
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: GiB07RltogPNnJo2IndKIfhLCjH1VT2AMiH4Lh7YzBQ=
Subject key identifier: 7F:C7:87:BD:CA:3B:8B:28:7D:CF:83:A8:54:86:89:5E:CD:30:3D:1A
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019748C2E301B5DAA7C5B5844FCD297300E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 08ED
Signing time: Sat 07 Jun 2025 05:00:21 +0000
Manifest this update: Sat 07 Jun 2025 05:00:21 +0000
Manifest next update: Sun 08 Jun 2025 05:00:21 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: qvDQi4mjcLIhrQecd6YL97T6aaXCkg3VjKVKfSWvm1o=)
2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:e3:01:b5:da:a7:c5:b5:84:4f:cd:29:73:00:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Jun 7 05:00:21 2025 GMT
Not After : Jun 8 05:00:21 2025 GMT
Subject: CN=7fc787bdca3b8b287dcf83a85486895ecd303d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:d2:14:65:c9:18:d6:e2:38:74:c2:d9:26:
27:28:a9:35:a1:2d:a5:c8:ad:a2:e2:76:79:88:15:
9f:2e:6d:04:5b:7e:83:d7:9e:ea:81:c1:a2:df:e4:
05:02:ca:9d:98:07:89:80:80:3f:05:2b:7c:1c:fc:
7e:97:a0:2c:ad:62:b9:4b:32:7a:81:59:c2:59:b6:
55:b2:3c:d0:d5:86:b4:5d:67:49:a5:3c:f1:cf:48:
c6:e3:dd:9b:9b:65:f1:92:05:03:44:b4:c1:a9:e8:
7a:b2:ee:ac:65:69:52:30:07:50:b2:44:71:c7:7d:
e8:6b:62:20:b4:88:e5:84:2e:de:4e:eb:93:4e:a3:
b2:32:19:b0:ab:28:c1:a0:8b:e0:de:4a:df:87:b0:
8c:e1:4d:f6:8f:50:ba:34:61:b9:f8:04:b9:35:12:
bd:d7:4e:20:68:0a:9f:0e:35:e5:b9:59:20:15:cb:
fb:a9:ba:f3:2d:73:66:98:83:91:8a:bb:87:10:12:
ef:96:4f:61:7e:bb:4a:d8:8c:57:6c:11:01:bf:d9:
1a:67:18:99:7c:c7:b1:12:cb:ab:43:dc:0e:83:dc:
8b:bf:3b:65:d3:d7:b2:89:d7:a3:b2:98:4b:fe:4b:
6c:61:44:5c:19:27:be:0c:9c:bc:2d:ac:de:89:1d:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:87:BD:CA:3B:8B:28:7D:CF:83:A8:54:86:89:5E:CD:30:3D:1A
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:23:5b:68:3e:e5:0f:8d:ad:f3:be:00:29:93:a9:3b:75:b6:
07:23:df:7a:e8:67:f5:e0:9c:cc:44:44:2c:e4:bd:3a:1b:a4:
a5:6d:14:fa:e3:bf:ac:39:c2:14:34:68:90:b1:c2:16:e2:0d:
28:82:e2:76:30:a8:da:f3:25:ff:ab:53:e2:8d:d7:a7:f6:c8:
97:5d:98:4b:7e:d2:fd:88:ed:b9:3d:33:c6:bc:a7:0b:99:9b:
5d:7d:42:ea:cb:81:51:43:c8:14:5d:8f:66:ce:d1:2f:12:40:
d9:74:11:e2:a9:af:54:3b:e9:88:f3:7c:e8:90:4c:ba:d2:93:
c9:e2:50:3f:12:5e:2e:33:62:d8:80:e2:f3:29:23:12:2f:1c:
a4:f0:c2:d9:a4:8c:ac:cb:ca:88:92:44:8b:46:5d:2f:17:ab:
fc:78:26:0a:eb:79:70:ab:e7:91:64:a6:5f:c1:6f:0a:52:03:
fc:57:e2:1f:07:62:2d:f4:28:08:36:34:23:44:c1:9b:26:04:
95:17:ca:fa:b2:8c:fe:ce:32:81:5b:13:57:6f:fd:72:fc:44:
63:33:1c:67:91:b1:e2:bf:21:e9:7c:46:a7:2e:f0:e0:f7:9a:
65:e1:3b:c7:0e:b6:5d:33:f8:67:ed:8a:57:1d:9e:35:45:45:
ef:01:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:32 2025 by rpki-client