Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier: lHa1TY2EjKeDTygQwbbI7ipV2Ux+aPwEoDlv7eDHpAk=
Subject key identifier: 0D:57:5B:C2:7B:B8:D2:C9:50:85:2D:15:92:6B:23:23:65:21:49:A1
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial: 019896A4BA6940EC1F03EE6E5833D52755DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number: 039A
Signing time: Mon 11 Aug 2025 01:00:34 +0000
Manifest this update: Mon 11 Aug 2025 01:00:34 +0000
Manifest next update: Tue 12 Aug 2025 01:00:34 +0000
Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: B7SKXuf4kPkAPbPEifHq21sFXtCgtaGJ2OSz+jVS4Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:ba:69:40:ec:1f:03:ee:6e:58:33:d5:27:55:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Validity
Not Before: Aug 11 01:00:34 2025 GMT
Not After : Aug 12 01:00:34 2025 GMT
Subject: CN=0d575bc27bb8d2c950852d15926b2323652149a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:82:ef:0c:0d:38:f8:62:0d:2b:a2:18:0b:
be:3a:39:04:93:14:fb:dc:93:4c:c7:36:4a:e6:7f:
14:1f:71:0c:9a:d7:8e:9c:6a:3b:33:6d:8c:75:d4:
2d:c9:bf:5a:29:e6:c7:04:d9:f4:88:ec:73:6d:35:
90:56:03:20:e0:8c:56:a8:bd:2f:16:53:9b:8e:63:
1a:50:22:c4:fc:c3:a9:a7:3e:dc:00:8c:d7:31:50:
28:6e:81:f2:11:e2:ab:08:b5:f1:83:6c:96:54:95:
c0:77:e6:7d:58:8a:f3:6f:cf:d0:5b:d6:94:2a:eb:
02:fc:61:bb:0f:41:d1:80:23:98:da:5a:59:c0:3e:
3c:03:7c:da:62:45:5c:01:fa:d8:8a:74:2c:60:d6:
2c:53:4e:da:ab:45:62:34:85:22:1b:0d:6d:73:bb:
15:69:43:37:43:59:f5:b7:de:b2:5d:4f:20:f9:a4:
f0:b2:78:6a:77:38:7e:0e:ac:70:fc:ce:d3:a5:43:
17:b8:a8:dd:79:7c:12:0a:2f:71:3b:ea:6c:21:b1:
c6:90:6f:ad:d3:18:bf:22:66:11:70:69:1e:75:a2:
47:5c:57:5b:9a:66:f8:81:13:37:d1:21:71:10:4d:
7f:e9:3a:96:96:11:8c:e4:19:e0:c7:56:fe:7f:3e:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:5B:C2:7B:B8:D2:C9:50:85:2D:15:92:6B:23:23:65:21:49:A1
X509v3 Authority Key Identifier:
keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c6:d1:31:62:2e:57:80:b0:b0:81:73:de:42:59:2e:5b:d0:
fa:93:c9:d7:8a:62:b5:74:30:7c:e0:07:8c:61:e4:42:5b:0b:
ec:89:15:52:28:ca:20:e3:b0:f4:c2:be:57:43:1c:31:07:b3:
af:7a:65:13:da:ef:bd:22:62:da:5f:5b:a2:0a:5f:08:cd:55:
24:1a:82:a1:af:ce:55:19:4b:6f:9d:1e:e1:b4:06:5a:ae:0d:
f9:b3:a0:a5:b3:b6:60:c4:c9:79:e4:9f:1b:99:9c:b8:fe:43:
99:62:ff:25:16:c1:b0:67:8d:53:da:26:bb:12:80:4f:8d:28:
1d:a5:9c:b2:a2:58:68:09:1e:e1:cf:06:7c:3b:e3:c4:aa:2a:
e3:28:75:60:4d:9d:1c:4f:9c:75:2d:7e:76:89:f8:76:d5:2f:
4d:a6:b3:9b:81:77:91:96:88:ce:4f:2a:67:3d:7e:f7:24:4d:
48:86:c0:70:b3:93:45:fd:31:b7:43:27:b6:e4:d7:68:49:b6:
81:7f:5a:29:c8:fd:3a:a6:ed:96:df:5d:35:54:4f:1f:bd:c3:
49:10:ef:2f:ba:78:7a:8a:2e:d7:a0:b3:fe:56:ee:34:2b:87:
75:68:f5:f3:87:ea:38:ff:81:38:78:6b:bb:09:0b:49:c2:81:
5b:94:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:51:54 2025 by rpki-client