Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: 88gPwVIsldl/vh2d9O4eiZp4VUD/fg2oxweoFixPIMc=
Subject key identifier: 22:DF:AC:7F:A9:39:C3:AB:28:0F:DC:AD:51:FD:8F:AA:7A:10:84:31
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0198488942019F5C657843DFC35C9CE84E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0A97
Signing time: Sat 26 Jul 2025 21:00:11 +0000
Manifest this update: Sat 26 Jul 2025 21:00:11 +0000
Manifest next update: Sun 27 Jul 2025 21:00:11 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: nSsZLkx08QoXgk1rOytY/bp5ugLMmuR8XO8Wt/AZ5Vw=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:42:01:9f:5c:65:78:43:df:c3:5c:9c:e8:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jul 26 21:00:11 2025 GMT
Not After : Jul 27 21:00:11 2025 GMT
Subject: CN=22dfac7fa939c3ab280fdcad51fd8faa7a108431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:a3:31:2e:24:2f:aa:a0:db:fc:f4:28:e8:
eb:1e:55:d7:77:e9:b9:d5:e4:da:4f:f0:08:1b:0c:
c2:f5:97:89:1c:b3:40:09:ae:84:fe:90:31:89:a3:
37:65:dd:6f:96:91:28:5b:a9:be:0a:2b:99:b7:b5:
d7:80:55:d7:0b:f5:ce:ec:0f:f5:d3:c2:df:20:86:
b3:b7:0b:c7:5c:6f:7a:b4:18:01:8b:b0:1a:fa:61:
4c:2c:0f:ed:0f:db:5c:49:4d:4f:28:6b:79:43:2e:
96:e8:dd:23:04:0c:57:83:52:dc:dd:a3:83:d7:e7:
a7:6f:aa:8e:58:ba:b0:5b:ea:f7:73:86:e5:d5:de:
64:27:81:ca:15:b6:c1:ed:6b:29:c3:3d:b5:8d:e6:
c6:cb:26:53:f0:d7:4f:02:32:18:df:2f:77:82:b5:
fd:12:08:53:fb:e4:a3:f8:2c:5e:1e:8f:45:48:20:
59:dc:0c:fc:d9:fb:85:49:89:1f:ff:c0:d2:9c:bf:
27:22:b4:ec:28:ff:e9:6e:87:ff:c1:6f:74:57:36:
e6:88:1a:31:4b:b4:3a:f6:1f:42:88:98:10:c4:fe:
4a:a2:46:ee:aa:1b:43:bf:02:2b:34:22:78:3c:42:
5b:80:1e:a7:0d:25:ff:a4:16:d7:d2:6d:93:dc:ef:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:AC:7F:A9:39:C3:AB:28:0F:DC:AD:51:FD:8F:AA:7A:10:84:31
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c2:a2:94:db:91:1c:14:f5:04:59:73:27:c0:cd:01:46:b5:
ec:fc:b5:ff:21:0d:56:0f:70:55:df:3e:7e:c1:55:62:3a:3c:
cf:02:cb:b0:2e:42:73:2e:99:d3:d9:b2:e2:0c:c2:62:25:9c:
b7:b7:05:8b:22:72:de:60:01:d2:29:b8:01:ac:f9:5c:b9:ed:
8d:7d:ba:00:b5:2d:b5:5a:35:3d:f7:1e:49:af:54:b6:04:c1:
ad:0a:21:c8:cf:17:21:63:c8:e9:f8:91:61:e2:1b:87:54:fe:
dd:69:6f:9f:2e:da:bb:2b:82:68:6e:c8:29:5b:8b:ba:ba:5b:
38:02:01:d3:86:c2:1d:75:f9:57:b0:3a:f9:b7:6c:d9:68:d3:
4f:e2:f8:39:de:12:89:9d:8e:c4:99:41:4b:cc:3d:a1:12:d2:
c2:d6:33:bc:94:77:5f:0b:0f:db:6b:c8:12:cf:37:12:e2:4b:
c2:5d:cc:bf:78:1c:f6:00:29:ce:ad:c9:59:30:6b:65:af:2b:
3c:67:ff:48:a0:fd:86:0d:ef:b2:23:5c:76:39:cd:21:fb:0b:
55:a7:40:7d:99:d9:84:55:32:76:d8:7a:cb:d3:86:47:3c:10:
8e:59:69:82:1a:a5:6a:83:52:d8:3d:33:42:9f:ea:47:f7:8a:
79:22:06:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:58:52 2025 by rpki-client