
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft
File: SLQGxUjn5BwW-InIkAdunlhv81Q.mft (raw, json)
Hash identifier: jxMts/K9KgR2kggsRbqBUPva+TYs80KdOnfZALCRTAA=
Subject key identifier: 97:D7:78:75:4C:EE:0E:D7:48:4D:39:DF:F4:E8:A9:4E:15:57:76:FA
Authority key identifier: 48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54
Certificate issuer: /CN=48b406c548e7e41c16f889c890076e9e586ff354
Certificate serial: 019A72262CC365F171F7653829F14A2D08DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft
Manifest number: 49
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: SLQGxUjn5BwW-InIkAdunlhv81Q.crl (hash: BMPo0hPwXXuLtAidXOfCnH/A4UTlwJWiyiY1YWcOj6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2c:c3:65:f1:71:f7:65:38:29:f1:4a:2d:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b406c548e7e41c16f889c890076e9e586ff354
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=97d778754cee0ed7484d39dff4e8a94e155776fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:77:e4:a7:6c:df:f8:67:22:52:66:7b:ec:
6b:7a:d2:a8:6f:88:7a:39:5a:26:7b:7e:0e:d2:8b:
9b:b0:ce:11:a0:b9:30:f2:8d:40:dd:72:3f:4f:40:
71:45:59:3c:0b:2c:31:25:6f:dc:1a:53:f9:20:15:
81:38:89:9a:39:77:e9:a3:bb:de:86:af:76:e9:f5:
02:08:04:ff:03:69:35:c5:e5:1e:92:77:d5:34:37:
cf:1f:ba:3d:30:ee:8c:ec:52:48:3a:a2:9e:f2:cb:
9a:34:56:33:cb:08:7e:e1:2d:e4:06:24:d9:e8:f0:
04:91:df:f8:5a:8d:6c:c6:fe:d0:5c:aa:8e:52:11:
b4:7a:13:70:3d:a4:d8:b7:ba:4e:b7:50:65:17:b0:
3d:48:2e:ed:a9:35:22:db:63:4f:d8:b5:e7:5d:7c:
02:c8:04:00:79:39:41:6e:60:dc:46:bf:a9:ea:11:
50:b4:00:3f:4e:54:fa:35:6d:b6:f4:5d:95:94:d9:
52:01:fd:4b:16:ff:1b:da:cf:d7:4b:5d:5d:db:e5:
8f:11:94:8c:2e:b6:be:99:8b:a4:1c:04:bf:bc:aa:
7d:0f:f2:9f:42:a7:d9:c7:04:7a:94:3d:43:b1:36:
d7:39:21:85:28:17:86:34:f1:99:85:68:63:72:86:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:78:75:4C:EE:0E:D7:48:4D:39:DF:F4:E8:A9:4E:15:57:76:FA
X509v3 Authority Key Identifier:
keyid:48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:33:ca:13:5c:63:42:a7:08:5b:bb:f4:59:be:27:0e:1c:
1a:c4:15:19:18:bc:d5:31:5d:98:d2:17:e1:1b:f2:6e:c6:2f:
8b:c3:25:5f:c7:08:2a:30:a1:47:28:5f:7d:97:c0:b0:ab:b5:
e6:a4:0b:ad:11:ce:9a:9c:76:9e:40:ad:59:d1:fc:54:3d:7a:
4c:7f:78:a0:c4:31:d8:f6:07:a4:0c:4c:c8:64:d2:76:b3:ba:
0e:63:ca:96:41:26:ab:82:b9:1a:98:61:85:60:63:ea:ce:6f:
47:fc:ba:80:14:08:a9:c0:21:85:a8:73:9e:21:18:3c:f7:a6:
93:b5:14:1c:e5:fb:c7:23:da:0e:96:33:c6:f3:7c:fc:62:b5:
72:63:18:c2:f8:1a:b6:af:27:13:e3:4e:e8:3b:69:7c:57:5b:
6f:25:01:db:f1:b2:73:2a:b0:da:bf:37:6d:8a:0d:0b:3e:08:
44:92:d1:09:3f:81:3d:a5:17:d0:08:52:2a:36:f1:c7:f0:37:
1a:18:1d:29:c6:2a:d4:23:7e:56:ef:cf:5c:5b:63:2f:70:f7:
97:ac:21:b0:f1:e0:f7:d5:21:03:fb:55:11:bf:14:66:6c:03:
4a:a7:95:7a:92:76:bf:3e:63:e2:92:40:dc:cb:60:c0:63:cb:
a5:21:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:01 2025 by rpki-client