd:58:68:
a9:ac:2e:c5:1d:0d:e0:b7:74:f6:4e:fa:dd:c5:d7:82:8a:81:
e6:f9:61:7a:b3:79:da:dd:f7:3f:16:34:2c:11:fb:ac:8b:8d:
7f:7f:1f:e0:33:8e:38:4a:67:6e:78:6d:5f:b8:78:f0:f2:4b:
bd:af:ee:17:e8:3f:5b:34:f4:97:a9:a8:75:87:68:44:e0:20:
d8:64:9c:39:40:9e:64:47:2d:73:06:e5:ae:97:eb:ad:ef:b4:
26:21:46:48:a5:9f:e3:76:65:de:a8:fd:39:6c:cc:80:85:05:
66:16:6c:13:c7:00:76:72:85:f0:04:fd:32:72:b7:1f:70:65:
92:10:4c:9e:18:0b:49:9e:c5:a6:2a:10:21:bf:cf:5a:5c:4e:
e0:cb:63:5c:87:fd:99:2e:08:ce:37:9a:68:69:04:7b:18:7d:
52:1b:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:50 2025 by rpki-client