Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier: PwhtAJq/DE0K7zyifvCNkHtUKByo0B+dElVHzG+HQgY=
Subject key identifier: 35:25:ED:36:C4:84:C6:64:9F:F7:A2:50:F5:B9:F5:83:62:D2:CB:72
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial: 019A71B81CBD4B6A0449B8A2FB1E850F9FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number: 0490
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: eWS2rtTqHNYp56qETsJxgQCxZfrVrPRv9o42djDR5XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:bd:4b:6a:04:49:b8:a2:fb:1e:85:0f:9f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=3525ed36c484c6649ff7a250f5b9f58362d2cb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:7b:33:ce:f7:a3:65:00:d6:6b:0b:e9:9d:
48:a6:71:68:c0:1b:96:df:96:e1:48:23:c2:6b:ac:
bc:37:f0:fc:e4:06:f2:d9:fe:6d:a0:42:1b:4c:29:
99:17:81:34:ae:f0:89:1f:8b:4a:c3:48:74:42:83:
6b:c0:0c:1d:07:e4:02:21:c6:50:a8:f4:bf:19:4c:
8a:22:c4:19:b5:81:0f:f3:ad:c0:c0:d3:4b:f3:e7:
45:2c:ac:c2:46:f8:b2:31:2a:dd:73:4c:bd:3d:cf:
a1:54:db:83:e5:57:dd:22:fe:ad:4b:eb:1b:7b:3b:
f1:4c:e0:cf:3a:86:ff:6b:66:b7:20:42:34:88:2e:
e0:89:5d:3f:46:58:14:e7:6d:2d:7c:fb:ab:0a:ac:
6a:59:12:ad:42:87:b1:c2:4a:0f:8b:97:61:51:5e:
9f:88:a8:c5:81:c1:2f:44:7e:83:f6:0f:e4:11:dd:
a6:03:9e:de:87:33:50:8f:1d:89:34:47:a3:72:4c:
07:e9:3c:5f:79:c4:11:52:9f:93:0e:eb:04:dd:00:
b8:ce:f6:12:cb:04:aa:da:2c:0a:33:21:fb:58:d8:
4a:69:35:21:3c:e3:27:2b:51:fc:9b:91:b6:be:2f:
2c:cc:b0:70:14:a3:d4:5a:f6:ee:3c:21:38:6d:de:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:ED:36:C4:84:C6:64:9F:F7:A2:50:F5:B9:F5:83:62:D2:CB:72
X509v3 Authority Key Identifier:
keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:8e:c4:c0:39:86:e4:b2:e1:62:39:e7:1e:5f:cb:a5:59:
77:37:1a:46:7d:e4:54:6d:0a:3b:7a:f6:ff:85:0b:46:32:c4:
6c:73:4c:78:d2:a5:c4:e1:5b:60:64:ba:7b:d8:9a:84:61:92:
3e:f1:6a:8e:fb:9b:c2:8c:43:82:eb:8b:92:61:6e:23:19:6c:
75:ae:69:04:a5:5d:c9:55:68:9f:7b:05:af:dc:14:67:74:9b:
8f:7f:60:fd:88:b9:8f:45:7c:07:c0:a1:a3:3f:1c:54:86:0e:
fa:b0:80:8d:e1:0f:9e:b8:9a:4b:42:35:ff:45:96:2a:6f:5e:
65:ad:d7:50:10:99:64:c2:8d:7f:a0:af:1d:a6:1f:b7:ee:22:
05:31:6b:84:f9:41:14:57:a3:f7:b9:ac:d5:ce:a6:b4:9d:dd:
d1:58:df:81:51:5f:de:ac:83:ea:f1:6d:63:97:20:ad:82:69:
af:ee:d3:ad:72:ca:26:ca:05:15:8e:2e:b5:c7:6e:e8:1b:6f:
fc:88:3c:95:bb:72:aa:54:e4:5c:b2:73:f9:05:37:4a:fd:c6:
2d:a5:fd:6e:57:97:5c:7d:7d:7e:14:cd:e7:c0:ad:f3:ce:c5:
cd:17:01:13:3c:9f:4d:48:55:47:31:2f:f8:99:fb:b3:60:17:
2d:0c:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:52 2025 by rpki-client