Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier: fTggVQ3XuWbkDNz7vwICYJJWyeiG1KpAWXJA3nbWMBA=
Subject key identifier: 85:A3:FC:AF:D8:D3:DB:81:A7:C1:A2:35:3B:64:12:74:21:73:B8:25
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 019A2E1F7C08F071D0F1BAE1376861C69962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 04:00:06 +0000
Manifest this update: Wed 29 Oct 2025 04:00:06 +0000
Manifest next update: Thu 30 Oct 2025 04:00:06 +0000
Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: DGv6i4kob8LtiXSrmNjbTJFT7H82FoEdapJu8tu0Shc=)
2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=)
3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=)
4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:1f:7c:08:f0:71:d0:f1:ba:e1:37:68:61:c6:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Oct 29 04:00:06 2025 GMT
Not After : Oct 30 04:00:06 2025 GMT
Subject: CN=85a3fcafd8d3db81a7c1a2353b6412742173b825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:7e:d3:45:6c:06:53:aa:07:0a:8f:b2:be:
3d:17:64:c8:3b:e5:c1:8a:9a:ae:90:6e:d5:57:a5:
f9:41:40:88:d9:51:a8:64:28:ac:33:fd:bf:43:bb:
d3:dd:74:46:64:67:2f:d4:d5:ef:7b:45:ae:3e:73:
53:b5:6c:f2:c1:f9:95:b2:04:a4:8f:b3:91:97:00:
18:a2:a4:d7:c3:12:20:82:21:88:ed:53:d3:2b:f9:
52:b3:e3:ea:64:9e:3a:39:97:d7:06:61:c7:bf:0e:
f9:a8:0c:93:24:77:6d:e9:d3:1b:41:21:69:d6:29:
4a:2d:9e:06:3d:50:db:90:60:02:25:7e:4b:ba:bd:
8e:73:ad:01:6a:e7:9b:67:7f:0a:62:6a:fd:fb:0e:
e5:28:16:5b:56:48:56:74:d9:8b:d6:2a:3c:51:d4:
f1:95:43:ec:a8:84:57:a1:32:0b:cf:5e:d6:08:df:
a3:26:e7:a0:96:ed:55:88:cb:ce:c2:76:8f:04:32:
dc:a2:00:5d:34:8e:62:81:b2:99:62:bf:8c:71:04:
b4:0c:ca:a4:fa:56:4d:b2:08:38:50:74:3e:a7:02:
dc:04:eb:33:58:38:b4:37:a4:f4:ed:71:9d:c7:43:
91:66:e6:b0:bb:4e:9c:fa:d7:80:6b:a0:53:2b:1a:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:FC:AF:D8:D3:DB:81:A7:C1:A2:35:3B:64:12:74:21:73:B8:25
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:c2:b3:09:5c:f0:94:ce:e1:8c:1d:8e:d1:17:0f:a7:8b:
aa:96:97:ce:bd:50:55:76:37:9c:d3:fb:44:88:10:51:34:7d:
a2:ea:bb:97:3d:2c:6e:0c:e4:91:21:85:a4:08:f7:74:be:c5:
ff:0c:54:e4:f9:3d:0b:d4:1e:5e:00:5b:ac:66:51:bc:3c:db:
94:56:11:ea:ce:1a:21:83:79:32:12:c5:f5:3c:06:de:77:af:
09:40:81:5a:32:3c:a9:4b:f1:6f:3a:88:b4:2d:eb:ba:53:f7:
da:08:7a:cf:4e:2c:7d:d5:d1:67:1f:23:7a:f5:65:19:36:90:
1a:02:ad:78:f0:cc:c4:13:39:d4:52:91:db:cd:d8:db:ab:a7:
45:c6:8e:27:fb:e1:cf:6a:8e:a1:af:10:fb:11:6f:b3:6a:76:
60:fa:21:ab:b2:9c:30:af:d3:3d:a6:94:a3:9b:c8:43:c0:af:
d7:4b:49:a0:84:c5:6e:be:70:7e:80:be:d2:a5:7a:f7:29:f6:
d9:c1:21:04:7b:17:26:03:21:97:4e:25:ea:1f:ed:2d:75:e7:
fd:d7:3d:c8:2e:e6:1e:0e:ae:c5:47:90:88:c9:38:32:3e:28:
90:ff:ae:b4:fc:c9:b7:c8:a0:4c:6f:a2:85:00:ae:8e:d8:61:
f5:f5:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:28:49 2025 by rpki-client