Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: g5diyUS4ik6DPFnAAtVeW20I5Vdi4zwtAk5FY+1GxZg=
Subject key identifier: 96:F5:6F:F7:2C:7D:36:96:2C:3B:46:E4:79:54:71:DD:52:CE:D1:16
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019763961BA42DB5EE6648AC11C2AFCFCD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 095A
Signing time: Thu 12 Jun 2025 10:01:11 +0000
Manifest this update: Thu 12 Jun 2025 10:01:11 +0000
Manifest next update: Fri 13 Jun 2025 10:01:11 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: qAZnCFBXr1Lo304f6HVHAfyr5rA4+fzHYy0tncLU1Ko=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:1b:a4:2d:b5:ee:66:48:ac:11:c2:af:cf:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jun 12 10:01:11 2025 GMT
Not After : Jun 13 10:01:11 2025 GMT
Subject: CN=96f56ff72c7d36962c3b46e4795471dd52ced116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:b2:48:dc:b5:64:7b:d2:41:e6:b2:ac:c2:
67:5a:03:17:c4:7f:8d:c0:b2:91:3d:5b:a9:a4:0e:
37:5a:52:07:c0:f4:eb:cd:7b:cd:5c:ac:35:c8:67:
64:7d:51:6a:2e:11:90:25:ca:5b:1a:5c:24:25:12:
73:73:6c:50:b0:69:1d:6a:16:79:2d:c1:3d:d0:83:
ca:d1:78:2a:7f:e6:9f:a8:70:a0:b6:90:11:dd:70:
e7:33:2d:61:4e:2a:18:82:74:18:87:e3:2e:ee:d3:
2b:2e:ec:e0:df:0e:fb:7d:df:23:2f:a9:21:17:42:
f1:bd:1d:94:60:2b:ec:d3:14:1c:3e:50:55:15:7c:
0b:52:0e:50:e0:56:51:03:77:47:e0:f8:af:6c:76:
70:03:4e:35:06:56:59:d6:1b:90:f7:c9:02:42:8c:
d5:50:5c:5f:eb:09:3f:65:86:6d:34:20:ec:d4:c1:
0d:fa:ca:cc:cd:d3:52:bd:c6:6c:0a:61:bd:63:7f:
2f:52:c4:2b:93:db:8e:d8:14:a2:85:cc:30:00:8d:
ab:52:c6:88:b5:11:9b:b7:81:9c:19:bc:06:92:bc:
34:be:46:58:39:c8:56:33:4c:ac:14:67:32:26:b9:
a9:14:44:ba:3f:ba:73:15:3a:fb:30:d5:64:ec:cd:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:6F:F7:2C:7D:36:96:2C:3B:46:E4:79:54:71:DD:52:CE:D1:16
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:ec:90:fc:ab:6e:2c:ce:c3:f3:30:e6:50:38:a5:4b:63:
57:b9:62:d7:a2:22:61:91:5b:07:1e:e6:16:92:d3:ca:91:b6:
77:85:e5:a8:a1:70:65:80:05:87:74:66:f4:7a:91:f3:db:98:
67:e9:f2:f6:74:0d:11:32:e4:64:4b:b0:0d:a9:a2:56:b5:19:
13:55:2c:98:fa:cb:8d:3b:af:82:63:5b:fd:45:ba:51:d3:e8:
0a:af:bb:f0:38:c5:b0:9d:51:15:02:f2:8c:b7:9e:75:a0:be:
3d:1b:3a:57:4f:10:b3:b6:b6:a9:fd:68:3e:88:0a:d0:2c:0c:
4d:a5:28:ec:2c:58:2b:81:08:fa:41:6d:31:54:bb:0a:73:77:
51:5e:bb:a9:45:1d:48:e5:1e:fc:80:e2:76:5d:91:28:46:59:
6b:b8:33:43:4f:40:1b:a3:db:33:c9:ee:85:99:53:29:76:4a:
d0:95:d5:f9:b3:7d:ff:b0:d9:98:6c:01:f2:cd:27:75:2c:a0:
67:e6:66:4c:63:06:a8:e9:ad:fc:07:be:a3:4e:ec:47:5f:02:
c2:ce:fc:02:83:c2:49:d1:d0:6b:07:70:e7:bd:57:d8:2c:62:
85:be:19:ac:d0:ff:73:6f:8b:7b:a3:dc:ba:af:9d:c2:d0:d5:
4c:58:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:28:14 2025 by rpki-client