Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: LutMJc9Esrc7Ox3k8LuelBkAwCBHJDNgGDaiq675+3Y=
Subject key identifier: 3B:F6:4B:7C:0A:78:04:64:ED:37:D2:11:30:31:8E:27:23:75:20:93
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019A05C8AFF9ADDBCEB67A9897A80686D3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0A58
Signing time: Tue 21 Oct 2025 08:00:29 +0000
Manifest this update: Tue 21 Oct 2025 08:00:29 +0000
Manifest next update: Wed 22 Oct 2025 08:00:29 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 49AV1rrVLDFlAeQMAwwPZBED6GOuKk0RO54B7o7/f4M=)
2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:af:f9:ad:db:ce:b6:7a:98:97:a8:06:86:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Oct 21 08:00:29 2025 GMT
Not After : Oct 22 08:00:29 2025 GMT
Subject: CN=3bf64b7c0a780464ed37d21130318e2723752093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:8c:9a:fd:bd:f3:ec:d8:d3:0a:3c:9a:99:
12:f8:1d:52:cc:29:30:f9:3e:72:8f:68:af:53:31:
3e:4d:3d:58:c8:36:b7:2f:30:b8:8e:32:2d:4f:85:
16:6c:83:e0:f4:1c:e4:e3:e8:14:37:12:cc:b0:29:
08:b0:38:83:69:ce:69:bf:a0:8d:f5:90:cf:c3:52:
92:7a:bb:a2:53:01:14:41:6d:0e:00:07:f1:64:2b:
55:47:79:93:c5:75:00:5d:36:31:7f:00:db:55:13:
41:86:73:0c:c9:a8:80:e6:16:88:99:08:cc:9c:95:
c1:fa:2c:1a:e3:37:5b:8c:79:e9:45:88:db:af:2e:
0c:eb:69:af:ef:f7:8d:3a:06:7d:1b:e3:a3:4b:eb:
b0:99:bc:5d:e5:50:b5:f8:e6:ea:26:ab:e5:0d:c7:
cc:d6:50:20:9f:23:9a:af:8e:91:35:53:c0:c8:d3:
3c:0b:d1:c3:e6:4c:c2:40:fb:5b:49:ac:cb:91:d3:
c0:68:f6:0d:29:e9:5f:39:41:d6:4c:53:19:c9:bd:
2a:f7:f4:4e:2a:93:56:a2:50:11:74:5f:fd:74:bd:
cc:6f:d1:bf:44:65:ff:3b:fe:95:56:4d:13:44:fb:
1f:bf:62:1f:13:35:20:67:fe:e5:ff:54:94:9c:d0:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:4B:7C:0A:78:04:64:ED:37:D2:11:30:31:8E:27:23:75:20:93
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:6b:4a:e6:83:32:19:40:2f:52:fe:2a:ca:d9:c8:80:82:
a8:30:07:67:0b:4b:e2:79:27:d2:ad:4d:a2:aa:6f:3d:8c:ca:
1f:2a:bd:30:b9:85:e5:3a:78:49:b1:d7:1f:86:72:e5:5b:93:
15:cc:58:d8:5f:aa:ed:35:35:26:79:eb:2b:0e:2d:50:03:e4:
7f:ba:45:a1:bf:18:eb:03:f4:6b:f9:7b:84:94:56:7d:ff:45:
f9:11:95:13:c9:e7:19:19:c3:d4:b9:55:ea:86:96:8b:29:57:
59:21:d2:a7:b5:35:d4:07:46:6d:90:94:79:69:ae:86:86:3e:
b4:74:b2:fd:88:fc:da:66:cd:a8:a8:04:0d:da:12:93:f0:4b:
f8:2d:ce:e7:bb:8d:49:7d:4b:b1:96:21:cc:0c:f1:0a:c5:3f:
c2:c6:70:f8:64:1f:95:7c:7c:5a:8e:48:40:ed:80:82:50:d6:
7e:86:6b:a6:3b:45:e4:0c:93:fc:f7:14:35:db:cf:b4:e2:4b:
cb:54:a7:99:ee:87:4e:c9:9a:2f:1a:91:f3:43:dd:07:c2:8b:
b3:0b:65:e9:60:21:2b:9a:1c:33:c9:f5:27:39:79:70:98:4e:
91:e3:af:6f:f9:a8:ad:44:44:12:68:7a:f1:48:8c:db:b6:0f:
28:8b:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:14:03 2025 by rpki-client