Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: D8ZWSY2k/neN31cokeTPBNQ6SdO7XEELQQFguL8+5Jk=
Subject key identifier: 97:DC:E8:79:D0:F5:CD:8A:38:82:E6:CA:29:8C:47:8E:F6:21:2E:1D
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 01963FFA1DE1083C133282BCC4ECC528A67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 04AF
Signing time: Wed 16 Apr 2025 19:01:18 +0000
Manifest this update: Wed 16 Apr 2025 19:01:18 +0000
Manifest next update: Thu 17 Apr 2025 19:01:18 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: 89iY6Owlru8uwp6jPJl6CRW0rdl8ZTtBLVztrEHOMc4=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:1d:e1:08:3c:13:32:82:bc:c4:ec:c5:28:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Apr 16 19:01:18 2025 GMT
Not After : Apr 17 19:01:18 2025 GMT
Subject: CN=97dce879d0f5cd8a3882e6ca298c478ef6212e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:2d:92:c5:d2:70:fe:26:07:a4:c1:c7:9e:
02:7d:81:ec:2f:22:2b:21:bb:ba:86:b2:82:43:ed:
40:1e:17:f0:bc:f7:14:73:53:04:df:39:52:43:66:
df:ac:7d:6d:5a:68:74:48:8a:ba:55:16:29:8e:cb:
3e:0f:7d:81:22:fa:df:c1:3c:83:be:29:d2:53:fe:
bc:23:e4:fe:77:01:1f:2c:40:b5:45:8a:76:09:dc:
8c:be:a0:93:f9:be:d6:f9:08:2c:83:43:7d:3b:30:
7b:de:5a:e9:5f:07:1d:fc:f7:ed:78:0a:4d:ff:7d:
88:a3:31:7e:de:67:cc:89:2d:ad:24:c3:66:5c:e4:
8b:42:44:e5:2e:f4:78:b6:a6:75:88:c0:80:9f:b5:
f3:a3:14:4b:f2:e6:2f:2e:78:2d:8e:fd:91:38:e8:
eb:e8:52:46:58:43:20:f1:86:9f:f8:c1:b9:d4:60:
04:9e:69:4e:67:de:8c:ae:b3:c1:26:3b:d3:cb:a0:
d6:95:f0:1f:97:3a:79:48:2e:b8:ea:20:b9:fa:a9:
92:da:69:ac:e9:c8:f1:fe:c0:b2:e7:68:9d:00:ca:
45:dc:6e:5d:a7:b5:28:81:ca:bb:a8:c4:df:29:22:
8b:ee:b6:45:17:2d:d3:b3:5d:8d:f5:f6:7e:fe:d7:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:E8:79:D0:F5:CD:8A:38:82:E6:CA:29:8C:47:8E:F6:21:2E:1D
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:c4:00:3a:52:f5:ec:b1:da:68:7b:11:4e:a0:4f:53:b2:
8f:ad:fe:44:36:ae:b4:c2:31:87:aa:cc:5d:db:5f:7c:0d:86:
ee:02:96:c3:cf:ee:5b:78:1a:c1:a3:09:d6:3d:25:14:bb:84:
40:67:7f:a7:ff:dd:e0:6b:23:bc:9b:2f:f3:cc:a6:f8:8a:c7:
79:b7:dc:73:6f:19:44:8a:09:85:76:f2:52:90:c6:d9:ae:30:
20:6f:3a:b0:02:4c:3b:d3:f6:57:28:1b:7a:c2:84:ad:34:2b:
2c:81:18:db:bd:3d:ee:24:b1:3e:0c:c4:34:ad:f3:9c:3a:c9:
5f:45:0a:ac:01:36:2a:ba:80:d7:f9:63:97:d6:5c:15:3e:92:
d2:ed:61:e9:d1:40:5c:b6:a4:6b:e9:c8:74:c0:10:d2:73:34:
1c:76:68:14:fb:f1:60:a0:24:e0:41:b9:cb:39:54:0e:10:f5:
26:a4:89:5f:8e:1c:f8:96:5c:8b:66:1e:94:65:91:58:41:14:
4d:70:a0:7e:fb:25:dc:11:20:55:b8:66:1b:1d:04:9d:fb:13:
75:47:02:a7:00:5b:92:84:b0:64:50:ff:af:65:57:ae:b8:9d:
0a:70:29:93:b0:d5:dd:7f:c0:42:66:1c:41:d7:98:77:6b:90:
71:83:3f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+h3hCDwTMoK8xOzFKKZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODkyMmQzNDgxMzA4ZGJkNGMyYWI2ZTcwZWFkYTlmNzVm
NmRiNjgwHhcNMjUwNDE2MTkwMTE4WhcNMjUwNDE3MTkwMTE4WjAzMTEwLwYDVQQD
Eyg5N2RjZTg3OWQwZjVjZDhhMzg4MmU2Y2EyOThjNDc4ZWY2MjEyZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFgtksXScP4mB6TBx54CfYHsLyIr
Ibu6hrKCQ+1AHhfwvPcUc1ME3zlSQ2bfrH1tWmh0SIq6VRYpjss+D32BIvrfwTyD
vinSU/68I+T+dwEfLEC1RYp2CdyMvqCT+b7W+Qgsg0N9OzB73lrpXwcd/PfteApN
/32IozF+3mfMiS2tJMNmXOSLQkTlLvR4tqZ1iMCAn7XzoxRL8uYvLngtjv2ROOjr
6FJGWEMg8Yaf+MG51GAEnmlOZ96MrrPBJjvTy6DWlfAflzp5SC646iC5+qmS2mms
6cjx/sCy52idAMpF3G5dp7Uogcq7qMTfKSKL7rZFFy3Ts12N9fZ+/teOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfc6HnQ9c2KOILmyimMR472IS4dMB8GA1UdIwQY
MBaAFBqJItNIEwjb1MKrbnDq2p919ttoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgt
N2FlMjYzOTIyODIyLzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgtN2FlMjYzOTIyODIy
LzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7jEADpS
9eyx2mh7EU6gT1Oyj63+RDautMIxh6rMXdtffA2G7gKWw8/uW3gawaMJ1j0lFLuE
QGd/p//d4GsjvJsv88ym+IrHebfcc28ZRIoJhXbyUpDG2a4wIG86sAJMO9P2Vygb
esKErTQrLIEY27097iSxPgzENK3znDrJX0UKrAE2KrqA1/ljl9ZcFT6S0u1h6dFA
XLaka+nIdMAQ0nM0HHZoFPvxYKAk4EG5yzlUDhD1JqSJX44c+JZci2YelGWRWEEU
TXCgfvsl3BEgVbhmGx0EnfsTdUcCpwBbkoSwZFD/r2VXrridCnApk7DV3X/AQmYc
QdeYd2uQcYM/Bw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:03:58 2025 by rpki-client