Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: +XwrRfiZzrKLoASflRTQs6hdeO/Ychi89FG87PMdJz0=
Subject key identifier: 50:B4:A9:9F:4E:51:42:27:B3:E6:CA:AC:37:60:85:0D:BA:7F:71:0E
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 0198D65F617B34F4B0EC2F6F2BCD4690D862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: UiFC7UeAR4ioVjMe2gH872HwJAhp+rAYZmVQg1KqulA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:61:7b:34:f4:b0:ec:2f:6f:2b:cd:46:90:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=50b4a99f4e514227b3e6caac3760850dba7f710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:00:a9:35:78:b7:fd:7e:d6:01:c5:99:24:
8f:68:38:75:12:2b:b7:ba:f1:95:4e:05:4f:ae:7e:
c7:af:4b:fa:ea:9f:84:07:76:9c:03:22:9e:77:94:
b4:df:cc:bc:1c:aa:54:aa:f8:e9:40:53:a7:ec:6f:
3d:0a:93:da:a6:2f:3a:f1:b1:49:da:da:d6:c5:69:
a8:fb:2b:00:dd:2e:2e:53:cf:20:17:7a:64:36:96:
b8:90:d6:4c:12:e9:9b:36:72:98:ef:be:cc:ba:c3:
4e:2d:27:87:ed:6c:df:c1:a9:bb:e0:e3:f6:ed:9e:
e0:0e:db:c0:d5:85:1c:79:a2:fe:85:28:f9:7e:45:
bd:f3:39:66:fe:23:fc:48:80:b6:5d:de:cd:23:f4:
21:9c:f8:7f:47:13:53:fe:92:ea:02:cb:5b:ed:18:
61:a0:e1:96:2d:a6:80:86:06:24:50:99:42:5f:c6:
58:11:bb:6a:ac:ca:60:18:99:7a:08:56:fa:c3:1e:
07:64:1b:56:07:ab:11:cd:3e:c1:21:fc:d6:af:d8:
e5:33:d4:e5:78:05:4f:cb:b7:77:ad:cf:25:ad:ae:
ca:75:c0:2f:3f:40:d8:08:af:be:9d:9f:23:c5:20:
a4:c9:a8:05:bd:45:8e:0a:d6:d4:67:55:3e:4f:0b:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:A9:9F:4E:51:42:27:B3:E6:CA:AC:37:60:85:0D:BA:7F:71:0E
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:05:d3:b1:a9:eb:de:4d:4e:c7:77:ea:49:09:4f:f3:29:e9:
04:15:08:71:c7:a3:b6:08:b5:81:af:a2:8f:00:a9:d5:74:82:
e1:0b:08:4c:40:6b:4c:ce:77:5e:15:34:3a:3a:5c:e2:74:75:
89:c7:0e:90:77:a9:4e:59:75:f2:6c:2e:69:8d:48:79:38:83:
13:72:71:fa:ce:4d:ed:71:f3:52:1d:b3:c1:5f:9b:ab:a9:d4:
f7:f7:3c:20:ac:0c:04:94:58:9e:94:4c:d5:64:85:a8:b2:36:
09:b8:3c:8d:af:37:d9:a9:6f:97:7d:8e:61:04:c1:2a:9a:3a:
98:79:c1:4f:b0:13:e7:ba:ad:cc:ff:fe:48:25:d4:0f:3c:ab:
dd:91:54:77:ef:43:60:87:cd:7a:9a:b9:c5:01:b0:86:05:98:
8f:09:cb:94:ae:62:f2:f9:c8:fd:6a:33:d7:8d:7a:8c:8c:e5:
c4:09:24:06:c9:7e:89:fa:32:59:2d:c0:e3:2b:89:78:89:a9:
a1:06:a0:aa:66:c2:20:01:fe:6e:f9:72:5e:44:43:26:53:7e:
e3:2e:db:03:21:83:97:3b:18:62:2c:b6:41:b0:7d:23:73:8c:
13:43:42:fd:6b:2d:6c:74:81:14:c2:31:b8:f3:27:fd:1e:10:
73:d3:88:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2F7NPSw7C9vK81GkNhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjUwODIzMTAwMDMxWhcNMjUwODI0MTAwMDMxWjAzMTEwLwYDVQQD
Eyg1MGI0YTk5ZjRlNTE0MjI3YjNlNmNhYWMzNzYwODUwZGJhN2Y3MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMAqTV4t/1+1gHFmSSPaDh1Eiu3
uvGVTgVPrn7Hr0v66p+EB3acAyKed5S038y8HKpUqvjpQFOn7G89CpPapi868bFJ
2trWxWmo+ysA3S4uU88gF3pkNpa4kNZMEumbNnKY777MusNOLSeH7Wzfwam74OP2
7Z7gDtvA1YUceaL+hSj5fkW98zlm/iP8SIC2Xd7NI/QhnPh/RxNT/pLqAstb7Rhh
oOGWLaaAhgYkUJlCX8ZYEbtqrMpgGJl6CFb6wx4HZBtWB6sRzT7BIfzWr9jlM9Tl
eAVPy7d3rc8lra7KdcAvP0DYCK++nZ8jxSCkyagFvUWOCtbUZ1U+TwvTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFC0qZ9OUUIns+bKrDdghQ26f3EOMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAXTsanr
3k1Ox3fqSQlP8ynpBBUIccejtgi1ga+ijwCp1XSC4QsITEBrTM53XhU0Ojpc4nR1
iccOkHepTll18mwuaY1IeTiDE3Jx+s5N7XHzUh2zwV+bq6nU9/c8IKwMBJRYnpRM
1WSFqLI2Cbg8ja832alvl32OYQTBKpo6mHnBT7AT57qtzP/+SCXUDzyr3ZFUd+9D
YIfNepq5xQGwhgWYjwnLlK5i8vnI/Woz1416jIzlxAkkBsl+ifoyWS3A4yuJeImp
oQagqmbCIAH+bvlyXkRDJlN+4y7bAyGDlzsYYiy2QbB9I3OME0NC/WstbHSBFMIx
uPMn/R4Qc9OIkg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:02 2025 by rpki-client