Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier: AeiKVq1ctmoYWQeeNFH3DmKoLQX/HEYAPuITZn2eLCs=
Subject key identifier: 8A:21:49:04:EC:FE:F1:D2:01:90:80:5D:10:DC:A1:A4:F7:33:C4:81
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 01984CD3DD47FAB11A767CC035E628DABCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number: 0D55
Signing time: Sun 27 Jul 2025 17:00:09 +0000
Manifest this update: Sun 27 Jul 2025 17:00:09 +0000
Manifest next update: Mon 28 Jul 2025 17:00:09 +0000
Files and hashes: 1: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: GvLFqnvGDCVQDL9HyEJPUIPKy5GpdVeZtdjQFFK3PdQ=)
2: xs7enPVeNIMyt7yLlWdZQsBjc6E.roa (hash: Hl7Zc5f4P4RuVLf0+lM7s4f9NcFGJ5Df6CUhJF0dl6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d3:dd:47:fa:b1:1a:76:7c:c0:35:e6:28:da:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Jul 27 17:00:09 2025 GMT
Not After : Jul 28 17:00:09 2025 GMT
Subject: CN=8a214904ecfef1d20190805d10dca1a4f733c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:53:6e:20:88:77:94:f9:c4:c5:9b:e3:d0:
18:d9:39:c5:9a:1c:ab:b2:df:14:03:79:d5:ef:2b:
19:9f:32:4e:0c:b0:b3:c9:48:71:08:fd:73:40:22:
32:7d:3e:1d:47:35:70:f1:38:de:19:d1:ae:0f:9a:
03:ef:9e:59:d9:77:e2:f2:3d:4c:fa:a8:de:c7:a2:
d3:5d:8e:57:cb:45:a2:f7:4b:16:dc:a9:dd:0d:b4:
17:d3:d9:09:6a:61:7e:9d:24:87:95:9e:39:22:04:
2d:fb:d5:f8:1a:7a:76:55:43:dc:46:a8:2b:3b:50:
47:54:c1:83:31:5c:8f:6c:08:a6:5a:96:00:b0:95:
1f:a8:3c:57:ad:85:0e:a3:2b:55:72:6d:3e:f2:5e:
49:b9:c4:c1:41:c5:ba:fc:f4:0a:7a:91:ae:74:a0:
56:6a:db:6d:97:b9:67:77:2a:61:ad:84:35:59:12:
46:71:ff:51:0e:78:5d:ed:2f:7b:df:a6:a9:70:3d:
41:12:ed:b4:52:cc:53:75:8f:89:01:a4:52:19:a9:
7f:9d:cd:37:e6:d8:56:3c:69:3f:2f:f6:e4:23:a4:
9e:5d:e3:84:12:22:1e:7e:aa:cb:49:84:18:be:1a:
31:1a:67:a6:b1:3a:93:e5:73:ff:8c:05:19:0b:aa:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:49:04:EC:FE:F1:D2:01:90:80:5D:10:DC:A1:A4:F7:33:C4:81
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:9a:e6:19:38:51:fc:81:d3:d7:9d:d2:af:dd:0a:ce:21:
d8:12:50:34:ff:9a:4f:ca:78:f3:ca:6c:a7:6f:1f:4b:b1:8b:
e7:bb:8d:f4:44:12:6d:da:1e:94:a2:f2:bf:7c:b3:70:2b:17:
7a:82:a7:eb:c2:a0:ad:59:96:c5:08:af:2e:8f:8c:07:a6:3a:
5f:4d:4e:b5:19:a4:45:bc:ae:2a:17:f0:a9:3b:f4:83:4d:e1:
6a:2a:b3:c1:43:97:2b:19:2d:15:ad:1d:4c:e2:f4:38:55:7d:
a8:96:61:29:6a:b7:7a:e6:a1:6d:4f:5a:3c:65:d9:30:43:99:
f0:52:6d:8a:a5:5f:79:af:08:12:85:74:80:11:73:9d:e9:1c:
61:05:38:54:27:65:4d:85:c0:82:86:d3:5b:00:e1:7d:13:7b:
06:ad:c2:b7:35:a4:31:62:04:41:05:5c:c5:fe:03:53:2b:f2:
7b:af:ba:54:22:78:41:69:ae:39:e9:af:e1:3a:01:9b:c6:00:
23:30:f7:85:98:41:5f:c3:6d:6b:bc:c2:b4:74:23:07:6c:b8:
a3:72:9d:ac:80:d1:70:19:5d:87:13:4b:bf:de:5c:f2:e0:cb:
5d:0a:d3:9e:6e:3f:00:da:90:a8:bf:52:13:e0:c4:fa:44:d1:
39:57:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:29:11 2025 by rpki-client