Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: gNAyjfbCTybsk5Uyi11CDi7mo0OYeGqluIk3L2t8eoA=
Subject key identifier: 8C:7C:D9:F3:C7:43:6C:4D:E3:E5:33:A8:B5:3B:D1:5B:96:C4:EE:74
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 0196835A00248F5F1144D747BCE105568C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 21:00:35 +0000
Manifest this update: Tue 29 Apr 2025 21:00:35 +0000
Manifest next update: Wed 30 Apr 2025 21:00:35 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: Q34AwAS5Md4FgfD6PQCVNTBLyJMlkbmdFa5tHmSMZ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:00:24:8f:5f:11:44:d7:47:bc:e1:05:56:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Apr 29 21:00:35 2025 GMT
Not After : Apr 30 21:00:35 2025 GMT
Subject: CN=8c7cd9f3c7436c4de3e533a8b53bd15b96c4ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:5c:2d:ac:c6:2c:60:94:45:d7:e7:b8:e0:
0b:f1:1f:b3:3e:f4:b7:41:00:ab:2a:49:e0:3b:f4:
a8:f6:41:43:4d:fc:a6:0a:2f:db:05:ea:b3:14:9d:
4d:37:a1:d3:6e:f4:8f:8f:e1:62:15:bf:da:d8:84:
8a:e1:7d:fe:09:7a:0d:c0:95:1a:37:70:a4:22:01:
66:0e:c6:7f:df:79:89:24:17:8c:97:b1:92:0f:61:
2a:4f:44:6b:03:93:21:a2:15:ba:fa:af:2a:e1:47:
ee:23:12:18:8d:f8:e0:bf:6f:47:17:7b:55:2d:00:
ec:08:cb:89:ae:4c:2b:f0:39:33:1d:0c:ee:3e:e6:
4c:37:92:d1:99:48:81:10:41:14:6f:af:33:08:38:
fd:14:aa:fd:87:6b:34:f9:70:c4:f4:dd:19:28:5f:
6e:5b:4e:05:8d:ba:e7:e4:1e:25:37:e3:93:66:5c:
e8:76:21:1e:84:db:ea:d9:5c:72:63:b0:09:c8:4b:
69:e9:1b:be:4e:69:4b:80:b9:dd:ec:cf:36:25:de:
4e:68:18:27:6c:44:47:ea:d0:ea:8b:99:16:06:fc:
44:a7:04:44:17:eb:90:ad:3d:ce:f2:e2:10:fd:1d:
95:8f:01:30:27:b2:6a:32:ad:a1:f8:63:99:56:88:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:D9:F3:C7:43:6C:4D:E3:E5:33:A8:B5:3B:D1:5B:96:C4:EE:74
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:3e:b4:e4:54:c5:a6:34:7a:ea:63:77:cd:ea:d2:b6:60:
5b:88:de:3c:bf:6d:3e:22:ec:aa:d6:61:53:cb:8d:de:a7:bb:
20:a9:e1:1d:b8:51:f3:7f:1f:5a:2d:20:83:82:9a:58:15:3e:
49:f4:72:59:46:bd:b6:f5:46:71:1a:e1:66:1c:e3:39:3d:50:
5b:2c:27:85:a3:0b:fa:5a:33:fc:fb:b0:94:d2:c5:1e:d8:b8:
ef:6a:58:32:86:05:df:10:d4:25:49:52:9c:11:2e:cc:d0:69:
b0:eb:41:96:6d:5c:19:b5:97:0e:78:29:22:d2:e9:1f:73:54:
ba:88:b9:02:e3:c2:f7:bd:b4:28:38:04:0a:50:55:78:2a:21:
97:d1:fd:7a:cc:1c:d3:bb:1b:24:fa:0f:92:6f:af:8d:1a:ae:
61:8b:31:bf:09:99:d7:ac:11:f8:7b:69:97:4c:08:ce:7f:44:
69:c9:05:d4:81:29:82:b9:8a:b6:73:b2:1e:71:23:10:2b:61:
6f:fd:2c:f6:c2:f1:ac:f1:ed:94:df:1f:16:47:b2:07:e4:b1:
02:9f:c3:f5:54:47:fc:34:c7:7b:5d:d0:10:20:bf:d1:b1:59:
2a:73:b2:50:ee:1d:a6:76:e6:1e:57:6b:84:74:88:f2:46:ca:
12:6d:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:39:13 2025 by rpki-client