Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: DNTG/tjCDrPKgifR0K+xmAad4ubSSRTrBSXUUjx63kg=
Subject key identifier: BE:52:28:AC:50:4B:AC:92:81:26:37:51:61:68:28:52:0E:F4:39:49
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019A202D50EF513E16E4ECC89034AD6E196C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 0314
Signing time: Sun 26 Oct 2025 11:00:31 +0000
Manifest this update: Sun 26 Oct 2025 11:00:31 +0000
Manifest next update: Mon 27 Oct 2025 11:00:31 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: MiBURjf1kKO79fbi7AdHrsuXBGfyNu5V4t0DihKvLrI=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:50:ef:51:3e:16:e4:ec:c8:90:34:ad:6e:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Oct 26 11:00:31 2025 GMT
Not After : Oct 27 11:00:31 2025 GMT
Subject: CN=be5228ac504bac9281263751616828520ef43949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:3d:58:c4:1b:90:87:34:75:47:3a:14:10:
40:38:fe:0f:f0:7d:f4:45:69:91:2c:5a:f7:23:bd:
1a:21:4d:e5:eb:79:71:d2:7c:b0:47:52:8c:e5:69:
0b:89:b6:1b:69:93:c9:09:a5:3c:ba:a9:01:1c:60:
25:77:e5:5c:fa:a9:1a:8f:b3:8a:ba:f5:fc:99:73:
8b:b4:0c:4e:70:2b:44:33:32:b6:80:4e:19:01:32:
1f:b0:eb:d3:bb:41:a8:50:cc:fb:88:26:9c:d3:34:
14:15:61:7f:df:8f:14:98:fd:73:97:ce:1b:32:5d:
50:61:1d:a5:2c:6f:67:98:c2:3c:c8:c1:6c:dc:d9:
4e:e1:21:66:b6:53:b8:f2:53:e0:06:3e:92:f0:d4:
94:01:da:af:7f:08:13:e1:b4:76:41:7c:da:7d:18:
ba:53:38:49:12:34:4c:55:d6:b1:eb:41:61:a7:78:
52:dd:de:f4:7c:a1:6f:4e:56:4a:50:32:65:04:4a:
7a:69:c3:47:72:e0:db:f3:20:40:1f:71:c7:2d:e4:
54:fe:2e:17:1c:f1:74:3e:67:b3:85:8c:21:4d:5c:
48:bb:81:15:00:6c:0f:b1:50:8e:3c:84:31:3e:23:
01:16:82:98:e4:00:3d:6e:d8:af:b5:0e:de:af:29:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:52:28:AC:50:4B:AC:92:81:26:37:51:61:68:28:52:0E:F4:39:49
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:19:2b:f3:01:b5:f5:ee:2e:b7:5f:a4:44:70:90:7e:03:ca:
8c:c5:ea:7a:41:a2:70:d8:f1:01:83:42:e9:09:94:1a:1e:3c:
3b:60:36:ef:de:22:12:7c:02:3f:8a:65:7c:33:e0:6e:a2:5a:
6c:44:c7:74:23:32:b6:ac:b5:6b:1c:33:41:e2:23:ad:8b:dc:
47:97:6c:9c:2c:32:88:c2:0f:f5:eb:19:73:eb:e8:ea:8e:6d:
49:4a:3b:98:da:28:f8:99:e4:1f:41:29:16:02:ab:4c:9c:87:
94:24:3f:c7:a4:32:50:06:3a:9a:f9:82:52:b3:05:0b:b4:f5:
e4:73:53:d3:57:85:e9:19:e4:54:2a:20:90:44:a5:27:85:95:
18:63:e7:5f:3f:62:0b:ed:74:c4:a8:b7:68:7e:59:d3:71:2b:
7a:42:75:e4:70:46:54:27:e0:34:bc:73:2b:5c:3b:33:46:43:
d4:c3:a7:c6:a1:d9:32:ea:ff:3a:bb:78:87:45:17:63:4b:a4:
9c:5c:25:d8:e1:71:5f:14:3a:43:6d:92:47:df:f2:97:eb:d6:
d9:e5:e0:99:ba:13:9c:b4:74:b5:ff:26:47:d6:ce:f3:6f:34:
54:f9:30:1f:e9:67:5a:82:c3:ad:ee:f9:81:3b:7a:60:a5:7b:
a9:ec:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:07:33 2025 by rpki-client