Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: c/jofs7wHSTi9V2VBifDFtGNiebFsV4uRRjpJxIiLOc=
Subject key identifier: E0:70:74:3D:D6:98:44:24:65:29:26:A4:09:C6:4E:F6:B3:70:46:54
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 019A71EECA61EC81194232EB350F0A8849E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: AMeAm/4jjtdS9FF9RS8tbr/xXm+Ed4SaWgDzJavZiSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:61:ec:81:19:42:32:eb:35:0f:0a:88:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=e070743dd6984424652926a409c64ef6b3704654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b1:37:2d:cf:e9:b5:01:e6:50:aa:75:76:
38:da:70:f8:93:d9:af:ab:7d:20:98:92:3b:44:da:
64:36:69:ae:49:46:5c:b2:a4:92:c4:83:07:4f:ea:
d9:42:c6:40:2a:20:aa:b6:40:51:c7:2d:ed:37:9d:
fe:25:bd:db:b7:56:1b:f8:ec:1d:85:be:4f:1b:7f:
d9:93:0a:d0:85:f1:9e:a1:87:0d:39:92:83:d1:9f:
59:4c:00:f9:b2:5b:75:e4:61:c6:54:9c:ee:74:3d:
a1:8c:79:98:a2:77:55:21:13:2c:b2:14:6e:e6:9b:
cb:da:91:c6:83:0a:3b:d6:73:a1:a2:f5:07:93:72:
39:a8:df:7c:b8:23:03:bb:58:d4:b7:01:a4:15:d5:
f3:1c:ec:d9:9e:67:b8:db:25:3a:43:52:5b:1e:bd:
f3:46:99:04:d1:72:4c:ae:fd:d0:ac:72:c3:43:0e:
8d:0f:05:a6:44:a0:1c:ee:aa:6d:4b:66:83:0c:c0:
02:d1:b8:28:b7:6c:3f:df:1a:d8:67:11:d5:81:ac:
1b:43:a3:d1:18:34:37:61:d7:13:39:0b:27:28:a3:
a1:7d:08:ed:c7:6e:28:80:fd:c9:66:7b:7c:d7:f4:
e9:b9:03:0e:30:15:6c:5f:9d:ef:99:31:aa:74:87:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:74:3D:D6:98:44:24:65:29:26:A4:09:C6:4E:F6:B3:70:46:54
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:54:ec:8c:18:59:58:eb:c5:de:a1:7d:89:b0:94:4b:4d:c2:
cc:74:d7:1c:85:fd:9a:9d:66:5f:5e:cb:c0:8d:2d:f3:92:77:
1a:75:39:6f:03:27:a5:f4:23:64:19:3d:8c:f8:7e:ee:47:76:
08:cd:f8:d6:d6:70:70:87:c6:77:21:aa:14:6b:50:ff:eb:83:
2e:b7:6e:cb:fd:31:71:ed:85:24:ff:0d:3f:85:86:42:50:e4:
b4:3a:24:55:07:a7:26:0b:6b:dd:e9:80:8d:a0:b6:c2:88:19:
af:d6:70:c2:40:0d:24:fd:50:0d:a7:4a:b3:4e:ed:7d:db:1e:
b4:6b:1a:5f:0e:cc:3e:6c:8b:5b:8f:93:f2:68:ba:3a:e4:53:
12:76:dc:6a:ae:81:2c:d5:b0:02:9f:06:ac:e1:64:eb:2f:de:
ac:df:85:5f:64:c4:0c:a8:d6:57:61:dd:dd:ec:6c:a3:26:28:
77:bd:56:3b:32:10:eb:6f:46:2d:76:fd:4d:5c:6a:32:85:2a:
21:d9:d0:f0:25:02:5d:e9:44:6c:95:5d:7b:27:a2:82:89:d5:
ff:45:9a:81:1c:ea:0c:06:ff:55:c6:25:85:6b:9b:6d:90:24:
0d:fa:ec:d1:9f:6d:48:12:d6:c3:d2:81:e0:e4:bf:e5:14:ed:
54:03:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:01 2025 by rpki-client