Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: X9Ed+Zs3sp1JwDF9xaDdCMsWsikcoj9+QHoTtwPoJ3g=
Subject key identifier: 19:30:FC:40:D5:F2:5D:78:06:DE:1B:C6:6A:E5:ED:F8:12:4C:E9:05
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 01988EED46064D99D72EDB0694F50064E977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 09F5
Signing time: Sat 09 Aug 2025 13:02:51 +0000
Manifest this update: Sat 09 Aug 2025 13:02:51 +0000
Manifest next update: Sun 10 Aug 2025 13:02:51 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: tT7lBFduh6SHkN9rtNX9BLn7+wkyYFuQT1iZWhoNCgQ=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:46:06:4d:99:d7:2e:db:06:94:f5:00:64:e9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Aug 9 13:02:51 2025 GMT
Not After : Aug 10 13:02:51 2025 GMT
Subject: CN=1930fc40d5f25d7806de1bc66ae5edf8124ce905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:3f:0e:04:2e:e2:f4:ac:0c:7d:db:45:f2:
8c:1c:7b:e7:da:b2:53:e7:af:98:d6:f3:67:0d:54:
34:7f:1b:bf:9d:04:1d:8d:58:bc:14:de:fe:51:66:
0c:ab:85:02:39:38:fe:ce:af:b4:e9:03:b6:0d:c0:
d6:ff:10:b7:f5:60:ed:24:62:3b:7a:06:8a:6a:f0:
e6:9d:9e:84:a1:03:50:9a:e5:6f:0d:f7:e3:50:12:
e8:e6:94:ed:12:85:ba:63:c4:d0:b6:55:5b:b7:95:
a2:02:96:21:5a:d7:1e:47:f3:d8:87:71:a6:9c:03:
57:fe:16:18:f9:a2:36:ec:be:38:9a:61:23:10:53:
07:22:d7:0a:9f:7b:b1:7d:ca:59:65:75:94:fc:ef:
62:d3:0c:63:cf:9d:60:98:db:64:9e:e6:40:68:97:
25:b3:d1:32:28:73:02:ba:b7:42:aa:20:98:67:ed:
b7:8d:30:73:e0:25:f2:7e:9c:a9:1d:64:84:b7:b2:
4a:93:70:3c:bf:51:85:1d:d3:f0:3d:1e:04:8e:17:
51:0a:7e:55:59:e8:f0:2e:fe:e0:6d:b4:af:48:16:
0e:6b:fc:78:e7:c4:6c:56:0f:4f:8e:e7:07:6a:1d:
b0:39:54:03:0c:2b:6e:86:2b:91:47:65:7f:db:7d:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:FC:40:D5:F2:5D:78:06:DE:1B:C6:6A:E5:ED:F8:12:4C:E9:05
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:9f:c1:b8:86:f7:04:a7:e7:3e:3a:34:37:79:32:6d:24:
6f:58:76:00:df:6e:33:b1:4c:3c:62:0e:cf:e3:54:50:5b:f9:
59:64:b4:a5:17:8b:28:02:e6:89:d9:a8:ef:d4:a4:c3:88:c3:
7e:d2:7e:7a:34:52:dd:58:9b:c9:3c:fc:6e:f5:86:87:6e:0c:
f5:30:44:6b:9d:76:95:c0:4d:3b:cc:e6:10:de:b6:fa:eb:17:
e1:47:8d:0f:ce:f2:62:13:fc:35:7b:d5:b2:70:43:96:ef:10:
4a:81:13:d6:4f:7f:95:f6:8b:06:12:45:b9:9a:a2:02:df:d4:
f9:45:76:62:6d:81:c1:00:1c:e7:f7:9a:4f:69:de:7c:d4:82:
40:96:58:d7:3f:17:13:94:51:71:25:8f:45:69:4b:5b:15:aa:
ad:10:b1:0d:85:af:07:10:0b:93:7c:1f:12:c8:9c:e4:02:23:
07:33:27:13:cd:b3:87:34:cb:c2:91:8b:77:f4:96:ae:8a:0e:
e0:4b:4f:f8:46:db:12:08:c4:ec:73:fb:8b:90:4a:7a:c1:e2:
3f:ef:53:37:a5:c1:cc:03:51:a4:ab:9d:39:de:4c:9b:49:d2:
30:68:2b:fc:a1:d3:83:f5:26:bd:64:0d:4e:fb:ee:c7:ea:b5:
eb:f0:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:12 2025 by rpki-client