Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier: 1AJeupHDjIqKVMQp4VNmJ9yu+3Hive7IZ+q/jGKYVzo=
Subject key identifier: 66:E0:84:90:AF:69:C4:42:21:6F:08:97:4C:D3:40:13:2A:2B:FA:AD
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 019A70DBDF7CD213D4A4FA28AA76D249BE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number: 0BB5
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: uCL0yv9mTsqckHLKOQWyDHNbYe2EIExUMyfq9qh8/TE=)
2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:df:7c:d2:13:d4:a4:fa:28:aa:76:d2:49:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=66e08490af69c442216f08974cd340132a2bfaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:d9:72:f7:ad:fa:41:1a:a1:95:12:59:28:
66:ef:53:c5:3a:4c:15:f3:c9:15:d9:b3:62:b4:d5:
b1:b1:ef:fd:ff:e5:7f:2b:e9:da:3b:5e:a7:3c:3b:
e5:17:a5:73:f6:70:49:75:30:30:96:e1:15:c7:fc:
34:84:18:48:56:df:6e:9a:77:6a:f5:2f:3f:b2:59:
9a:ac:91:f0:36:5a:f2:2e:6f:0b:09:38:ee:d8:e4:
af:79:3d:63:15:63:91:38:b8:34:e1:4b:ee:6a:11:
b2:35:8b:ca:7b:4c:f1:d8:cd:3e:d8:84:06:13:ae:
30:b5:de:b2:87:2f:25:ab:2d:bb:77:16:59:75:52:
5c:38:9f:a4:f4:cb:7f:a2:45:af:e7:90:5e:2c:e2:
5c:7a:77:43:90:d2:40:48:8f:30:a6:c1:1f:ad:63:
b4:80:0b:ff:51:25:bf:df:89:32:05:d6:b9:28:45:
03:84:70:ed:fc:26:af:94:70:5c:45:cc:63:50:17:
33:8b:e0:b9:b7:92:aa:5d:60:78:8f:30:56:70:69:
5f:c5:2d:03:44:d7:71:10:7e:47:bb:e4:c4:16:a3:
6a:56:79:c2:2d:80:72:ea:b0:cb:24:1d:f5:73:ef:
16:fd:13:6d:b4:f2:3a:98:91:73:4a:b3:25:1e:7a:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:84:90:AF:69:C4:42:21:6F:08:97:4C:D3:40:13:2A:2B:FA:AD
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:86:c4:ba:6c:28:8a:06:d9:f4:d7:fd:77:c4:6e:9c:7f:
5c:95:85:d2:d1:2d:95:6c:06:73:b4:4f:6f:4b:33:2e:04:8e:
1c:66:33:55:45:70:a2:f9:b1:7d:ef:fe:34:aa:e9:b8:86:ec:
67:cc:70:a6:c1:39:df:49:c6:ac:f4:76:f4:10:ef:76:1e:f0:
c1:7e:ab:38:af:51:49:c8:24:46:5e:e6:37:dd:75:8c:27:8c:
f3:d3:6d:d3:98:a6:c6:03:b1:7c:7a:9a:17:71:5d:aa:0a:05:
8d:57:0b:92:44:a3:05:98:dd:ed:67:fb:19:26:cb:48:97:78:
4a:29:36:7c:44:43:8b:1f:48:38:5f:80:2a:93:1e:1d:02:7c:
ef:8a:6c:8c:eb:2c:44:ff:be:d6:e4:08:27:69:e7:91:e8:e1:
60:1b:2e:b7:78:36:8e:33:8d:c4:52:33:24:cd:fc:b3:f9:91:
13:94:ab:d8:22:82:8c:66:84:41:8e:07:7a:11:24:b2:75:dc:
09:e3:fd:eb:cc:5e:f5:e5:a6:49:77:e4:e3:61:3d:8f:13:22:
bb:13:a3:14:0a:94:53:47:34:52:25:f7:f7:d4:bb:d2:f7:fb:
3d:7f:c6:22:07:eb:3c:52:e6:72:24:1b:33:07:33:52:3c:70:
21:77:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:16 2025 by rpki-client