Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: B9S6wGZgZvpQhfIMZTv/y/E/GG0z2NfIl8jxCP0H2yE=
Subject key identifier: 93:83:48:4B:70:77:62:11:CA:8B:DF:CD:C5:14:AA:FB:B6:19:3C:8B
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0199FBEC096726633217659798D96BBE05B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0AB2
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: DHi5LB8v7xjyIBVyEIaNwsz0qqIMkdgHgcK9UcDB9gk=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:09:67:26:63:32:17:65:97:98:d9:6b:be:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=9383484b70776211ca8bdfcdc514aafbb6193c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:dc:73:e2:a2:3d:b8:cf:37:de:2f:7c:21:
af:bc:de:87:21:de:3a:89:ae:fc:62:13:61:52:a5:
50:32:c9:57:32:dd:1d:43:fc:96:aa:49:11:a9:5c:
ba:08:25:ec:d8:2c:14:71:9f:5e:64:a1:78:ac:12:
f7:16:e8:62:9f:55:ff:36:42:e4:16:07:84:49:c5:
fb:ff:5d:fa:80:c1:1a:f4:93:de:3e:6c:f8:0a:a6:
0f:b2:71:d2:91:2c:44:63:37:10:61:5d:0a:48:44:
24:0b:81:e8:38:ad:bf:51:6b:05:83:a9:0b:b1:1b:
49:02:62:18:8e:3f:36:f2:95:6e:7d:74:74:27:4c:
b5:30:15:10:88:f2:38:71:f4:aa:31:71:ae:e3:24:
60:18:2a:bd:40:23:be:16:4f:5e:39:a0:a4:3b:77:
45:10:53:7b:ac:ff:dd:02:1e:ce:8c:e1:71:f2:68:
23:9c:4e:31:7e:fb:23:5d:d9:cc:65:d2:f8:bb:c5:
08:e6:ad:fc:de:37:af:e4:d1:99:85:52:fb:3e:ad:
e0:24:ed:f5:72:c1:bb:49:43:11:74:18:4a:1a:5b:
56:df:7e:dc:ce:9f:a8:c4:8b:0c:c9:59:f9:32:a1:
01:c7:75:18:d0:6e:5a:a2:a6:5d:8c:81:e7:09:03:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:48:4B:70:77:62:11:CA:8B:DF:CD:C5:14:AA:FB:B6:19:3C:8B
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:be:b1:77:23:04:d3:ce:22:4b:42:17:36:b0:57:dc:58:
e8:e8:e7:8f:c0:0b:dd:70:a7:6c:2a:58:9d:b3:11:ad:b6:c3:
60:4b:a8:cc:cb:53:81:b1:05:67:b5:2d:16:af:9d:5e:1e:de:
4a:c2:91:5c:71:94:80:5b:f4:76:a1:a8:62:45:98:fc:0d:41:
8d:5f:3f:2f:e5:47:72:f7:2b:14:5a:4b:ad:dc:94:48:64:3f:
f7:c3:7a:ea:ac:3e:3f:4b:60:2c:e7:d7:a4:8a:87:bf:2d:6c:
66:ba:aa:89:b2:ba:3e:14:8c:17:2e:cd:4d:66:a2:5b:22:f3:
08:9f:9f:9a:5b:19:a6:b6:1f:fc:15:3d:d6:11:31:a0:f5:44:
14:fd:a3:99:aa:57:f0:14:2b:a1:f0:61:f4:63:e6:64:d1:bb:
0d:c3:48:7b:2c:2c:ca:55:0a:56:47:6e:fb:06:83:f0:4f:24:
c6:af:2c:99:ae:32:e3:e3:91:59:aa:d5:64:c2:2b:9c:3f:f1:
9c:6d:ff:2c:c9:cf:88:ac:5f:9d:23:94:38:70:52:60:df:49:
4a:3d:1c:3c:30:26:97:ba:9e:f7:13:05:ff:86:23:4a:83:ef:
43:ce:fc:c5:53:61:34:5c:88:9a:bf:85:51:ba:e6:94:71:55:
db:02:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:14 2025 by rpki-client