Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: nMjbWsPX8hZX39IkyqUpLq7QBrcHXOG+6QnyQsvfPXE=
Subject key identifier: 78:79:BF:7A:05:13:47:9F:2F:9D:AD:1E:29:F7:C2:C2:BA:CB:06:D1
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019A19BD478FE36B9AC77C1595873F960B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 05:00:26 +0000
Manifest this update: Sat 25 Oct 2025 05:00:26 +0000
Manifest next update: Sun 26 Oct 2025 05:00:26 +0000
Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: WJUhl3Qcc6qnHrBk0eZ4xKVHWUKN39OlesRct9AcfpQ=)
2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:47:8f:e3:6b:9a:c7:7c:15:95:87:3f:96:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Oct 25 05:00:26 2025 GMT
Not After : Oct 26 05:00:26 2025 GMT
Subject: CN=7879bf7a0513479f2f9dad1e29f7c2c2bacb06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:71:98:06:3f:c4:6a:6f:67:a1:ff:fa:af:
8e:44:2e:75:59:bb:44:37:4a:5e:0b:b9:43:8e:ad:
1d:40:29:8f:e1:a0:63:4d:db:34:5b:ae:b3:be:f1:
f6:2b:1b:9d:bd:57:ab:d9:b1:89:b8:01:bc:bd:21:
27:60:e0:d2:af:b3:42:51:e2:e7:1e:27:71:5e:ae:
21:24:b1:a6:ce:24:9a:eb:66:26:1c:1f:da:64:b3:
19:fc:ea:3c:0d:b6:75:6d:90:7a:da:ca:f2:f2:c5:
b3:00:06:9b:d9:b5:e3:cf:22:cf:4d:92:30:d1:b9:
d7:e2:b5:eb:1d:c9:25:ea:52:0d:10:06:fa:91:ac:
03:6b:87:85:11:3b:42:f8:2c:49:d3:d8:e4:2f:99:
9e:82:06:51:ec:57:ac:24:2b:b1:ba:58:6b:a3:53:
72:0e:37:27:aa:a1:49:96:61:98:46:5a:6b:00:ee:
41:71:44:fc:2f:7d:8b:45:15:e7:c0:2b:39:68:92:
25:41:0a:2e:41:7e:ef:52:c1:0a:3c:ac:7a:e2:1e:
b8:64:c1:de:cf:d5:f7:3c:c8:cc:f0:2a:81:b1:3a:
60:24:f8:5a:15:31:56:0a:a8:a3:84:da:97:11:38:
e4:19:74:70:7a:79:f7:62:e4:d1:b8:cf:d6:f0:9d:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:BF:7A:05:13:47:9F:2F:9D:AD:1E:29:F7:C2:C2:BA:CB:06:D1
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:95:38:84:80:fa:e8:13:a3:38:7f:30:78:6b:29:68:83:
0e:cd:48:29:96:a4:7d:91:f4:c4:bd:3a:09:2b:ef:77:1c:00:
bd:92:01:4e:16:32:9c:ab:de:af:76:f9:ac:16:e5:bf:63:45:
55:33:82:43:ec:f3:48:9c:5c:20:59:1a:4f:76:1a:64:98:cc:
3e:4f:01:36:4a:2c:3e:a2:4e:3e:61:d6:30:ad:bf:56:55:00:
cb:4c:33:63:28:e7:81:df:b0:dc:d6:21:85:9e:84:5c:41:6a:
e5:7d:b9:05:c3:19:b3:5b:d7:e0:1f:34:59:1e:04:25:ef:bc:
da:57:bc:85:63:2f:51:d8:9b:68:38:19:c7:6c:78:f9:ae:cb:
ad:1d:4c:e4:f9:d5:4a:f0:1c:be:7f:af:e5:61:63:a5:da:e8:
53:c5:a9:1f:33:a2:b6:55:1e:9d:f6:bc:36:65:b9:03:ba:2b:
27:6d:7a:7c:8f:37:26:da:3d:0d:79:2c:bb:b5:fc:56:83:75:
cf:9d:f1:95:70:f6:16:41:4d:7f:80:6b:e9:c8:b2:9a:3b:8a:
5c:6a:0a:3e:78:2c:71:c5:75:7a:31:1a:80:82:23:f7:e7:56:
70:2b:24:c9:07:59:22:fe:b0:a3:80:99:a0:be:4a:dc:c8:28:
50:59:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:37 2025 by rpki-client