Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier: i4YYR79ghnU75WaFP21oG5b059wssIllkJgpDppA/Bc=
Subject key identifier: 07:35:4C:F6:C9:D0:71:19:81:BF:96:9F:A4:6F:6C:87:00:7A:5E:91
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 019A722604C3CEBC83FC9114C14FB878273A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number: 101B
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: D0okZJRPjPeVN8Rp9MySGq+8pq2VloO9yv0pJ6U45yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:04:c3:ce:bc:83:fc:91:14:c1:4f:b8:78:27:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=07354cf6c9d0711981bf969fa46f6c87007a5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:c6:0e:2c:f2:3e:ce:a9:2e:18:f0:7e:16:
3e:d4:73:a0:2f:78:0d:05:f9:70:f5:8b:13:44:14:
f6:67:2d:d3:c9:22:5b:90:a1:b4:40:cf:81:d0:9b:
cc:0b:0e:8d:e3:75:07:c2:39:78:d1:91:c7:49:55:
70:ed:6e:af:e3:18:ed:8d:eb:fe:6e:51:85:a3:7d:
74:8c:9d:1b:fa:2b:5b:b5:2f:b5:b4:b4:77:16:70:
53:48:20:89:b8:ab:29:a3:12:17:06:a4:f5:30:b1:
7e:24:79:5b:64:cf:01:86:d4:4a:e1:45:cb:d9:4f:
95:48:89:d5:21:3f:e9:e9:1e:11:31:a2:d4:be:25:
3d:72:12:75:24:f2:c9:35:b0:9c:42:e3:7f:d4:c8:
79:74:de:49:e5:a6:00:d4:d0:33:40:43:69:51:68:
23:ab:4f:cc:23:55:64:92:9a:06:13:67:43:56:1a:
af:1e:36:c6:e6:64:f0:23:5c:e1:98:48:c8:4d:c4:
1e:d7:b3:d6:c8:50:f7:d7:f8:51:58:eb:6d:86:60:
85:4c:1b:6b:81:78:c9:03:28:20:3a:d9:66:1f:3f:
5c:35:9a:2e:24:cf:31:45:b7:aa:83:87:9a:b0:b4:
66:eb:97:d8:f6:38:fa:bc:b9:43:11:f2:87:4d:02:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:4C:F6:C9:D0:71:19:81:BF:96:9F:A4:6F:6C:87:00:7A:5E:91
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:87:9e:69:98:18:6c:9a:52:52:f2:57:a5:03:bf:1d:98:
f2:3e:32:dd:2b:cd:31:e3:70:62:60:0f:5e:de:ed:85:40:97:
e2:5e:e4:d1:13:a7:98:ff:e3:6b:b7:eb:52:d3:00:10:dd:e5:
5c:c2:92:96:48:8b:26:df:6f:07:23:d0:e9:ea:ed:4c:5a:2d:
74:81:22:8e:8d:80:67:0e:a6:22:f7:de:3d:1c:39:d6:4b:c5:
c7:44:da:6d:fe:ac:2d:8a:22:c1:39:4b:ab:71:7b:fb:54:f7:
9d:53:3a:e0:10:a0:9a:d1:79:53:ac:bc:5c:81:bf:8c:12:42:
be:b5:be:32:0a:2f:c1:2a:c4:27:e2:0e:c2:6e:89:2e:71:c4:
46:a8:59:cb:7a:94:f8:5b:1f:66:bb:55:d4:d2:56:93:dd:79:
c0:ce:70:59:44:9d:c2:26:54:04:58:fe:99:25:86:81:6a:fe:
56:4e:f8:a4:dd:57:5a:2e:4d:be:9c:b3:52:91:f9:e6:a3:c5:
85:07:f0:a6:aa:48:5e:39:28:de:ad:28:08:16:75:5d:15:07:
fb:84:00:ab:be:c0:78:fa:fb:ea:e3:9f:c1:0e:28:a9:b6:f9:
de:12:7a:70:a6:ac:cc:ee:82:67:13:c1:74:6c:e3:8d:f8:29:
c3:14:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client