Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: e/QMP5wgDIryyDHU8D/PRmSgccUgRBWXAsdBvxeI/X4=
Subject key identifier: A6:2B:7A:F7:1F:32:64:92:A9:47:D9:13:F0:3A:88:76:49:F6:B0:BF
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0198D6606D8D8A8B08AACEA430A4CDAA68EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0A1A
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: 4xraaMU4OlAW/iv293ol3dtSlPrXRcZLY3KVBOyAxjk=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6d:8d:8a:8b:08:aa:ce:a4:30:a4:cd:aa:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=a62b7af71f326492a947d913f03a887649f6b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:73:fa:13:25:a0:84:1c:26:20:26:ab:c9:
38:60:1f:8b:84:67:4e:ae:8b:0a:d1:4d:9e:5f:55:
5a:12:1e:23:15:31:76:16:84:42:99:14:c6:b9:fb:
22:0b:22:ec:59:b7:b8:7a:02:2a:06:68:a6:24:d2:
3e:5d:c4:fa:f4:96:99:42:a2:a1:70:74:72:21:80:
99:69:76:be:9f:71:8c:bd:4b:9d:c8:60:11:de:13:
d9:26:be:14:54:59:a1:ec:60:03:26:57:45:05:00:
42:27:7f:02:70:39:e9:e6:28:7d:e1:5d:13:8a:51:
dd:7a:93:ae:d7:aa:64:94:c9:d1:90:bf:f2:d3:99:
68:c8:37:3b:2f:81:62:44:55:af:37:63:4f:14:e4:
27:d3:80:20:61:d9:60:6e:fa:69:35:e2:fc:8e:e2:
3b:da:1b:97:20:c2:e7:e6:f9:80:90:c7:84:d4:93:
bb:99:8f:6d:5f:7a:3b:3e:6c:18:db:33:52:88:80:
2f:d5:fc:47:2b:42:61:a3:e6:d6:02:8e:63:d9:05:
eb:91:99:1e:15:77:bf:d4:4e:be:77:c9:7c:84:4f:
c4:f9:a6:13:59:4e:02:cf:13:9c:aa:45:3f:15:2a:
a6:c8:25:b0:7e:a6:5f:8b:da:a5:b2:83:f7:82:4c:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:7A:F7:1F:32:64:92:A9:47:D9:13:F0:3A:88:76:49:F6:B0:BF
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:61:5b:52:6a:ca:61:ef:1d:db:a4:2a:5c:88:45:41:2f:ab:
eb:10:f9:ab:59:c2:02:4a:d0:56:11:db:7c:4b:9f:4d:c5:87:
1c:ea:a3:b1:38:f8:04:bd:57:c9:a1:03:c4:b3:e6:b0:b5:42:
3b:61:f4:e6:3f:19:77:b6:6e:4d:98:b5:64:b9:1f:ac:86:5a:
c5:26:fc:6b:16:f3:38:27:ad:a5:a3:79:02:1d:7f:ed:e0:0b:
c5:e3:4d:57:63:02:5d:39:79:cb:06:be:71:1f:8c:bb:c5:ac:
4c:c8:51:a7:d3:0e:16:17:da:d3:97:ea:09:ef:7e:56:cd:37:
5f:57:3e:b7:71:95:5d:8e:ef:c9:ea:ab:80:60:55:11:13:b9:
a6:dd:9f:2f:af:a3:86:0a:47:e5:78:c3:e0:37:c4:ff:63:d6:
44:a9:f7:3d:de:54:68:c7:7c:63:3d:c8:56:ce:d6:97:bc:5c:
71:ac:56:20:05:51:f6:2d:3d:ff:79:58:38:21:01:60:15:a1:
27:5e:17:7f:91:71:a8:d2:ee:95:99:14:c0:df:eb:fb:a0:66:
0c:55:cb:04:ba:26:5e:9a:d9:83:37:e9:ed:10:97:ca:22:0d:
e3:8f:00:39:88:8b:70:8a:f3:84:ff:7d:f9:c0:d9:11:60:b2:
8a:3b:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:26 2025 by rpki-client