Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: Ant972JyQuZwlR5b+UObbJ/Hdpr1T0fRJiwXpAhUBvk=
Subject key identifier: FF:0D:D0:3A:1A:FF:61:D1:06:14:46:AC:C8:04:1F:4A:44:C6:72:52
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 01976D06590CAE35BEACEAC9B764F8D55B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 06:00:21 +0000
Manifest this update: Sat 14 Jun 2025 06:00:21 +0000
Manifest next update: Sun 15 Jun 2025 06:00:21 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: yiLxvEM/2ICcy0FO91sX8agU/CCtMFc2oCc+/SEWPuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:59:0c:ae:35:be:ac:ea:c9:b7:64:f8:d5:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Jun 14 06:00:21 2025 GMT
Not After : Jun 15 06:00:21 2025 GMT
Subject: CN=ff0dd03a1aff61d1061446acc8041f4a44c67252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:f6:6f:91:eb:d1:a3:26:53:90:65:de:c2:
37:e9:22:7a:fe:44:91:9f:34:74:67:9f:62:ca:9d:
f5:57:ac:47:99:d1:c3:bd:1c:6a:43:e9:97:65:3d:
17:25:6d:7a:e6:ac:0d:23:83:04:9b:eb:8e:2d:b5:
bd:23:62:98:0e:70:42:c6:ed:c4:8e:bc:7b:c9:13:
57:ab:30:d0:9d:b2:09:c6:8d:a0:40:2b:9a:dd:1b:
8c:d0:d0:cf:a0:fd:8c:3e:bc:bd:bb:8c:ac:92:87:
b4:2c:3d:8b:3e:66:e7:1d:ab:8d:0a:a8:ca:04:5c:
ac:95:0a:95:aa:e8:67:7c:5e:b6:47:90:a5:24:b6:
a4:c2:61:9b:6c:51:74:5f:89:c4:7a:4c:34:53:ef:
94:7a:af:5c:ee:f7:19:f6:57:62:1d:00:fe:6e:94:
ce:fa:04:df:e5:62:2b:41:91:bb:67:e7:d6:48:69:
c2:7e:e7:4f:37:0f:a9:15:9b:e4:8b:b4:3e:80:75:
1c:b2:35:d8:0f:27:83:0e:df:2c:fd:06:f4:45:bf:
e3:4c:65:23:60:2e:30:a8:ab:f0:fb:15:5e:07:2f:
47:82:73:3f:5e:1f:75:5c:de:73:c8:04:c9:00:f5:
03:d2:57:05:b1:76:a7:cb:1a:6d:6b:9f:97:6b:c4:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:D0:3A:1A:FF:61:D1:06:14:46:AC:C8:04:1F:4A:44:C6:72:52
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d2:57:c9:ea:6a:89:fb:7a:fd:91:cd:51:cf:1e:1e:71:21:
39:9e:0c:ec:86:1d:d0:86:60:59:06:c9:b0:94:d5:34:f9:28:
4c:b2:3b:1d:2d:29:13:1b:0e:8a:1c:6c:d2:45:a2:f2:73:c6:
bb:73:e2:3b:ee:23:ef:e9:60:02:1a:97:6a:df:87:a3:19:07:
69:8f:aa:4f:9c:3f:a8:45:2c:41:d1:6a:30:7c:83:16:84:59:
5c:c8:c8:b9:73:47:43:af:94:66:c7:ca:a0:21:dc:b1:b2:e3:
dc:f8:e1:93:6e:0f:6e:ca:7f:30:6e:4b:c5:fe:49:83:e1:b6:
05:c9:67:d7:1f:31:82:ab:45:a8:9d:3c:a7:86:d9:e4:a6:e2:
56:ee:fe:4d:c9:3b:18:2f:03:52:24:ac:cb:ee:75:f6:2e:60:
70:88:c1:cc:b5:c9:95:0c:58:6f:9f:37:b9:2e:fc:67:c9:0d:
46:9b:e0:45:38:90:8a:2a:4d:27:9c:d6:c0:e6:01:0f:45:fa:
be:6a:78:02:ef:e3:42:da:b4:bd:23:5f:68:18:54:14:f5:59:
04:02:98:ae:77:ff:83:c0:9a:ee:f5:33:6c:59:fe:a8:fc:ac:
8e:87:3e:5f:05:0a:1e:4b:73:25:21:7f:1e:58:35:00:64:7c:
87:bd:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBlkMrjW+rOrJt2T41VsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjUwNjE0MDYwMDIxWhcNMjUwNjE1MDYwMDIxWjAzMTEwLwYDVQQD
EyhmZjBkZDAzYTFhZmY2MWQxMDYxNDQ2YWNjODA0MWY0YTQ0YzY3MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi32b5Hr0aMmU5Bl3sI36SJ6/kSR
nzR0Z59iyp31V6xHmdHDvRxqQ+mXZT0XJW165qwNI4MEm+uOLbW9I2KYDnBCxu3E
jrx7yRNXqzDQnbIJxo2gQCua3RuM0NDPoP2MPry9u4yskoe0LD2LPmbnHauNCqjK
BFyslQqVquhnfF62R5ClJLakwmGbbFF0X4nEekw0U++Ueq9c7vcZ9ldiHQD+bpTO
+gTf5WIrQZG7Z+fWSGnCfudPNw+pFZvki7Q+gHUcsjXYDyeDDt8s/Qb0Rb/jTGUj
YC4wqKvw+xVeBy9HgnM/Xh91XN5zyATJAPUD0lcFsXanyxpta5+Xa8RqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8N0Doa/2HRBhRGrMgEH0pExnJSMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdJXyepq
ift6/ZHNUc8eHnEhOZ4M7IYd0IZgWQbJsJTVNPkoTLI7HS0pExsOihxs0kWi8nPG
u3PiO+4j7+lgAhqXat+HoxkHaY+qT5w/qEUsQdFqMHyDFoRZXMjIuXNHQ6+UZsfK
oCHcsbLj3Pjhk24Pbsp/MG5Lxf5Jg+G2Bcln1x8xgqtFqJ08p4bZ5KbiVu7+Tck7
GC8DUiSsy+519i5gcIjBzLXJlQxYb583uS78Z8kNRpvgRTiQiipNJ5zWwOYBD0X6
vmp4Au/jQtq0vSNfaBhUFPVZBAKYrnf/g8Ca7vUzbFn+qPysjoc+XwUKHktzJSF/
Hlg1AGR8h73fjw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:24 2025 by rpki-client