Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: xDvZ16FTt6CBxwn2anwBm6F9AOi695ZDXvTnRgu/oyY=
Subject key identifier: 2F:34:C6:0E:9D:3E:FF:EF:23:0B:A4:8D:0C:E4:67:CF:D5:C9:1A:35
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 01991D2FCBDC69A7AE64B16F936194775FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 1670
Signing time: Sat 06 Sep 2025 04:01:35 +0000
Manifest this update: Sat 06 Sep 2025 04:01:35 +0000
Manifest next update: Sun 07 Sep 2025 04:01:35 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: uVR1l7YhgMdVc3SFYq0s7J6S988WZQ3PaDouTdrUHoE=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:cb:dc:69:a7:ae:64:b1:6f:93:61:94:77:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Sep 6 04:01:35 2025 GMT
Not After : Sep 7 04:01:35 2025 GMT
Subject: CN=2f34c60e9d3effef230ba48d0ce467cfd5c91a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:2f:d4:50:58:cc:98:2c:82:a2:b5:88:fd:
de:a3:b1:43:4c:2a:c7:32:f7:70:27:a9:60:ec:9f:
a0:dd:62:ea:1f:ab:69:ea:38:a3:ec:da:c1:98:7e:
3a:f7:a0:ff:5c:97:ac:d4:9c:57:f6:ec:c7:d6:08:
1c:40:99:35:8f:9c:27:a0:da:a7:7c:a5:05:2d:3f:
0f:26:61:e1:9d:90:fd:80:35:6c:12:c8:f1:2e:c5:
f9:80:58:ca:8b:f4:c1:52:9c:d0:c7:1c:6a:e6:2f:
2e:03:44:09:a4:b5:9f:0e:0f:67:9c:45:05:bb:bc:
d6:f4:c0:63:26:b9:13:94:4b:9e:17:78:5f:9c:74:
3e:5b:0d:64:42:e7:a5:55:9d:8a:92:84:8e:1c:21:
b3:df:b5:2f:bc:61:1b:77:70:28:19:d3:6c:e5:13:
89:c4:68:68:0e:18:7a:e3:0a:02:2e:ac:56:75:53:
9e:df:f8:6b:a6:82:bc:b9:ab:0f:2a:27:17:10:5d:
e4:e3:26:12:fa:ac:02:38:4f:95:92:67:b1:64:e8:
c9:66:0b:fc:38:ba:fd:c2:c9:11:6f:b9:45:d9:6d:
8a:64:8d:d8:0b:84:69:ad:d0:ef:75:b3:49:5e:2b:
fe:26:a4:62:84:ee:1a:29:dc:d8:77:06:db:25:2a:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:C6:0E:9D:3E:FF:EF:23:0B:A4:8D:0C:E4:67:CF:D5:C9:1A:35
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:6b:7d:88:11:cc:64:74:76:98:2b:8d:d5:7d:60:18:dd:
da:74:83:04:ed:08:31:d1:b5:1c:ad:9e:9e:c4:bd:64:8d:5c:
fb:73:a3:23:66:45:a3:23:8a:8b:16:7e:cc:eb:0d:f7:c4:46:
1a:9b:0a:f3:eb:83:b1:05:40:24:ee:36:69:13:26:63:ec:c4:
84:d5:e5:5c:cc:e6:5f:9a:e6:8b:73:b4:53:84:7b:ea:02:ab:
a0:fa:24:ad:ef:35:fe:d1:6f:6c:a2:2f:8f:f3:ec:d7:3e:76:
a1:dd:a9:5a:30:e4:b2:70:21:1f:d4:4e:3b:b9:c6:4d:10:9b:
80:46:13:b6:65:4e:5d:aa:bc:51:9a:08:e0:1a:3e:4d:c9:18:
aa:06:50:9e:6b:a5:9e:2b:47:17:b8:2d:03:f4:d7:85:44:88:
e5:0f:13:8e:41:88:12:3c:c3:d8:d9:61:c9:97:f2:b9:7f:90:
67:59:f9:98:7b:b1:7e:87:80:be:86:02:9b:8b:3c:e6:1b:5f:
22:4b:8e:6a:c6:78:0b:3f:8d:87:6f:c6:e7:40:bf:19:42:eb:
39:2f:b9:cb:2f:f7:2f:3b:c1:0e:9e:e1:f4:78:4b:17:8a:74:
fd:58:24:49:45:29:0a:49:0c:9c:9a:3c:41:a8:9c:bc:9d:b0:
f7:27:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:46:53 2025 by rpki-client