Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File: GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier: AlRV7lhwCdl+0KFQf8Pe0PJJ1RHFTL/wfFgT6/c9RZI=
Subject key identifier: E1:64:0B:BA:94:B5:77:72:EB:89:D6:AF:4F:80:3F:DB:19:1E:4C:16
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 019A00A30477B1C80177D3F24CD68856A2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number: 0F35
Signing time: Mon 20 Oct 2025 08:01:14 +0000
Manifest this update: Mon 20 Oct 2025 08:01:14 +0000
Manifest next update: Tue 21 Oct 2025 08:01:14 +0000
Files and hashes: 1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: V8qB3cDb1MqIO6LfLTbknz1dIjQCnU4GLzkE9GCQ+GU=)
2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=)
3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:04:77:b1:c8:01:77:d3:f2:4c:d6:88:56:a2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Oct 20 08:01:14 2025 GMT
Not After : Oct 21 08:01:14 2025 GMT
Subject: CN=e1640bba94b57772eb89d6af4f803fdb191e4c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:38:6a:3e:9b:c1:2b:8d:68:85:3a:6d:c8:
0f:8e:70:63:f1:2f:d6:de:34:a5:75:3a:9f:28:62:
e8:35:08:38:3f:f2:ef:9e:d7:02:57:7e:29:18:a3:
8e:32:b6:30:31:7d:90:c8:09:fe:b9:4b:39:9e:54:
e3:fc:e8:75:e6:37:49:44:84:c4:1e:51:1b:e8:98:
71:26:6a:3f:ef:0a:9a:f6:92:9f:ea:2c:81:84:57:
21:99:f8:d8:07:3e:6f:df:b7:be:08:af:8e:24:c7:
e1:0f:90:4c:8d:3d:f8:60:b3:2d:10:59:a5:33:1f:
ba:cb:2a:21:b3:f1:38:20:f6:ce:dd:47:03:c6:6a:
9a:66:a1:ce:03:57:e4:3b:27:a5:ba:26:92:8d:e6:
9a:6e:34:ff:a7:fb:ee:4f:51:2f:c3:fd:1e:96:b6:
94:78:c4:af:88:59:80:b7:3c:c2:a0:bd:87:dd:fe:
78:32:0f:dd:b0:dd:94:aa:c1:eb:b5:55:f4:28:9e:
80:a1:43:06:ff:28:46:bb:c8:08:59:27:8b:65:4c:
1e:e2:c5:64:70:fb:9b:15:a8:dc:09:63:f9:22:8d:
75:06:97:de:47:d6:e1:ca:e3:98:0c:20:bd:b8:07:
97:6b:28:83:3e:80:d9:55:6a:91:06:06:fe:96:44:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:0B:BA:94:B5:77:72:EB:89:D6:AF:4F:80:3F:DB:19:1E:4C:16
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:01:ea:6e:c6:d6:bc:ab:e5:47:63:4c:ba:c7:b0:82:0b:
56:64:c8:07:8f:cf:88:e3:01:8e:5d:fb:c5:ae:e0:77:55:09:
09:30:88:61:16:bf:bc:07:a8:3a:a6:4f:9e:67:8f:21:ae:ca:
fc:9b:48:8d:56:a6:ba:77:6a:54:83:b8:65:c3:48:be:6d:a3:
e3:db:e3:73:b4:a9:04:96:fa:d2:89:52:93:7b:01:60:37:b8:
2e:d1:c4:e0:0e:9a:d2:db:45:d6:4b:64:a9:fd:36:75:9f:a0:
9c:21:89:d3:18:37:32:86:2c:b4:39:57:9c:66:b2:92:dc:d9:
3a:a4:b3:5b:28:1c:73:79:0b:fa:21:3c:ca:3c:49:8c:af:7a:
7e:f6:50:0f:82:5b:39:a8:eb:fa:3e:b3:e3:97:f2:a4:1f:a8:
e0:9c:23:29:cf:10:e2:60:43:34:a2:98:10:50:36:76:b3:5f:
90:ff:14:b2:4b:a3:8b:0a:d2:e6:23:bd:ae:e5:cc:7e:b9:61:
a0:46:e7:7f:10:45:32:fc:f0:01:bf:93:ea:6b:34:51:aa:69:
51:c3:e1:fe:0b:1c:01:18:52:d9:07:88:76:3b:db:1d:7e:30:
e7:92:ff:dc:61:35:a1:7c:c1:09:9f:6b:80:dd:0b:9d:b4:e8:
0e:a4:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:12 2025 by rpki-client