Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: d1/LrAhb3doEL4BTuweIPlCW5FfE9ExnIOPgEv+dXNU=
Subject key identifier: CD:56:CC:57:5C:05:F6:EA:98:A6:47:6B:F5:72:DE:C7:88:75:58:87
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019A4EBD3E8842FE71FA6DB619F20E904565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: blMTLxB+PsvyULbso9UF/9bhk79BIaNargV89rbTnEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3e:88:42:fe:71:fa:6d:b6:19:f2:0e:90:45:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=cd56cc575c05f6ea98a6476bf572dec788755887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:6c:2c:8a:a3:d1:1c:50:89:be:24:95:38:
2b:58:74:95:2d:04:1b:b9:33:e0:4d:9f:fe:9e:46:
c6:6d:18:38:4b:be:2d:d3:c4:71:df:64:75:01:90:
9b:a5:85:5e:44:06:7e:ca:1c:c6:f1:b4:60:ea:38:
90:c3:13:c8:f2:89:08:6e:ca:ce:64:b7:3d:7a:e8:
79:06:0b:f2:ce:eb:fe:d9:3c:f2:c6:dc:cd:27:f0:
0b:cc:22:08:13:8d:8a:1c:5b:83:a0:e5:b1:3c:ce:
15:db:82:52:35:a6:f5:4c:f6:2a:10:2b:82:ba:1f:
12:c1:89:68:96:74:b9:ad:ad:38:d3:ad:39:59:a8:
4a:1c:e6:cc:f5:b8:6b:04:38:4c:0d:7b:88:86:fe:
bd:38:53:8a:69:6a:ae:4c:a1:22:a2:2e:dd:3d:16:
b6:a8:df:78:49:e2:2e:ee:b9:72:19:62:32:4a:59:
43:f0:a2:8d:fa:2f:5a:ac:70:4c:30:da:e3:89:62:
f6:fc:5b:17:32:cf:18:e8:04:dd:74:84:69:30:53:
f3:ae:93:20:1c:5d:dc:12:ff:0d:fc:4b:5a:1b:31:
77:b3:a3:02:ab:44:66:79:fd:33:9e:73:7b:0f:a6:
af:84:b7:67:40:fa:67:74:8d:35:15:09:5c:65:29:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:CC:57:5C:05:F6:EA:98:A6:47:6B:F5:72:DE:C7:88:75:58:87
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:03:08:ef:70:4b:2d:bf:7e:ff:bb:93:14:19:b3:56:a1:0b:
e9:22:82:89:aa:81:58:14:e8:c0:29:df:ac:99:14:30:1c:9d:
65:fe:33:f4:c9:96:ac:31:63:d0:3d:f5:04:9e:09:d8:39:67:
e8:18:ea:fc:49:0d:c5:99:04:4f:32:9d:09:12:b3:f8:8a:1a:
b9:a9:30:88:75:2c:7e:bd:d4:3a:9a:04:6c:ee:d1:e6:9a:a6:
4e:52:90:c8:5e:b8:b8:55:eb:ad:e0:44:ba:b3:40:48:96:34:
db:c3:8f:f9:04:9c:74:f8:29:fc:4b:43:38:fc:70:28:2b:70:
65:8d:29:c4:b0:d8:fc:da:bc:c5:fc:05:5c:91:75:86:32:7d:
53:45:1a:04:23:89:33:08:8e:e1:4d:90:74:73:77:1e:db:db:
06:7c:dd:d5:03:0f:85:60:0b:44:ba:97:38:98:2c:61:12:b9:
15:c0:59:a0:22:3a:f8:98:02:2c:f3:85:24:b5:bb:45:58:9b:
9f:67:52:15:3f:c2:0b:03:76:90:c9:3d:ee:75:8b:4a:0e:4d:
a1:de:96:c7:47:41:e5:52:75:3d:a6:3b:ce:77:43:69:aa:ab:
4b:87:17:a2:59:a9:ca:6d:f9:74:db:33:1b:bc:ae:18:eb:3b:
79:9b:ee:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvT6IQv5x+m22GfIOkEVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD
EyhjZDU2Y2M1NzVjMDVmNmVhOThhNjQ3NmJmNTcyZGVjNzg4NzU1ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5sLIqj0RxQib4klTgrWHSVLQQb
uTPgTZ/+nkbGbRg4S74t08Rx32R1AZCbpYVeRAZ+yhzG8bRg6jiQwxPI8okIbsrO
ZLc9euh5Bgvyzuv+2TzyxtzNJ/ALzCIIE42KHFuDoOWxPM4V24JSNab1TPYqECuC
uh8SwYlolnS5ra040605WahKHObM9bhrBDhMDXuIhv69OFOKaWquTKEioi7dPRa2
qN94SeIu7rlyGWIySllD8KKN+i9arHBMMNrjiWL2/FsXMs8Y6ATddIRpMFPzrpMg
HF3cEv8N/EtaGzF3s6MCq0Rmef0znnN7D6avhLdnQPpndI01FQlcZSlrWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1WzFdcBfbqmKZHa/Vy3seIdViHMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQMI73BL
Lb9+/7uTFBmzVqEL6SKCiaqBWBTowCnfrJkUMBydZf4z9MmWrDFj0D31BJ4J2Dln
6Bjq/EkNxZkETzKdCRKz+IoauakwiHUsfr3UOpoEbO7R5pqmTlKQyF64uFXrreBE
urNASJY028OP+QScdPgp/EtDOPxwKCtwZY0pxLDY/Nq8xfwFXJF1hjJ9U0UaBCOJ
MwiO4U2QdHN3HtvbBnzd1QMPhWALRLqXOJgsYRK5FcBZoCI6+JgCLPOFJLW7RVib
n2dSFT/CCwN2kMk97nWLSg5Nod6Wx0dB5VJ1PaY7zndDaaqrS4cXolmpym35dNsz
G7yuGOs7eZvu+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:10 2025 by rpki-client