Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: 22YGmTtgimyO0g/6hXKO+CBurQFxh00At65HJXKZTCk=
Subject key identifier: 1E:1D:92:B4:52:23:8E:2F:8E:15:57:FF:82:E5:FA:85:32:88:B9:71
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0197488C2548F5467AAA64EA91DA9AFFC843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 0538
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: HmZDK3QPc3pdu5dnT8MGs5SoHGxe+etD6HhMYW3lDMU=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:25:48:f5:46:7a:aa:64:ea:91:da:9a:ff:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=1e1d92b452238e2f8e1557ff82e5fa853288b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:4d:6b:5c:88:3b:32:f1:e3:70:c3:9d:df:
5b:b7:a8:d6:df:1c:b0:01:29:21:12:a5:19:22:5b:
8c:f1:55:64:c7:a7:91:f4:a7:23:82:29:d1:86:b5:
38:25:7a:1f:9e:48:b7:7e:50:21:e2:f5:a0:39:4c:
87:58:e9:60:c2:ae:94:9e:eb:b5:06:79:a9:a8:ac:
3b:ce:a9:80:1b:12:fd:22:3a:07:29:5d:11:ce:a8:
87:d8:b5:f0:22:78:2f:fd:44:84:03:d1:00:26:30:
b4:f8:b8:5e:e1:e6:ca:69:58:55:4e:b8:fa:18:8b:
30:c0:4f:33:4d:5b:91:bc:66:e6:f1:07:51:71:9a:
88:4f:10:ff:3e:e2:04:d9:08:da:28:06:c7:aa:8e:
ed:1c:5f:39:e1:57:14:9e:00:e6:f8:27:22:9a:c5:
2c:11:8c:b3:e3:01:81:a3:b1:20:e3:1c:ed:e7:21:
93:cc:2e:d6:3c:2b:dc:de:e9:25:00:66:33:11:e9:
79:20:29:c0:98:49:ed:0c:79:f9:b6:5e:59:66:9c:
ef:2e:57:25:52:c9:43:0d:74:69:d1:03:89:11:49:
99:02:9f:71:6f:30:b5:83:bb:a7:bc:83:07:f5:12:
b8:ea:8f:fe:ae:7f:42:bd:4d:16:77:96:53:4d:cb:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:92:B4:52:23:8E:2F:8E:15:57:FF:82:E5:FA:85:32:88:B9:71
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f5:a0:0b:6f:c2:cd:32:ce:22:98:c0:20:88:d9:01:58:87:
88:4b:76:e2:06:fc:43:2b:04:73:58:1c:2d:e3:ec:1b:ab:71:
aa:65:12:d8:ba:fc:5d:02:38:73:a2:cb:3e:93:de:b4:d9:f4:
e1:a1:4e:36:60:95:81:c6:57:4f:3c:23:b9:b6:14:65:b5:e4:
f0:b1:fb:dd:60:50:b1:39:92:5a:11:c8:56:91:20:51:50:fb:
62:f6:bc:5e:5a:8f:7e:d5:78:17:ef:bf:9b:cb:37:69:6b:55:
51:91:01:7d:4c:e0:c3:30:a5:18:bc:6e:aa:01:83:17:58:60:
e0:b2:35:a0:39:0e:9d:fc:da:6d:67:7e:d9:5b:c5:4a:59:ad:
09:2f:1f:cf:50:5b:13:52:02:ba:13:cc:af:d0:ad:fe:5f:c5:
c2:d1:ed:ce:ea:62:cd:ba:b3:91:6b:dc:cb:ca:31:35:ef:ed:
e4:48:45:9f:7a:0b:07:eb:6a:b6:c6:d4:a1:0e:4a:ce:89:ec:
74:b2:12:98:66:62:22:e2:6d:03:5b:9c:c9:9b:13:07:fb:a6:
41:27:d4:08:a6:ed:f4:52:e5:39:9b:2c:54:33:a4:9d:27:1a:
5c:27:59:c4:4c:cc:0c:3c:3d:4d:1a:73:28:97:65:5c:fe:4a:
31:65:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:02 2025 by rpki-client