Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: 7pPZfJNoUd/hkodEaYZcXyaW+XkTKKZeiCJ3T8qRoqo=
Subject key identifier: 23:68:E7:55:1C:3E:62:8E:7B:3B:C8:A6:22:A4:AB:9E:87:8F:AC:9D
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019A4F2B63167B8126175B9EB4FAFC38F7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0A7E
Signing time: Tue 04 Nov 2025 14:00:34 +0000
Manifest this update: Tue 04 Nov 2025 14:00:34 +0000
Manifest next update: Wed 05 Nov 2025 14:00:34 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: mXk3VigoFW1X7F6vE5L/SjVMr1GNWkk0wLnUF+cCADc=)
2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:63:16:7b:81:26:17:5b:9e:b4:fa:fc:38:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Nov 4 14:00:34 2025 GMT
Not After : Nov 5 14:00:34 2025 GMT
Subject: CN=2368e7551c3e628e7b3bc8a622a4ab9e878fac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:25:ef:fc:92:5a:d5:a3:9b:f4:01:38:1e:
c8:30:89:47:ed:39:a9:b1:61:ea:cf:85:0a:ad:4a:
87:08:6e:3e:eb:58:4f:5f:f5:4e:6f:8f:11:09:b3:
e2:51:79:76:13:ac:6d:5f:28:57:02:e7:84:23:52:
20:4e:57:bd:d9:bb:95:c6:89:b6:78:11:ca:0b:c4:
5b:f5:04:d9:73:b8:04:77:83:fc:3b:29:40:f1:8d:
45:21:1c:63:ba:c8:4c:4d:a5:e1:ac:f7:c2:db:b0:
84:f4:3b:c0:8a:f7:b9:e2:28:06:46:68:e1:80:cd:
df:bf:e6:6a:e9:e0:31:cb:ad:76:f2:ae:91:a5:6d:
67:ab:c3:1a:59:38:7e:23:fe:17:4f:dd:86:2f:bc:
45:11:d1:3b:16:7b:72:e4:cd:bc:47:e2:8e:95:70:
08:a6:4e:0d:06:f2:d9:a1:20:5d:fa:b7:60:45:b5:
3e:64:25:a7:a3:b5:c1:2b:f5:1c:91:66:ef:d7:f3:
4d:e8:56:4d:76:a7:e9:d6:f7:a7:e4:5b:2a:93:f5:
52:32:77:28:b6:5f:c6:86:a0:94:c6:b9:d6:4e:62:
a7:0e:9f:1c:77:e7:ae:39:f3:97:66:8b:5b:72:62:
6e:78:12:97:d0:e8:f2:9a:d2:64:40:9f:de:e4:db:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:E7:55:1C:3E:62:8E:7B:3B:C8:A6:22:A4:AB:9E:87:8F:AC:9D
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5d:54:82:74:6a:02:14:3d:27:48:14:4c:bb:65:00:25:7b:
f3:b7:7e:b8:9b:ca:43:36:01:8c:f4:9b:82:86:14:ef:9d:53:
72:76:74:d8:98:1d:24:72:fb:7c:e9:26:f6:91:2b:ab:53:66:
03:6a:83:8d:81:69:2a:4d:c5:b6:e4:ae:f3:23:d4:30:e9:e9:
80:61:1f:0d:34:86:b8:2e:65:75:02:d4:36:d7:ed:52:47:39:
61:b7:9a:12:07:0d:9f:b4:1e:1b:53:6a:e7:0d:2b:3e:ea:37:
55:58:f2:d7:38:b7:c8:5c:67:a6:83:68:67:07:cb:b6:a0:e7:
ff:56:30:01:ea:f7:d9:17:33:72:2b:0c:76:8d:e0:4b:78:cf:
ed:ae:a6:ef:0c:17:32:18:98:40:26:13:9d:76:f8:3d:97:02:
86:b4:eb:e9:20:0e:b1:e1:c1:91:d6:bd:71:48:68:2b:f7:84:
42:bb:fd:10:74:77:2e:c8:fc:58:77:2b:62:48:c2:38:02:3b:
1a:14:58:c9:0e:e8:46:ca:b5:f7:69:aa:df:ed:ea:7f:ae:63:
41:46:b0:f9:dc:d2:3c:11:66:b8:de:be:8c:80:8d:89:f7:9e:
40:30:da:2a:a2:8e:5b:15:60:2a:43:c5:b3:32:d3:06:9a:2d:
e8:c2:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:01 2025 by rpki-client