Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: 9DkRD/JVfEp3QWvZKTEHWW4K42o+AvFbLVQtbb8z+PE=
Subject key identifier: 70:8A:F4:31:1B:FA:4D:11:4D:11:CB:D1:45:C0:64:A3:EA:E4:02:C0
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019A0D1406ABD7E8FC99524FBB7BCECD2707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 18:00:07 +0000
Manifest this update: Wed 22 Oct 2025 18:00:07 +0000
Manifest next update: Thu 23 Oct 2025 18:00:07 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: 08B8iiuZ3cP1n8CE4ipd8oAhNH4JQWBc2XhIlTSGYcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:14:06:ab:d7:e8:fc:99:52:4f:bb:7b:ce:cd:27:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Oct 22 18:00:07 2025 GMT
Not After : Oct 23 18:00:07 2025 GMT
Subject: CN=708af4311bfa4d114d11cbd145c064a3eae402c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:d1:5e:80:11:fd:f2:12:c7:50:c5:ed:5f:
e3:f9:b6:b4:35:6f:58:3e:40:98:a5:a3:88:85:43:
fe:03:01:b6:f8:15:38:e2:8a:60:2e:ab:5c:e6:bc:
1f:43:15:5c:c4:5e:11:7e:72:53:f8:a1:37:ca:ba:
a5:1b:28:fc:34:23:b0:7d:31:ab:9a:27:61:22:cc:
39:64:ed:5e:1c:03:3f:43:94:cd:c8:9e:4a:28:8d:
c1:57:bf:a1:1f:cd:a8:fd:11:9d:32:6f:4e:d9:9e:
f4:76:4e:49:bb:0d:d0:3f:7d:f5:0e:07:4b:71:af:
ae:fc:37:11:1e:59:8e:6c:fd:a7:5e:eb:97:9d:ec:
49:9d:82:40:2c:c8:51:a4:89:3a:ec:37:e8:4d:ac:
f0:21:cf:f7:e0:ac:b4:78:d4:97:2c:ca:09:e7:03:
75:d9:05:5f:31:31:58:da:20:ea:ca:12:a9:f9:27:
b6:ca:aa:d7:ce:31:42:63:0c:89:17:4d:6b:1b:c5:
12:c7:29:05:2e:7c:67:c3:31:b0:9a:40:b2:b4:8d:
11:f8:66:f0:55:fd:d9:61:f4:1f:91:3c:6a:3f:c9:
68:89:25:04:86:f6:e5:72:b9:5b:36:51:96:7a:e4:
83:bd:a2:cb:0a:fd:46:17:92:d5:b9:6a:08:fd:6a:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:F4:31:1B:FA:4D:11:4D:11:CB:D1:45:C0:64:A3:EA:E4:02:C0
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c5:8e:2e:7f:1b:a4:2b:d9:e7:53:3b:de:c2:b8:84:14:b8:
a3:c2:d0:f2:21:03:76:02:f3:20:1b:84:97:3a:7d:c6:fe:7e:
8f:f2:9c:e6:cf:5f:43:bf:df:82:0d:0d:9f:fc:87:67:d2:c8:
ff:80:10:e5:f7:be:af:bc:d2:fa:5a:bb:81:ed:52:5a:69:75:
81:04:17:24:c4:45:02:e7:1e:bd:0b:55:39:1c:7a:29:f3:47:
70:56:dd:cd:46:d3:8c:25:38:5e:1f:c1:b5:86:2c:ba:44:0b:
e2:a1:28:4f:38:02:8b:3f:f4:78:dc:bd:c6:ad:7c:95:19:9b:
27:17:90:15:a5:00:cc:e7:18:87:b2:35:3b:68:a8:19:47:d3:
f1:ea:82:9b:19:f6:45:38:64:a1:21:aa:66:db:56:8c:99:2b:
c0:da:52:77:22:61:46:cd:24:54:53:3b:7f:1d:cd:83:b0:36:
a7:03:45:ec:e9:c0:d7:7b:ce:15:8c:79:5f:0a:d6:5b:3a:2b:
79:41:6f:81:13:ee:3c:fb:38:c9:ea:df:a1:22:99:50:e2:2d:
37:b0:ca:d6:e5:88:78:73:66:0a:c9:79:97:c9:68:54:19:57:
65:75:2c:5c:f9:b6:75:ae:8b:af:6a:5b:d2:35:b2:3c:01:5d:
30:55:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:28:27 2025 by rpki-client