Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier: rFnbz0Bu/zQ2BQHY8hA4pmMXtOgekEtLbyn4uy2Swzs=
Subject key identifier: 34:7E:70:FA:D6:C4:43:88:C3:32:7F:E9:B3:4B:75:80:0A:55:03:FC
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 01987DF790BE4A4D5E9FF7589E74006B2966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number: 0F18
Signing time: Wed 06 Aug 2025 06:00:33 +0000
Manifest this update: Wed 06 Aug 2025 06:00:33 +0000
Manifest next update: Thu 07 Aug 2025 06:00:33 +0000
Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: DnskNHTeFXlNdBxMGmFkReOkmyRPa8Zmku8MzRTfJls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:90:be:4a:4d:5e:9f:f7:58:9e:74:00:6b:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Aug 6 06:00:33 2025 GMT
Not After : Aug 7 06:00:33 2025 GMT
Subject: CN=347e70fad6c44388c3327fe9b34b75800a5503fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:b2:cb:05:31:f5:d2:23:74:2a:83:de:48:
e2:85:c8:04:af:0a:de:a0:72:70:d0:f8:d8:8a:62:
e5:79:10:cd:80:61:8a:f0:12:7c:2b:8a:21:5f:32:
33:ac:4f:95:cb:ea:f8:eb:77:98:1d:56:4e:77:5a:
f1:6b:23:6c:73:3f:88:ef:8d:46:12:3a:fb:ef:2f:
c0:19:0e:b9:c3:f3:db:43:eb:af:3e:68:4b:2f:e0:
dd:0d:fb:f7:e9:ab:d2:5a:20:d5:c2:25:32:b2:43:
aa:ae:6c:9d:02:ad:a1:a4:17:4e:c6:19:d3:35:7d:
53:7a:ad:c8:89:e1:13:10:50:5d:d8:2c:15:e2:db:
00:5f:f7:6f:d5:48:77:95:79:36:4a:28:14:00:12:
70:03:f7:5c:56:a5:a4:28:cc:f5:83:5e:2f:ae:3d:
14:a2:00:1a:b7:5e:51:96:8b:d5:8f:a0:4e:56:02:
cf:dc:78:48:74:7f:a4:1c:e9:e2:b4:e8:72:ce:dd:
0b:5d:11:f4:2e:e5:9a:71:4c:57:90:c0:34:7f:66:
60:dd:93:32:8d:9b:28:d6:f6:31:34:c9:c3:b3:94:
b3:b7:85:e9:65:c8:e9:36:a9:bd:d6:5a:8b:0d:0b:
10:a0:0a:a4:32:0b:30:00:48:17:8c:c6:f3:f5:42:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:70:FA:D6:C4:43:88:C3:32:7F:E9:B3:4B:75:80:0A:55:03:FC
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:13:1b:08:2b:92:77:8c:3b:8d:71:67:8a:d1:fc:18:4c:53:
54:f4:7d:21:c4:d0:07:4a:c5:02:30:88:31:f5:7d:23:41:65:
3f:47:2c:13:87:5f:5a:35:1f:a8:74:69:e3:e3:ce:dc:37:59:
f8:fc:85:58:6c:84:be:14:43:61:2a:76:50:35:e8:6e:83:0f:
cd:23:9c:0e:c0:53:9a:37:70:63:b6:5a:aa:4c:9b:a3:41:e5:
3f:3b:ee:dd:72:ae:be:84:93:82:1c:a4:a7:a9:34:0c:01:88:
5c:f0:7c:26:b9:c2:6a:0d:6f:d8:c0:c0:8e:6a:30:bb:85:f3:
02:15:b2:1a:8f:2c:6a:37:fc:a3:69:75:69:10:78:db:a6:94:
74:9d:dc:75:17:48:60:40:0e:67:5d:ba:21:37:86:e9:5b:e6:
ca:45:30:43:8d:7a:81:71:bb:42:8a:47:fc:4f:5c:aa:cc:02:
c4:e5:c1:65:02:96:de:01:61:4c:df:eb:fa:81:58:2e:b5:81:
89:74:c8:1d:d0:0b:73:1a:5c:aa:34:d8:97:3d:7f:cb:8b:eb:
01:70:06:33:d2:a3:a1:02:16:71:d0:d2:90:5a:21:90:80:2d:
b8:aa:8b:cc:eb:6b:91:23:a5:3c:ef:ff:ed:43:f0:97:3d:8e:
ba:b1:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:22 2025 by rpki-client