Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: tU4AZVYbWBrhf1NW6o0zCbOgTqDBQkl48JbtpSgAfRg=
Subject key identifier: 36:A5:73:51:EE:3A:29:92:DC:7A:58:F8:AD:59:B1:89:F5:D3:F4:EB
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019896A4B28A7CBDB434F77BBBCB661592F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:00:32 +0000
Manifest this update: Mon 11 Aug 2025 01:00:32 +0000
Manifest next update: Tue 12 Aug 2025 01:00:32 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: /uw0PM2VGl6+VyalDZSDe+5uv9FUgfq4reqxLaU+1JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b2:8a:7c:bd:b4:34:f7:7b:bb:cb:66:15:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Aug 11 01:00:32 2025 GMT
Not After : Aug 12 01:00:32 2025 GMT
Subject: CN=36a57351ee3a2992dc7a58f8ad59b189f5d3f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:f8:12:d9:45:49:cb:08:1f:ae:f6:0e:c1:
a5:9e:7d:12:5d:8b:90:e2:62:ce:f0:73:84:6d:c3:
3f:61:43:12:c0:64:a2:a7:3c:ae:e2:02:fc:4a:59:
83:34:d8:c8:0c:4d:f3:ca:14:a4:d8:46:d4:b2:a2:
ce:a5:54:00:cb:2e:17:d5:fd:ae:ac:44:1d:7a:e7:
34:ac:f6:49:73:2a:c5:27:70:50:f8:9e:7e:0d:f8:
a6:c9:b1:75:25:93:87:c0:f4:ed:18:0d:db:f7:14:
78:0f:05:c4:79:55:87:a4:ca:3c:54:63:88:d8:44:
d8:5c:f0:d8:0c:26:1f:68:82:a5:4a:66:a1:e1:62:
b0:ae:13:f9:1d:88:17:0c:43:43:1c:32:d1:14:a8:
d2:85:17:9f:da:82:d1:23:6a:02:35:6b:b8:3b:e3:
b6:8c:02:95:42:2d:22:70:90:c5:27:34:0c:a7:8f:
34:ed:cb:57:5b:d2:ab:cf:81:bb:a1:16:76:a8:f5:
ab:90:ca:78:05:77:c6:16:41:97:dc:3d:67:02:41:
e3:70:68:19:ed:d3:57:54:e5:b9:53:3a:f5:0b:05:
e1:8c:4a:f7:c7:c3:23:26:b4:3e:eb:20:66:2b:8a:
5b:25:16:15:02:20:a3:06:19:d9:08:5a:28:23:da:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:73:51:EE:3A:29:92:DC:7A:58:F8:AD:59:B1:89:F5:D3:F4:EB
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1b:f9:5d:56:9c:eb:f8:46:11:0c:f9:d9:47:05:25:f0:cc:
f4:68:ab:91:d3:e0:4b:42:5d:55:47:ac:3a:3a:d9:21:4c:0c:
bd:b2:20:df:98:b1:84:ef:88:76:7d:a7:df:d9:31:30:ff:f6:
e8:d9:22:74:c9:7c:53:82:ae:bf:db:fd:b1:5a:9c:fb:ed:83:
62:59:ea:80:1d:75:5b:dc:14:3f:99:e6:2d:03:b5:1c:9b:e6:
85:9c:26:49:e8:a3:a7:39:9f:e1:ce:79:04:d3:db:3f:7b:cc:
94:fc:d1:ab:81:69:89:2b:89:8c:40:c0:bb:86:26:98:f2:60:
38:75:8c:71:5e:2b:89:ae:e4:9e:bc:54:7d:95:9d:db:fb:61:
be:c2:71:76:ad:d8:a6:1b:53:ba:9b:e3:15:05:b3:85:b4:5b:
cc:03:1d:a4:c8:52:4c:da:0c:eb:ac:86:61:fe:4e:e2:4a:40:
1e:89:2d:07:15:cd:b4:c1:de:36:37:e7:c8:30:ea:eb:f5:79:
87:0d:a6:3e:af:54:16:c7:d4:1b:f9:63:d6:d1:30:50:97:ca:
b3:8d:32:b7:6a:7e:93:4e:2b:ce:ab:dd:e5:31:08:d4:04:f6:
30:41:52:d6:4f:f4:55:46:7a:93:c4:b2:bc:0e:21:91:37:13:
a5:65:93:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpLKKfL20NPd7u8tmFZL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjUwODExMDEwMDMyWhcNMjUwODEyMDEwMDMyWjAzMTEwLwYDVQQD
EygzNmE1NzM1MWVlM2EyOTkyZGM3YTU4ZjhhZDU5YjE4OWY1ZDNmNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wL4EtlFScsIH672DsGlnn0SXYuQ
4mLO8HOEbcM/YUMSwGSipzyu4gL8SlmDNNjIDE3zyhSk2EbUsqLOpVQAyy4X1f2u
rEQdeuc0rPZJcyrFJ3BQ+J5+DfimybF1JZOHwPTtGA3b9xR4DwXEeVWHpMo8VGOI
2ETYXPDYDCYfaIKlSmah4WKwrhP5HYgXDENDHDLRFKjShRef2oLRI2oCNWu4O+O2
jAKVQi0icJDFJzQMp4807ctXW9Krz4G7oRZ2qPWrkMp4BXfGFkGX3D1nAkHjcGgZ
7dNXVOW5Uzr1CwXhjEr3x8MjJrQ+6yBmK4pbJRYVAiCjBhnZCFooI9pFWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDalc1HuOimS3HpY+K1ZsYn10/TrMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxv5XVac
6/hGEQz52UcFJfDM9GirkdPgS0JdVUesOjrZIUwMvbIg35ixhO+Idn2n39kxMP/2
6NkidMl8U4Kuv9v9sVqc++2DYlnqgB11W9wUP5nmLQO1HJvmhZwmSeijpzmf4c55
BNPbP3vMlPzRq4FpiSuJjEDAu4YmmPJgOHWMcV4ria7knrxUfZWd2/thvsJxdq3Y
phtTupvjFQWzhbRbzAMdpMhSTNoM66yGYf5O4kpAHoktBxXNtMHeNjfnyDDq6/V5
hw2mPq9UFsfUG/lj1tEwUJfKs40yt2p+k04rzqvd5TEI1AT2MEFS1k/0VUZ6k8Sy
vA4hkTcTpWWTgg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:06:48 2025 by rpki-client