Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: V6tcoaLL3MQj+QO57cr0ACIqpq+tx3/p1qLouKzNEm8=
Subject key identifier: 39:82:B6:66:59:78:9F:DC:E5:3D:DD:3F:2C:D9:EB:79:B8:21:37:2F
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019848893194715AF4A38F369797ACEB84B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 21:00:07 +0000
Manifest this update: Sat 26 Jul 2025 21:00:07 +0000
Manifest next update: Sun 27 Jul 2025 21:00:07 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: LzFKOY6zkLn+O36xTk38w4RHl9VcD7dg505exMgQxbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:31:94:71:5a:f4:a3:8f:36:97:97:ac:eb:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jul 26 21:00:07 2025 GMT
Not After : Jul 27 21:00:07 2025 GMT
Subject: CN=3982b66659789fdce53ddd3f2cd9eb79b821372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:95:9e:4f:c6:8b:40:3e:04:f6:d1:63:4d:
97:c0:0a:95:1f:cd:c3:7d:10:1e:15:18:f5:52:25:
13:5f:50:3e:e0:bb:0f:4f:cb:0e:f6:4c:4d:1f:f3:
eb:1f:79:9b:3a:51:d0:94:5c:27:14:de:52:a3:6a:
92:f4:01:01:e0:18:84:2f:2e:a7:a7:10:c7:ef:29:
36:be:72:a5:e0:bd:6f:78:13:5c:b7:74:65:a8:84:
64:08:e4:c7:5d:12:b3:2f:e9:87:cc:fc:51:dd:1e:
5e:ba:ec:50:56:00:07:ce:33:7b:e1:40:1f:8a:20:
97:86:1f:53:c4:c3:15:02:9e:2b:fd:b9:99:a7:0c:
f5:2b:86:90:8f:b4:70:b6:69:a8:1a:0e:79:47:e3:
63:a6:df:24:a1:95:5a:6e:6d:04:b3:7d:92:cb:5c:
85:89:38:dd:1d:b7:86:07:f7:ac:81:e1:eb:19:02:
eb:7c:4e:be:3f:fe:ae:6d:d0:17:0e:17:d3:f2:89:
a0:0b:e0:d0:27:0f:22:b5:60:16:3c:55:39:81:86:
ba:fd:ef:2d:8a:7f:ea:6e:08:da:a5:b6:97:e3:90:
99:d4:8d:b1:18:af:8e:38:f7:61:1a:86:6d:b6:f0:
61:d9:aa:20:4b:1f:6d:97:2d:45:92:0c:f3:c0:83:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:B6:66:59:78:9F:DC:E5:3D:DD:3F:2C:D9:EB:79:B8:21:37:2F
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:46:13:2b:8d:a8:1a:89:df:53:1f:8a:c5:31:c6:5e:30:
01:e4:78:de:9e:a9:b0:88:64:df:d9:b2:c9:d5:1b:58:6c:7c:
bb:a4:bb:70:63:cc:aa:f8:f1:1b:8a:e6:15:31:7c:03:92:2e:
ac:8e:6f:0f:a5:70:9c:42:f7:a1:7a:a1:48:15:c9:cb:91:aa:
cc:58:f9:db:58:80:cf:e3:13:26:54:fe:ee:3b:a8:0b:05:b1:
95:42:11:2c:cc:af:dd:7b:43:cc:43:17:ec:2e:aa:73:b7:a3:
e1:ad:ec:e9:16:9f:9a:24:e6:ff:26:91:8b:78:9e:eb:5d:81:
ee:30:51:a1:fc:26:a9:3c:52:b0:93:cc:bb:92:e5:2d:a9:87:
15:82:26:de:25:af:a8:e6:f9:10:77:b8:aa:fa:8d:f6:5d:37:
f8:6a:ee:1e:a9:fa:cf:65:9f:b7:52:df:a5:01:e1:7b:ed:a4:
12:1f:1e:58:e6:22:45:66:0c:41:0a:b2:04:d4:fd:49:38:27:
a2:bc:c7:ce:20:95:9f:77:ec:57:ca:ed:b8:9d:17:20:90:27:
37:9e:f0:d4:fa:50:82:5d:54:98:c7:da:9c:db:ff:7c:30:fc:
86:4b:96:b5:b5:ec:8e:2f:ca:c3:0e:a6:af:fb:d5:f8:36:9f:
96:e6:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:58 2025 by rpki-client