Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: MElR+q+7X3TntnUp4YVvJuHQDS9E1t2KN3KID8UrmMI=
Subject key identifier: DC:7B:3D:EF:46:D9:5A:08:F1:79:50:FD:ED:5D:C9:0A:B7:05:F0:7E
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019921B174CEECA871DD757F793EC5157435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0A41
Signing time: Sun 07 Sep 2025 01:01:41 +0000
Manifest this update: Sun 07 Sep 2025 01:01:41 +0000
Manifest next update: Mon 08 Sep 2025 01:01:41 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: kY0vw/Rns+49IDDzvRzoP23+d2Jh5gRCtdQcWR3rRLM=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:74:ce:ec:a8:71:dd:75:7f:79:3e:c5:15:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Sep 7 01:01:41 2025 GMT
Not After : Sep 8 01:01:41 2025 GMT
Subject: CN=dc7b3def46d95a08f17950fded5dc90ab705f07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:09:78:24:dd:2b:33:92:d7:18:a4:16:44:
d7:be:61:3c:06:03:fa:11:87:07:1b:99:9c:ce:08:
b7:87:e3:10:2c:20:35:5a:5c:8d:f8:27:0d:c5:f9:
6f:d4:ef:71:3f:d5:2a:00:d0:ef:97:8a:b5:fb:0e:
69:b2:7f:25:9c:b5:83:b4:dd:fa:4c:0e:3a:e0:3d:
63:50:a3:bd:6e:81:f0:fa:02:60:f7:6a:ea:80:eb:
db:e8:9b:5e:9a:ee:51:09:ee:88:a6:02:2b:48:b8:
6e:1d:d0:3f:3f:8a:ec:0b:82:93:f0:ac:11:57:d6:
11:91:a6:64:27:e9:6a:8c:ea:73:21:af:fd:d0:8a:
b4:16:1d:73:18:3d:41:7a:57:79:9b:05:b0:57:2c:
b6:b9:16:4c:d2:07:59:e5:7e:b7:ce:88:76:46:a7:
bc:48:60:41:17:f5:f9:27:44:c3:99:c6:ca:f2:5d:
08:75:4d:04:0d:51:55:b2:c5:49:8a:a2:81:b3:6e:
4e:2d:5f:db:34:f4:7e:85:02:10:51:14:ad:b3:00:
07:82:4f:33:26:94:c2:0f:5f:d0:35:3f:6c:86:d8:
36:74:84:6c:43:5f:05:4f:69:16:3a:5d:86:91:74:
59:51:38:46:3e:92:ef:32:9c:19:58:7e:5e:d0:d5:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:3D:EF:46:D9:5A:08:F1:79:50:FD:ED:5D:C9:0A:B7:05:F0:7E
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2f:3c:84:9d:fe:fa:5d:e1:da:1a:91:49:07:4f:77:1d:30:
67:3d:e0:d4:ac:7b:02:73:5a:0d:83:6a:9c:ee:82:c2:e5:83:
49:61:92:76:6b:60:f5:76:07:cf:f6:86:57:0c:f6:c4:64:f0:
16:65:fe:51:ff:f5:5a:07:ba:3e:ff:38:2e:de:c0:c3:8f:0f:
bc:ff:09:c1:e1:b5:58:e0:8e:b2:e7:fd:4b:64:08:a6:7e:e6:
85:e7:c9:83:d1:75:58:a6:60:4b:a3:d5:30:c9:15:5d:63:02:
99:eb:45:a0:2b:21:e6:2c:a4:bf:e5:ab:f3:97:60:b1:34:c3:
a8:74:6f:3c:92:61:af:40:3b:2d:ed:b9:f4:b6:7f:34:70:65:
e7:e5:66:7c:91:5f:9c:b5:52:32:00:80:7d:12:03:bf:00:2b:
38:b2:15:c9:12:43:2f:e8:d6:1d:d9:7e:ed:e6:5f:50:aa:21:
25:b6:56:a3:e0:66:0c:82:d6:91:44:22:6c:8e:f0:f5:b4:56:
81:f5:13:05:f5:60:b0:0a:88:b1:2c:f1:b0:ff:84:8b:eb:9e:
84:93:18:65:17:38:74:c3:3e:02:4c:6d:2d:72:84:e6:bc:00:
c8:71:c4:d3:4a:ff:bb:b7:13:ce:bc:72:0b:37:37:8f:a3:d4:
55:a7:af:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsXTO7Khx3XV/eT7FFXQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh
NTg5NzUwHhcNMjUwOTA3MDEwMTQxWhcNMjUwOTA4MDEwMTQxWjAzMTEwLwYDVQQD
EyhkYzdiM2RlZjQ2ZDk1YTA4ZjE3OTUwZmRlZDVkYzkwYWI3MDVmMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRYJeCTdKzOS1xikFkTXvmE8BgP6
EYcHG5mczgi3h+MQLCA1WlyN+CcNxflv1O9xP9UqANDvl4q1+w5psn8lnLWDtN36
TA464D1jUKO9boHw+gJg92rqgOvb6Jtemu5RCe6IpgIrSLhuHdA/P4rsC4KT8KwR
V9YRkaZkJ+lqjOpzIa/90Iq0Fh1zGD1Beld5mwWwVyy2uRZM0gdZ5X63zoh2Rqe8
SGBBF/X5J0TDmcbK8l0IdU0EDVFVssVJiqKBs25OLV/bNPR+hQIQURStswAHgk8z
JpTCD1/QNT9shtg2dIRsQ18FT2kWOl2GkXRZUThGPpLvMpwZWH5e0NXUMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx7Pe9G2VoI8XlQ/e1dyQq3BfB+MB8GA1UdIwQY
MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut
MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy
LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXS88hJ3+
+l3h2hqRSQdPdx0wZz3g1Kx7AnNaDYNqnO6CwuWDSWGSdmtg9XYHz/aGVwz2xGTw
FmX+Uf/1Wge6Pv84Lt7Aw48PvP8JweG1WOCOsuf9S2QIpn7mhefJg9F1WKZgS6PV
MMkVXWMCmetFoCsh5iykv+Wr85dgsTTDqHRvPJJhr0A7Le259LZ/NHBl5+VmfJFf
nLVSMgCAfRIDvwArOLIVyRJDL+jWHdl+7eZfUKohJbZWo+BmDILWkUQibI7w9bRW
gfUTBfVgsAqIsSzxsP+Ei+uehJMYZRc4dMM+AkxtLXKE5rwAyHHE00r/u7cTzrxy
Czc3j6PUVaevnA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:42 2025 by rpki-client