Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier: R2tILAtJiWF2Jqva8FSFFO848y8z0IFTT5ccHrqrnSk=
Subject key identifier: BF:35:7F:30:EF:91:D4:37:C0:32:7F:A6:74:29:C9:5F:08:47:F3:29
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 0197CA5E97C70DD78D4249F3247DCDB4CD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number: 0EBB
Signing time: Wed 02 Jul 2025 09:01:26 +0000
Manifest this update: Wed 02 Jul 2025 09:01:26 +0000
Manifest next update: Thu 03 Jul 2025 09:01:26 +0000
Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: ZEXVaf+e3ww4V48lceAt3wi16gBu+eXf7TGNC4vk2WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:97:c7:0d:d7:8d:42:49:f3:24:7d:cd:b4:cd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Jul 2 09:01:26 2025 GMT
Not After : Jul 3 09:01:26 2025 GMT
Subject: CN=bf357f30ef91d437c0327fa67429c95f0847f329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:20:32:bb:22:1d:9e:17:60:61:90:2e:b3:
f9:05:8d:96:77:a4:6d:c8:6f:53:b3:5b:84:3d:fe:
cb:c0:3b:6f:17:7f:82:da:cb:ad:ec:29:05:0a:9f:
b5:41:96:e2:de:7e:11:50:6d:13:ef:4d:72:89:5a:
fd:5c:a6:25:eb:57:86:e0:a6:de:95:15:b0:1d:b8:
6f:88:a5:ec:ce:25:c3:21:62:4d:d8:c9:0d:55:7b:
b4:51:2d:6c:7e:41:3d:90:6c:14:f0:91:2a:cc:59:
66:03:86:e3:e9:e6:10:1d:53:11:55:dc:e9:74:b9:
e2:42:8d:f9:07:6b:86:f9:a8:37:70:da:85:3d:84:
58:93:eb:c8:b4:27:f0:4a:df:05:f7:80:8f:01:b5:
93:12:58:8f:28:ec:3e:72:52:6a:b8:b5:c3:b2:c0:
81:24:a9:79:e6:64:b9:bf:95:d5:0b:29:9f:3d:c1:
97:94:aa:1a:52:59:40:4c:ad:fa:9e:76:d6:20:33:
05:75:1e:74:51:d6:ed:eb:76:d3:7f:a4:ef:06:0d:
53:c8:c0:3b:07:ad:84:bc:bc:4d:c4:6a:43:87:d7:
09:8c:a8:e0:8a:8d:46:36:f1:41:76:bd:4d:51:66:
6e:fd:0c:14:3a:d7:67:d8:bc:68:50:38:a9:d1:e9:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:7F:30:EF:91:D4:37:C0:32:7F:A6:74:29:C9:5F:08:47:F3:29
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bf:0d:75:33:a3:23:26:3d:22:1b:67:c9:8d:46:16:47:83:
de:f1:03:19:5d:24:fd:03:79:e5:79:cd:18:10:54:3d:06:26:
87:d9:b9:35:92:43:86:9b:f1:68:7f:c3:4b:99:38:89:96:9b:
b3:6d:58:92:bb:4c:c7:e3:24:51:33:41:ba:63:11:90:ee:d2:
45:71:7d:a5:55:e7:e8:6a:7d:30:d5:17:70:01:60:37:d3:3f:
6a:42:a7:97:25:5f:72:d4:cf:8b:5f:b1:c1:0b:5b:6e:70:cc:
e3:3b:6a:d4:bf:5a:88:b1:5a:7f:fc:f8:df:d2:85:e8:17:54:
32:74:7d:38:d7:e7:dd:16:9d:6f:8e:76:72:94:1d:cf:6b:ea:
ab:1a:c2:23:72:14:3f:c4:aa:ed:ce:87:6f:07:bc:e5:e1:6e:
ad:52:bf:93:39:61:84:20:32:17:10:6e:93:49:e3:62:99:11:
12:75:31:51:19:bb:13:af:f7:00:56:45:09:3f:37:b7:17:09:
fd:86:b6:e7:c1:bc:6e:2c:10:84:e3:86:dc:5b:7a:7d:29:77:
11:53:1f:7e:46:45:d9:da:09:9b:6a:ef:5d:e4:e5:cc:2a:03:
40:e4:2f:5f:b9:5e:f9:93:03:79:63:ff:75:b6:92:ca:a2:e9:
c9:9a:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:59 2025 by rpki-client