Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: kZR/PPenSN/UkfScEj242C8+S1eb4Ft3BywMaLX9s7c=
Subject key identifier: 86:1A:3B:52:EC:2C:88:EE:33:91:FE:B6:0D:23:F2:31:15:8C:DB:02
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 01976960FA0D65009366515A93D92C5495AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 095D
Signing time: Fri 13 Jun 2025 13:00:52 +0000
Manifest this update: Fri 13 Jun 2025 13:00:52 +0000
Manifest next update: Sat 14 Jun 2025 13:00:52 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: uPp0QDpUuGKPHndaGJe55caVwn+470/F8lCQLccTHlY=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:fa:0d:65:00:93:66:51:5a:93:d9:2c:54:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jun 13 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=861a3b52ec2c88ee3391feb60d23f231158cdb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:50:e0:7b:8a:4d:7e:78:57:b9:a3:0d:f8:
1b:26:67:53:d9:9d:d6:68:15:6f:2c:69:32:e1:a7:
98:9b:4b:88:e1:47:d6:ab:be:a3:6b:68:02:c0:57:
5d:e1:38:db:0c:22:d0:f4:55:ce:e5:fe:cf:f6:fc:
aa:76:ea:55:eb:61:6c:b3:d9:39:bb:7e:3f:0a:5d:
14:c2:91:df:13:24:7d:ef:22:b9:cb:f8:d9:7d:e3:
6a:e3:ed:36:35:4f:fc:d4:af:3a:1d:6d:fd:c3:3c:
00:1e:70:c1:40:90:be:6e:14:40:db:e3:3c:a5:d5:
e5:5f:d4:44:8d:37:3d:20:53:70:23:12:6c:c9:7c:
3c:88:70:58:ca:3e:ea:87:c1:30:59:4a:08:92:a0:
94:63:0d:09:6c:3c:e6:8d:fc:1c:7a:6e:93:ce:83:
6f:01:17:c5:84:db:f4:ae:b6:60:14:60:e0:d5:54:
ea:9a:24:68:05:52:ed:6c:94:e9:65:81:39:bf:6c:
e3:c8:4a:d3:85:89:f4:23:4b:11:1f:c9:99:63:f8:
c0:24:68:61:d1:65:72:45:5a:61:7b:59:63:12:81:
a8:9d:01:b1:a2:9a:28:05:70:07:93:f5:4b:59:49:
ad:b3:ca:b4:5f:8c:72:c2:d7:3e:6c:10:e0:97:1e:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:3B:52:EC:2C:88:EE:33:91:FE:B6:0D:23:F2:31:15:8C:DB:02
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:bc:9e:a1:ec:17:cb:45:80:ee:3b:04:27:18:d1:92:ed:
5a:7e:50:f6:ff:92:7e:88:1c:7d:2c:17:20:9b:85:4b:7a:b4:
c6:ee:da:f2:1d:13:78:75:0e:24:6f:44:1c:f9:ba:24:82:82:
26:80:4d:2f:32:06:be:7d:d9:a9:09:b8:90:75:48:d6:f7:db:
1d:48:57:b1:bb:b1:6e:f6:00:2f:1e:ea:b9:83:71:b1:13:74:
f5:78:dd:d7:05:a2:c2:81:ab:bd:54:0d:93:c9:85:ea:9a:df:
f4:b6:eb:fe:d3:43:c0:92:51:ed:7e:43:90:c4:19:1f:de:0f:
7e:62:4b:e1:95:45:30:6a:75:f9:73:d3:15:79:65:dc:6d:d0:
19:d4:70:ac:b0:f8:f8:31:47:9a:fd:ca:2e:3b:61:23:6d:b0:
bd:b5:60:51:06:9f:da:11:48:05:a6:4e:dc:96:be:62:95:3a:
06:8b:64:90:b4:59:8d:f3:1e:ac:1d:26:89:52:09:b4:7e:b2:
df:e8:5f:80:91:ca:2b:e3:ec:c4:0a:18:75:71:1c:40:ee:49:
b5:4b:3b:6c:64:71:5b:b0:01:76:18:37:38:9f:96:f6:82:bd:
04:70:d9:2c:39:34:9f:f2:72:88:b3:8f:31:cf:d4:bf:8d:50:
a8:e4:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:03:42 2025 by rpki-client