
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: JlUDOy10LsIrQ7XZgYtt34CtS2L+SMqdV4xLKUxAxbU=
Subject key identifier: B4:E8:1B:4F:84:6C:DA:A5:DC:05:03:C2:AD:F4:7E:05:EB:2C:74:6B
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 01964B588949104D8A7A1DE9E8879E20DA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 00:00:15 +0000
Manifest this update: Sat 19 Apr 2025 00:00:15 +0000
Manifest next update: Sun 20 Apr 2025 00:00:15 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: L4dKX4E8k5FXYWsZvoAGJGfXBcLcSE4ZxYW1kGK1OKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:89:49:10:4d:8a:7a:1d:e9:e8:87:9e:20:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Apr 19 00:00:15 2025 GMT
Not After : Apr 20 00:00:15 2025 GMT
Subject: CN=b4e81b4f846cdaa5dc0503c2adf47e05eb2c746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:eb:e7:84:94:67:94:fe:14:2a:a2:ba:4f:
a3:04:50:99:4a:63:9b:c5:89:3f:27:db:e2:f9:0d:
2a:02:25:79:dc:9c:d5:1e:6e:52:33:b7:11:4a:69:
c3:d5:1d:af:24:59:a4:33:3b:2c:b1:a9:bf:43:c0:
33:37:3a:5a:2f:5d:65:ff:e3:9e:b8:c9:9d:be:26:
7d:33:71:8e:60:4e:8c:69:95:19:73:04:b2:a2:25:
7b:1d:8a:68:0b:5b:75:29:95:82:44:58:1b:d7:86:
1e:b1:5d:7c:f8:01:82:c9:d5:b5:19:0b:6e:4d:c0:
72:d3:c0:bb:e2:5a:e4:19:65:0e:56:07:1c:18:de:
18:dd:2c:a0:80:73:96:19:5e:8f:9c:ef:8d:63:07:
85:fd:ae:14:fe:b9:aa:fe:74:33:65:90:dd:14:e5:
8a:8e:9d:30:fa:64:ae:2f:7b:2f:cf:28:27:8f:db:
fe:de:03:da:d6:71:27:b4:29:11:33:f4:8a:c8:f3:
ab:ab:22:cd:14:56:5d:4e:81:58:2b:02:90:74:67:
17:17:d1:8b:66:b6:50:fc:ad:c8:f9:67:21:e0:16:
29:36:6c:59:0f:66:27:50:d6:88:46:a4:17:c9:e3:
62:69:db:37:2c:09:43:2a:37:80:ba:39:3d:1d:d6:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:1B:4F:84:6C:DA:A5:DC:05:03:C2:AD:F4:7E:05:EB:2C:74:6B
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:f9:61:11:ac:f6:88:1d:cd:de:f2:6e:ea:a5:3e:dc:66:
6d:19:9b:74:18:44:26:10:ce:be:3d:2f:56:7d:59:37:bc:36:
68:d6:30:46:df:1d:75:76:45:d5:2a:ee:69:d9:0a:40:32:3f:
eb:2c:5e:c4:a4:8c:39:d6:ed:99:13:8a:87:85:55:0b:67:2a:
5a:98:d1:b8:47:84:d5:d7:be:d9:34:70:6b:35:02:db:8e:13:
d2:e9:7e:f0:ad:30:de:6a:85:30:ae:88:ff:d5:2c:3f:5a:04:
8d:18:e6:87:a8:c8:f9:18:e4:c3:8d:9e:b5:ca:c3:5b:67:d4:
ca:0a:22:f9:59:33:ff:3a:1c:c7:d8:9b:45:17:13:c3:34:25:
3e:24:ec:33:da:d2:e4:ac:2e:70:94:69:12:1e:41:0b:6f:2a:
7a:01:b9:62:a7:30:70:d8:c1:29:5c:50:5e:b9:e1:d2:da:d9:
e2:ec:66:68:a1:e7:3b:94:0e:04:dd:fc:ce:e3:3b:81:8a:f4:
5d:d7:05:ff:d3:2b:44:b6:19:33:5a:e7:f4:94:17:6d:fa:22:
df:87:02:8b:31:e0:f0:d2:7f:9f:15:85:cf:5c:db:10:a5:30:
d1:1d:47:e6:47:6b:a4:c6:1a:32:86:23:7f:5b:84:26:95:6a:
6b:74:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:35:17 2025 by rpki-client