Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: QuO97AQ7ss0LeufYt0srMmhK1sPMkflygtip2g1wYhU=
Subject key identifier: A1:F5:76:68:64:D8:CB:C5:31:CB:6B:02:64:F2:20:50:25:1A:A8:B0
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 0198D4A7DBE423E8BD13BE1D1E8C5016B49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 09BA
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: JNBo99Ma/STdoF+qBclIQBATydF5wB+gzv0G3n3Mz8M=)
2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:db:e4:23:e8:bd:13:be:1d:1e:8c:50:16:b4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=a1f5766864d8cbc531cb6b0264f22050251aa8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:fa:f1:a1:37:36:0a:b9:d5:54:5c:49:ad:
13:b5:9c:fb:84:64:6a:a3:a6:26:3e:1b:a0:40:c9:
a3:0f:f8:7e:0e:81:1f:47:c1:4b:76:27:75:d2:e2:
6b:d9:97:71:3b:18:41:05:15:de:2e:38:fb:50:4d:
f8:f6:fc:8c:5e:2f:4b:1a:ad:dd:bd:72:d2:dd:ef:
1c:97:df:70:f6:29:ad:83:77:56:00:9a:25:0c:5e:
0b:6d:f5:db:7d:61:aa:4c:f9:07:9c:09:67:5d:8e:
8c:77:63:be:5e:ff:cc:8a:8b:ad:53:8a:21:d2:dc:
9c:8f:26:d1:eb:69:da:24:12:01:71:e3:e5:8c:6b:
f7:2e:d9:63:11:3a:d7:a6:3d:cc:6f:71:0f:6d:da:
0b:fd:25:16:51:a3:26:6e:04:ae:6e:22:d4:54:56:
d0:92:77:de:41:31:41:17:a9:5a:18:56:b3:58:59:
24:a3:18:b8:9e:9e:57:e8:9c:ea:c8:0a:83:56:2c:
93:db:e3:b3:4e:d2:5c:4c:02:be:cc:ce:b4:18:20:
a0:e6:8d:f5:ae:37:87:8c:f4:3a:42:37:ec:ab:b4:
39:1a:38:c4:3b:8f:4c:8a:d7:0a:9d:1c:56:77:15:
70:20:eb:2e:fa:15:61:12:3d:d2:be:dd:8e:9d:09:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:76:68:64:D8:CB:C5:31:CB:6B:02:64:F2:20:50:25:1A:A8:B0
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:38:3f:a8:c9:5b:b4:a9:78:04:ce:1a:8d:cd:78:4a:71:88:
65:9a:06:61:fb:38:55:bb:5e:88:26:a5:64:6f:ea:08:32:70:
bb:90:c0:25:bb:e1:e9:72:50:5a:77:dc:9c:74:81:71:6b:27:
5a:64:54:5a:78:54:4b:4a:1f:ff:84:c0:54:5f:11:c5:fb:a8:
a6:57:ce:a8:af:e8:8a:e4:6d:a0:a5:b7:fb:c3:8f:40:ed:92:
35:7f:93:65:9a:0a:88:ff:fa:eb:9a:1e:96:c7:9b:27:fd:be:
79:45:e5:3f:ed:a2:0f:a4:6b:59:1b:a4:36:4b:90:0f:e2:06:
cc:b5:45:f4:8f:a5:ed:5b:1a:bd:55:86:d3:76:95:51:d2:9d:
52:f1:be:4a:e5:91:9c:f5:a7:0f:a7:36:18:9c:4e:4b:30:18:
b1:86:9f:56:d2:69:41:46:b4:1f:04:47:77:72:7f:03:33:ee:
89:b4:75:6d:e1:7e:46:66:fb:19:11:9d:52:56:fd:9f:cf:55:
d5:55:22:74:4e:57:36:6c:ea:e9:47:20:76:04:af:11:e8:db:
83:ea:98:75:eb:2f:18:20:f3:31:72:e0:9e:64:38:ad:1f:51:
d2:d9:02:10:50:08:77:62:bf:16:4f:19:b5:c9:67:2d:a6:1c:
27:c8:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client