Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: g6prTINfXC4KxpCqst6f+91EY0X7yxOnVYibmWsfRVE=
Subject key identifier: 2C:E0:DE:8E:F3:82:E8:C5:44:7C:95:82:47:DE:6D:12:DD:13:BF:5F
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019A4FCFFC46A9458D63B025F06E66443ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 17:00:21 +0000
Manifest this update: Tue 04 Nov 2025 17:00:21 +0000
Manifest next update: Wed 05 Nov 2025 17:00:21 +0000
Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: vdr5W0kyru4C4COp+6P808icepSEef8LjGqzSWyta/k=)
2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:fc:46:a9:45:8d:63:b0:25:f0:6e:66:44:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Nov 4 17:00:21 2025 GMT
Not After : Nov 5 17:00:21 2025 GMT
Subject: CN=2ce0de8ef382e8c5447c958247de6d12dd13bf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:0a:35:2f:ab:10:4f:07:d6:df:52:1c:63:
73:b1:26:02:ba:a2:93:31:05:e9:cc:f8:89:46:60:
9c:12:c0:eb:2d:76:dd:09:d3:be:1e:c4:c3:a9:4e:
cc:16:24:f6:46:61:08:c5:3e:6d:42:41:9a:35:69:
2d:e4:d9:7a:b8:b8:bf:be:7e:9b:7b:8b:23:e9:4c:
41:c3:6c:93:6a:0d:9f:6a:2d:fa:3e:91:6a:2c:a1:
9d:b3:38:6c:8d:58:48:26:51:fa:dc:b4:98:6e:7f:
9f:d8:8e:25:28:8a:d0:78:ce:7a:9e:b8:b7:6f:32:
f5:e9:d4:22:49:22:74:8b:2c:ac:1f:e9:01:4a:b8:
f6:3f:cc:81:37:b1:c7:1e:57:e2:e0:c9:2c:d5:9b:
b1:fb:f8:83:ca:7f:a1:d0:3b:fa:28:2d:46:92:a1:
67:83:5a:67:2a:e9:a0:50:38:37:e0:3c:09:17:2d:
8f:a6:11:0b:72:66:2a:9b:4a:77:7c:70:42:e7:67:
0a:2d:e0:bd:bc:80:d2:3c:92:7a:55:b9:97:6a:b8:
e8:aa:d0:df:59:d1:72:93:70:d8:4f:07:db:5a:43:
41:64:46:da:6a:c9:8a:96:67:89:6e:07:37:d5:fa:
c1:1f:73:27:03:a6:de:a3:04:ee:7b:7a:60:3f:6f:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:DE:8E:F3:82:E8:C5:44:7C:95:82:47:DE:6D:12:DD:13:BF:5F
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:4c:ec:48:1f:06:75:e2:dd:05:1e:0d:07:ba:9d:ae:84:
40:fa:66:36:3c:17:98:00:d4:a5:49:4f:f3:4b:a1:4b:57:b5:
d9:d6:e1:76:4f:7c:75:22:20:3d:70:23:ae:f5:bd:0a:5b:a3:
6c:a2:1c:74:bb:4e:f8:b4:1a:10:65:ac:4c:24:3d:df:fc:27:
1f:a5:22:e8:35:78:0c:57:b6:24:c4:55:3a:0b:27:28:d7:26:
e0:15:63:e6:2d:0c:3b:54:99:7b:98:2c:05:16:a2:cf:63:4b:
cc:94:6f:47:48:5b:04:1c:e8:e7:51:0c:21:77:d8:0c:bc:31:
98:3a:13:6f:0f:a7:26:49:14:0b:d6:ba:08:0e:09:6d:5b:3d:
30:f1:3d:f7:1d:4e:a5:db:9f:30:34:d4:5e:55:d1:42:5a:f5:
2a:33:20:7b:4f:24:89:74:2f:ae:59:f1:67:fe:71:b2:57:b8:
01:39:d0:39:e3:15:06:2c:f1:ef:34:6d:4e:d2:1c:93:d5:14:
81:23:02:38:f9:23:12:46:63:73:a7:c5:72:8c:d4:fd:96:35:
c7:96:68:ce:71:e3:1d:6f:7d:bc:fe:b9:d7:6b:c4:ab:4a:05:
71:0d:d3:23:06:f2:07:ac:9e:ba:b8:1b:64:be:c0:7e:55:83:
09:79:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:42 2025 by rpki-client