Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: OuRNM/IFHfpV/hdNqhn49rRNz6uYRuhmocZTjxH5SBM=
Subject key identifier: EF:0D:5C:56:D0:F6:FB:7D:15:B2:08:9A:23:B6:A2:FC:3C:71:D2:FA
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019A56AE76ED826E6AF81A80DE91128AF0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0AE1
Signing time: Thu 06 Nov 2025 01:01:05 +0000
Manifest this update: Thu 06 Nov 2025 01:01:05 +0000
Manifest next update: Fri 07 Nov 2025 01:01:05 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: kMdFXt8HneHGCL5qN7XrN4wHwozRyOlHWT78GXEurfQ=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:76:ed:82:6e:6a:f8:1a:80:de:91:12:8a:f0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Nov 6 01:01:05 2025 GMT
Not After : Nov 7 01:01:05 2025 GMT
Subject: CN=ef0d5c56d0f6fb7d15b2089a23b6a2fc3c71d2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:c2:02:41:81:26:db:3a:7b:e4:f8:ff:1b:
8c:87:88:7b:20:c3:c7:b7:3a:f2:99:ec:5e:87:ec:
ae:87:38:24:7f:49:2e:57:10:9b:e8:17:ff:51:ea:
3e:fd:93:41:ea:50:7b:27:04:14:65:7b:d8:38:94:
59:8f:52:1b:c6:e8:c9:b3:26:5d:45:c6:3e:0f:b0:
39:a1:92:9a:ed:2f:a3:57:70:44:ad:36:fb:70:9b:
c8:18:f7:a7:a4:5c:bc:da:23:06:c3:34:d7:11:68:
e6:20:54:83:ee:f6:73:08:d0:dd:dc:a3:b7:ce:5d:
28:f8:eb:e7:1c:37:8e:f4:9f:80:d5:7c:97:26:33:
4e:de:02:98:dc:7e:c3:41:ad:6a:f3:2c:fe:87:00:
d6:e7:94:7b:22:01:6f:bf:fa:48:46:c5:c0:b0:58:
49:b0:17:1b:a2:29:34:f9:27:fa:2f:fc:a1:78:55:
b9:0b:22:54:65:b2:73:60:61:42:e0:83:ce:bb:a8:
60:bc:32:83:bd:6d:25:52:fd:e4:38:28:8c:c5:18:
8f:95:d2:8f:2b:29:64:4b:ec:0c:a3:7c:38:b5:57:
3d:4f:ff:82:12:11:0f:92:6f:94:13:e9:bc:92:fe:
81:5d:a4:d9:6b:4d:c8:20:b8:5e:80:5b:0b:ce:3b:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:5C:56:D0:F6:FB:7D:15:B2:08:9A:23:B6:A2:FC:3C:71:D2:FA
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:90:b3:17:a9:61:d0:79:99:b2:00:31:44:e9:ed:8f:20:
95:61:29:12:25:c5:b1:b7:95:fd:dc:b2:4d:b7:b5:83:a8:23:
f3:0f:6f:e9:11:61:52:0a:26:57:4c:15:17:e1:05:ad:33:ba:
04:f0:c5:da:ed:91:09:91:ea:c3:ab:8b:91:8c:13:96:63:19:
f8:27:62:15:90:76:45:b3:a9:1e:56:ee:aa:dd:d5:de:f0:c3:
7e:08:8f:5d:4a:86:7f:27:d9:3c:96:4d:11:9c:ea:3a:d1:dc:
68:a5:6c:70:50:a2:b2:d1:6e:83:22:b1:4d:27:ef:b8:15:42:
e1:4b:23:bb:e4:24:69:74:3f:54:b4:f3:5a:42:a4:3d:02:89:
84:56:cf:2e:e8:4f:ec:3d:e6:d0:31:23:0f:93:fa:2f:e2:9e:
4b:5a:26:02:d8:0e:62:31:e6:e0:94:aa:fd:35:f0:42:98:5b:
ba:ea:c1:88:56:ac:f5:54:47:ac:d6:e0:18:d1:1f:52:fc:ac:
65:59:0b:88:c0:df:73:3e:21:9e:b0:12:5d:bf:6b:27:5d:8c:
b5:5c:ba:a1:7f:17:8f:b7:dc:18:e4:ea:3d:5c:62:1b:74:ae:
01:8d:1c:50:fc:93:53:e9:37:26:c9:33:1d:9b:fe:4f:3a:f2:
7f:10:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 08:01:35 2025 by rpki-client