Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: VUhvKZrb45jnC8pgUcK/UQzH5ruM/026q29yWqu1r9k=
Subject key identifier: DD:77:8B:16:57:8E:49:C3:96:06:F6:9A:1B:99:F4:FC:E9:65:CB:2D
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0196C729316C4278980DE151A5FFD9B152DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0909
Signing time: Tue 13 May 2025 01:01:27 +0000
Manifest this update: Tue 13 May 2025 01:01:27 +0000
Manifest next update: Wed 14 May 2025 01:01:27 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: NPn1AxOJjkHsKepSSrgFuUZhW3wDKq7OEPcEm6NuVBI=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:31:6c:42:78:98:0d:e1:51:a5:ff:d9:b1:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: May 13 01:01:27 2025 GMT
Not After : May 14 01:01:27 2025 GMT
Subject: CN=dd778b16578e49c39606f69a1b99f4fce965cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:29:72:80:01:14:c2:7b:9d:86:c8:84:d8:
9c:6f:da:97:d8:51:a3:ce:8c:c1:99:bb:a5:7c:32:
32:3e:1a:2e:d8:ec:69:68:0f:59:ba:ec:24:5d:a8:
09:f7:65:e9:5a:73:04:1d:ee:b0:31:7a:38:9c:3f:
da:d6:9d:f2:68:cf:ed:42:d6:08:50:16:4d:44:a4:
26:bb:51:3c:91:4a:67:a6:32:78:84:f3:48:c9:07:
45:e5:74:d5:30:64:9d:bb:28:0b:52:f5:b5:a2:f0:
b8:8b:ad:c9:dc:81:96:52:2d:ea:80:3a:de:a0:c8:
4d:9d:8d:d2:b3:c0:f5:af:7f:8d:1a:62:b5:69:d5:
3b:2d:5b:1b:67:5b:20:dd:a8:4d:b0:66:ff:46:1d:
2b:eb:16:f5:48:e3:81:af:5b:be:f7:fd:7b:d5:5a:
1f:a3:af:86:a1:23:fc:45:bf:38:01:e2:b7:fa:87:
1c:14:42:c4:53:66:60:1a:4b:3c:14:7a:cb:18:da:
5a:4f:0e:81:82:8d:62:da:de:e4:74:30:ff:f1:7c:
ea:f1:7e:c7:66:13:e1:73:86:47:4e:a1:b5:7a:fd:
79:0d:9a:2c:e6:53:a7:c1:2c:f4:4e:ad:22:07:5a:
9c:1b:d4:63:39:1b:79:73:3c:d4:cb:38:ec:17:68:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:8B:16:57:8E:49:C3:96:06:F6:9A:1B:99:F4:FC:E9:65:CB:2D
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:32:e4:8e:82:b0:4c:85:d6:6d:b7:0b:77:4f:16:09:59:
70:23:f4:60:ed:bb:c2:ee:16:54:a5:39:7d:89:88:0c:25:35:
ad:97:35:7c:56:5c:96:cd:0b:74:43:a0:93:f0:d7:5d:43:1f:
02:5f:32:ad:92:ef:c6:c8:59:18:a5:0e:8b:8c:1e:47:04:16:
9b:21:de:69:2a:0b:20:d6:59:fb:b9:2f:3e:eb:4a:cd:7d:b3:
51:d9:20:a5:fc:68:cb:65:aa:d5:75:4f:18:a1:d9:9a:96:86:
a4:58:13:51:eb:55:ee:f2:34:16:51:89:4e:be:13:4a:55:e8:
3a:d2:80:aa:39:0e:d4:24:61:3a:0e:5b:97:b1:2e:a1:f9:a6:
92:bd:9e:32:d0:c4:67:a6:77:a3:1a:c5:65:06:66:18:90:a2:
4d:9e:34:19:7a:27:8c:b3:2d:e5:8b:b5:d2:6e:d0:4d:1d:cc:
36:35:ae:2b:81:36:29:70:1f:45:fb:a8:06:05:2d:36:3d:cc:
0e:03:c4:7e:61:b8:54:51:45:67:6b:0b:b1:b6:31:61:dc:8a:
8d:52:cc:4d:6d:f3:7e:de:2c:cd:81:fb:31:e7:ed:81:b7:86:
d2:af:14:c1:fe:72:fa:71:51:11:35:1d:5c:1a:4e:d9:5c:45:
84:be:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:06:08 2025 by rpki-client