Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: i60A3PucY8HaB6DQIds3i7d3V+ATFLz1nphbBjEjs6w=
Subject key identifier: FB:0C:7D:43:55:1A:50:5A:F1:12:DF:DA:A7:AD:CF:B7:E6:DD:23:5F
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0198477855A685EE04A7FC9ED5B6A16EDCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 05BC
Signing time: Sat 26 Jul 2025 16:02:05 +0000
Manifest this update: Sat 26 Jul 2025 16:02:05 +0000
Manifest next update: Sun 27 Jul 2025 16:02:05 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: 06C06GkSzGGzpgJaPc9HcGnQIWkfaAhs5sXkRS8171g=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:55:a6:85:ee:04:a7:fc:9e:d5:b6:a1:6e:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Jul 26 16:02:05 2025 GMT
Not After : Jul 27 16:02:05 2025 GMT
Subject: CN=fb0c7d43551a505af112dfdaa7adcfb7e6dd235f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:78:2d:55:12:20:30:00:ea:37:b9:5b:aa:
27:6d:9d:bd:82:79:8b:93:8c:e8:e9:09:4d:48:89:
c4:c8:ca:50:7a:69:19:5c:54:21:ed:3e:28:1d:f8:
02:9c:44:7e:dd:cb:9e:a4:d3:1f:db:6a:82:5b:01:
38:cb:40:b5:a9:97:e7:9e:49:6c:69:ad:61:42:ce:
cf:0b:af:cb:0e:f8:d7:17:a9:51:86:d8:aa:dc:4a:
b6:9b:4c:cb:05:6b:5e:63:20:3b:81:16:cc:0c:d0:
73:b2:3e:77:60:92:96:3e:33:53:aa:43:96:2c:6b:
50:32:41:15:93:7f:93:3b:dc:46:fc:5f:38:66:e0:
62:f2:3b:5c:1b:43:73:d7:6d:e7:67:90:48:07:4d:
e3:3d:df:3e:97:4e:c4:53:a5:74:34:ca:8d:66:19:
a5:d3:1d:97:e1:64:ff:7c:f7:b7:c5:8e:6e:2c:81:
3a:e5:5f:97:43:40:7a:86:e9:8d:3e:8f:1a:15:02:
18:46:ab:ed:c7:8d:54:bc:f1:cf:f5:85:41:d3:ca:
6b:c0:f0:4b:78:0a:aa:0b:64:39:af:40:45:fd:87:
5d:5e:bf:53:ba:a7:fd:2c:8d:5b:53:af:9f:ea:2d:
43:1f:27:33:66:61:a1:d8:75:89:15:b0:49:b7:4a:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:7D:43:55:1A:50:5A:F1:12:DF:DA:A7:AD:CF:B7:E6:DD:23:5F
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:1d:83:13:6f:bd:13:4c:a8:ff:59:be:84:84:52:d5:4a:
2a:1f:7c:cb:81:13:8b:9c:ce:07:14:87:7d:d9:fd:88:59:6f:
f3:f4:b7:ce:90:df:b0:53:d9:77:da:fa:9c:07:b1:99:e8:50:
73:e5:38:c6:57:51:f2:9f:9f:18:b4:3c:e1:09:fd:b9:1f:53:
de:6d:76:b1:4f:88:c4:b5:66:cc:cb:9b:0c:a6:75:dc:86:91:
41:1f:59:ec:9d:c6:61:57:d4:a3:a8:83:35:ad:11:3c:6e:7d:
7d:e2:11:96:c7:ba:a1:3f:fa:f7:12:8d:ff:89:0e:3c:d4:ac:
1a:90:f4:39:39:4c:1e:4b:c0:47:dd:89:89:22:6d:6e:a6:3d:
9a:c2:0f:fd:7d:e7:7e:1c:16:dc:80:2c:9c:98:f8:fb:c4:31:
08:f6:46:04:16:0d:4b:88:49:90:43:36:8f:db:7f:c4:ad:73:
7a:e8:8c:e2:ff:83:72:df:27:45:c4:c8:49:07:ac:19:4a:c9:
eb:9c:cf:7d:7c:b8:c5:6b:32:ca:64:ad:44:a4:39:c2:ac:5f:
01:65:fc:6d:fd:df:91:07:21:71:28:e5:65:d7:71:54:38:47:
72:b2:dd:fc:f6:0a:1b:d0:23:3d:8b:e1:df:bd:73:0c:58:e1:
4d:d5:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:13 2025 by rpki-client