Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: 7p9uhufXciYBhBxWMdq+E5bE/lcdD9uFjrAUz2qcbLs=
Subject key identifier: 3E:11:EB:A4:A3:F2:00:65:4B:59:06:06:1D:88:86:A3:86:5F:19:BD
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 0197526B53B0322B341F665F9A911CA62AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 02:00:54 +0000
Manifest this update: Mon 09 Jun 2025 02:00:54 +0000
Manifest next update: Tue 10 Jun 2025 02:00:54 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: bZYm2Hcv0vYqLnzxpJEtXGAgwc48EakZDxpTf/0yItU=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:53:b0:32:2b:34:1f:66:5f:9a:91:1c:a6:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Jun 9 02:00:54 2025 GMT
Not After : Jun 10 02:00:54 2025 GMT
Subject: CN=3e11eba4a3f200654b5906061d8886a3865f19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:5c:e3:0c:f0:a4:5b:fb:03:53:14:12:40:
68:eb:e9:36:ef:b6:42:49:e3:64:43:6b:1a:d8:2b:
64:9a:0b:21:3e:7d:b3:f3:ba:84:4b:c9:2e:ed:84:
b5:25:29:9d:71:52:45:06:ee:80:56:7f:09:53:c8:
9a:1d:f1:bd:b9:23:07:7e:4c:2a:70:21:8b:60:d6:
cc:5a:50:aa:04:12:ba:f7:dc:bd:ef:7e:bc:20:48:
f8:a3:59:3e:8a:6d:b9:75:c7:48:3a:54:c1:d1:f4:
58:6c:ed:14:63:27:c2:3e:69:ce:27:1b:94:80:3a:
f5:b9:ce:14:a3:cd:58:a3:59:3d:2c:7c:95:04:33:
50:0e:e2:68:57:dc:d9:a6:0a:83:81:ef:3f:cc:e7:
12:a7:70:5c:73:d2:d4:50:3b:f6:d7:49:66:ea:06:
a8:87:c2:db:41:9c:49:e6:0c:37:e8:db:90:40:98:
60:03:87:5f:81:37:0d:b7:2d:7f:f3:f2:7d:79:e1:
44:ee:11:21:cf:05:cc:b8:a0:66:26:35:c3:01:cc:
1b:e0:fa:e5:9b:1a:1a:53:d2:f1:90:a9:91:e2:ef:
59:5f:b4:2c:42:69:4d:11:c3:62:0b:ad:30:20:25:
d7:45:6a:f1:6f:95:45:05:80:d6:a0:58:4d:fe:e9:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:EB:A4:A3:F2:00:65:4B:59:06:06:1D:88:86:A3:86:5F:19:BD
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:bc:a5:54:63:00:77:c7:0b:cd:06:3e:2b:81:47:aa:25:c3:
c1:25:ec:73:e0:b2:29:f5:2b:c5:7c:42:84:45:a3:c3:82:df:
ce:9c:06:a0:6c:cf:9f:b9:04:45:c6:88:2d:bc:91:a8:bd:10:
1e:ea:5b:fd:e8:42:4c:ca:3e:73:b4:c2:1c:ec:d0:8e:65:6c:
6b:0b:85:27:87:65:0a:54:78:d5:75:df:0e:f5:07:8a:9d:d8:
e3:72:3e:6b:ff:76:22:27:5c:f1:a6:d9:6b:86:c1:56:65:f2:
dc:af:46:7f:b7:8c:e1:f9:0a:d4:7e:fe:1c:8c:17:dc:87:46:
98:b0:8e:99:76:77:12:ae:49:24:6d:28:04:ef:67:56:2d:57:
de:85:18:96:82:06:b2:4d:73:67:76:4e:82:32:09:32:5b:dd:
83:b9:12:bb:57:f2:c4:93:95:27:ca:51:17:88:43:e9:ff:0b:
06:0f:79:bc:4a:17:0b:2f:4e:9d:31:40:99:b5:79:79:2e:66:
9e:34:d3:79:e2:56:11:3a:cf:8a:cf:0e:d6:17:a5:f3:46:51:
53:f1:f1:29:16:6b:73:61:a2:1d:bf:62:0e:b1:a3:2d:cd:59:
61:45:16:20:ba:d1:11:0d:de:b2:f8:44:41:e6:df:9e:2d:aa:
f4:9a:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:55:38 2025 by rpki-client