
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: fDTBjD4KfaRZVjAJDYIHeAEiRNNHY2f6WnRpoaWJDXo=
Subject key identifier: 6D:6D:5F:D9:18:7D:E1:B6:08:BC:76:4A:D9:C4:68:FA:6B:D5:23:83
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 019922FACAC051F154D748A7A3B049CAEAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:25 +0000
Manifest this update: Sun 07 Sep 2025 07:01:25 +0000
Manifest next update: Mon 08 Sep 2025 07:01:25 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: FTLmxt+muH3Fq0BR4SOWPLwpOkDS45GDBYOQMsdD/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ca:c0:51:f1:54:d7:48:a7:a3:b0:49:ca:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Sep 7 07:01:25 2025 GMT
Not After : Sep 8 07:01:25 2025 GMT
Subject: CN=6d6d5fd9187de1b608bc764ad9c468fa6bd52383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:56:6e:d4:16:29:3d:b1:4f:60:36:2f:09:
2c:32:79:78:9d:0b:56:6c:05:89:8d:04:24:12:63:
12:9f:4d:73:6c:5e:cc:7d:75:7e:1a:0b:dc:ea:5f:
98:81:21:42:1b:c7:de:bd:c0:d2:d0:1c:63:48:67:
75:48:51:fd:0b:c8:74:06:76:58:c3:e3:09:c9:64:
d0:64:87:31:02:03:13:47:4e:0e:b1:11:33:79:c4:
0d:52:8a:ea:3e:d3:99:39:98:d1:b2:18:a2:52:45:
bf:3f:8a:22:21:af:3a:da:b6:e2:b7:9d:80:d7:4b:
a5:ba:48:d1:53:9d:68:b9:d4:a3:ab:ea:e8:c4:7f:
35:80:51:75:10:76:c6:0f:53:00:28:35:56:1c:cd:
24:bb:b9:63:5f:d1:2b:fa:25:78:5c:76:a9:cb:9c:
24:76:35:88:5d:4d:05:aa:b3:5e:08:e1:8f:a5:f0:
eb:37:b6:d2:31:4e:3f:64:2e:6f:94:09:e3:47:5d:
99:53:e7:4c:00:65:c5:7b:7b:a9:b4:43:c9:0a:33:
8a:ea:0b:13:06:18:31:26:f9:e9:a7:07:69:89:76:
b0:e9:1d:75:2d:2d:6b:09:7c:2e:fb:55:b9:36:58:
41:7c:93:80:cd:dc:fb:a2:d3:9c:d5:5c:bf:41:91:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:5F:D9:18:7D:E1:B6:08:BC:76:4A:D9:C4:68:FA:6B:D5:23:83
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:ee:4c:d0:f0:56:e6:bc:6b:cd:62:2f:ff:f8:27:cf:b5:
97:72:3a:e5:ed:58:30:76:56:1d:0a:85:b4:e7:a8:09:57:5f:
a6:35:6a:0f:d4:2d:b4:c5:98:b1:6b:b4:4b:9e:02:cc:6a:cc:
9f:0f:a3:d4:07:3c:b5:13:0f:c2:75:62:5a:4d:2d:8d:b5:68:
f5:76:76:79:61:95:c2:fd:ef:3d:cf:67:6c:5e:75:e5:7b:0f:
43:7d:ba:8e:b7:93:c5:bc:5a:92:4e:f6:7b:14:2c:d0:52:75:
a5:27:1f:cc:cd:b5:f7:dd:f6:d8:eb:b8:b8:95:4e:3f:bb:d3:
04:30:7a:e8:34:bf:f1:a6:94:bc:8a:6f:ae:b0:2d:e8:3d:16:
b3:a4:14:c2:09:4c:38:50:43:6f:08:42:60:6b:f1:59:19:1d:
84:27:fa:ec:bb:9c:72:06:03:22:5e:34:cd:c7:87:01:d2:61:
06:12:87:fc:e8:5f:8a:36:c2:12:87:6e:08:6b:ec:cd:81:94:
73:e4:cd:c3:d1:bb:ed:c9:f4:3d:e7:da:6a:73:df:3b:b6:59:
45:ea:58:30:5f:c8:0c:f3:a0:44:97:59:b1:d2:88:22:51:34:
34:95:60:1a:3b:c4:64:e0:b1:64:bf:98:d9:d2:9a:d5:13:f3:
ab:eb:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client