Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: IgpwoC+QJh65x+9VNXZmkyALHXXGZolEESopNkBxgQE=
Subject key identifier: 07:97:B2:FE:BE:B4:A7:C1:DA:DC:1B:F0:66:4B:8A:27:6E:F2:2F:8C
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 01991DD51BE227D8142E3991A38A76C8D9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1670
Signing time: Sat 06 Sep 2025 07:02:09 +0000
Manifest this update: Sat 06 Sep 2025 07:02:09 +0000
Manifest next update: Sun 07 Sep 2025 07:02:09 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: Q1eU86gCX6QhGNO1wsjxmA/2wJgXbbQnkP5yCBpmYmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d5:1b:e2:27:d8:14:2e:39:91:a3:8a:76:c8:d9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Sep 6 07:02:09 2025 GMT
Not After : Sep 7 07:02:09 2025 GMT
Subject: CN=0797b2febeb4a7c1dadc1bf0664b8a276ef22f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:7f:d9:c8:1b:fa:f1:37:d2:98:9b:2f:cb:
10:bb:46:4c:56:cd:c5:59:4e:ec:b1:43:03:33:68:
53:0d:10:bb:a9:07:3d:72:5f:f7:8b:05:03:ca:e4:
b0:73:ed:5d:c2:9c:18:34:e2:b0:fd:a6:cc:67:10:
32:85:32:e3:a2:09:2e:31:b6:11:a6:aa:cc:95:a6:
52:81:22:6d:ca:4a:8c:d7:74:69:d9:36:e8:cd:ca:
98:23:06:72:c0:17:7f:af:b7:08:7c:05:02:50:ff:
cd:35:68:35:c6:b2:42:7e:70:cb:14:c0:ba:4a:2f:
e3:97:28:47:5d:72:a2:c0:02:01:df:be:21:42:c3:
2e:52:71:5b:f4:6a:09:5f:9a:32:83:3e:a7:db:cd:
58:12:af:7a:cb:0a:d0:9e:82:63:5e:3f:00:1a:cf:
1d:f7:c2:5a:84:ec:0f:85:2d:27:ae:bf:21:70:d6:
3a:9b:18:27:6a:fb:18:b4:a5:14:bc:d9:eb:01:af:
c0:38:68:4d:58:d9:8f:f7:ac:f9:82:02:6b:0f:f9:
e0:1a:ec:c1:d5:fb:6d:68:8c:32:cb:4f:c1:58:fc:
b0:84:3f:5e:16:e7:92:67:e3:8f:89:c9:34:b5:32:
82:b1:29:f4:ec:8c:34:7e:81:1e:6b:31:59:82:27:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:B2:FE:BE:B4:A7:C1:DA:DC:1B:F0:66:4B:8A:27:6E:F2:2F:8C
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:0a:97:62:de:12:46:25:a9:0a:64:2b:79:8c:de:89:24:
6e:39:f1:fb:8d:b4:7b:f5:40:16:a0:b3:94:59:6b:90:19:8f:
f5:15:a2:20:8f:94:16:e8:62:3d:8b:69:46:62:a1:e9:a8:3c:
6b:37:86:4f:b7:9d:df:75:eb:2b:fd:d1:00:d4:f3:a2:51:8a:
02:00:a3:70:d5:90:d2:bb:77:b3:94:b7:a0:4c:18:75:e6:a0:
1d:8d:8b:aa:b5:89:a4:70:5a:b8:31:29:86:3c:47:fb:ac:ce:
47:f5:4e:ff:6a:65:21:27:c0:1a:5e:8a:fe:d7:c8:de:bf:0f:
bb:e9:0a:09:67:a0:20:ca:f6:a8:8c:e1:cd:cc:50:ec:22:b3:
4d:cf:87:ef:94:40:0b:bf:fc:a1:69:23:42:d9:0e:c4:4a:88:
82:5d:87:e3:1c:fe:22:be:40:4c:79:c2:e1:db:47:4e:1a:3a:
1b:59:bb:29:54:1f:bc:c8:2c:f5:ee:4a:a8:2c:be:42:03:01:
08:66:a9:a1:21:d6:80:ba:74:4e:d9:1b:75:71:8b:59:40:a0:
24:a1:bf:d8:d2:99:f1:dd:2f:70:22:12:20:ea:f2:93:41:b7:
d5:e3:28:78:35:49:fb:c9:bc:15:00:77:77:70:4e:53:32:16:
09:4e:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:34:08 2025 by rpki-client