Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: M/bqM4m9JlKHEVUUX9GNymOxQap4/tj8ItDRdP4dEqo=
Subject key identifier: 76:90:F4:84:76:3E:EA:82:5C:89:C7:27:44:53:52:43:9B:F5:F3:A5
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 0196C314B3B3427ABE8AC69CFD4FB5F61572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 06:00:35 +0000
Manifest this update: Mon 12 May 2025 06:00:35 +0000
Manifest next update: Tue 13 May 2025 06:00:35 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: yHCv89bpwt+HpgxxNwEtuWJTK1t/M5iBMPIAXS183m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:b3:b3:42:7a:be:8a:c6:9c:fd:4f:b5:f6:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: May 12 06:00:35 2025 GMT
Not After : May 13 06:00:35 2025 GMT
Subject: CN=7690f484763eea825c89c727445352439bf5f3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:f9:e3:67:08:8a:7c:32:ff:d0:d6:bb:e1:
8a:fb:fc:20:e4:ab:0a:23:65:58:50:94:0b:5e:fe:
78:fc:a8:84:96:a2:df:88:54:00:7d:79:46:53:30:
21:38:89:90:ee:4e:39:9d:f3:e2:df:58:15:2f:15:
71:5e:fe:b5:d2:1d:50:0f:cf:50:93:5a:08:ef:3a:
bc:88:5d:4d:b7:38:11:9f:76:86:34:5f:39:60:cd:
22:e9:76:ff:48:09:e6:6d:fb:b5:77:0c:fe:73:f7:
a9:ab:b5:56:08:1b:44:cf:b9:bf:58:1a:65:f4:12:
45:4e:e1:b6:34:da:06:05:1c:0c:cb:83:70:a2:0c:
97:32:32:85:21:bd:8e:00:7e:e7:82:51:6b:6c:51:
5b:a7:e2:bc:92:5a:6c:e4:0d:25:05:27:bd:a0:7f:
61:c1:28:e1:32:38:36:de:8f:37:63:c9:7f:2e:d1:
fb:10:d7:f5:c8:95:39:1e:9a:98:13:e5:e8:96:c9:
e9:fd:9a:6b:9c:e9:ec:70:da:bc:1b:0f:d6:25:56:
45:4c:25:5d:46:be:e0:ae:10:6e:75:3d:98:f4:90:
b5:c3:ca:a3:af:94:06:ec:f7:fb:b9:bc:63:4b:33:
1c:2d:68:63:96:df:61:59:49:19:ac:6c:15:6b:1a:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:F4:84:76:3E:EA:82:5C:89:C7:27:44:53:52:43:9B:F5:F3:A5
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7e:0b:b0:6d:fa:bf:0c:f9:ae:91:25:71:a3:43:ce:d1:72:
88:42:b1:49:f3:14:71:7b:35:3c:0f:6c:37:d0:5a:ed:37:6d:
fb:37:c9:a8:09:f1:e3:a6:90:7e:1c:2f:c9:22:a9:4e:f8:58:
d0:5c:01:6c:4e:b5:39:b5:96:80:0b:d6:05:42:69:3b:c2:0a:
41:71:59:38:b2:bc:e5:f5:f5:15:b5:6c:3c:70:22:9c:d7:13:
f3:21:cd:d5:c9:87:3c:02:a8:bd:bc:e5:06:0a:bc:ec:79:b5:
d8:fc:31:5e:37:92:fc:68:2e:ca:6e:06:ae:3c:3d:8e:80:68:
7e:bc:cc:4d:4d:53:a2:1c:c6:7b:00:d7:21:2a:6e:ea:27:5e:
94:fc:ad:e8:59:c0:3a:e4:33:83:b9:f8:b5:ba:fc:30:87:78:
1e:b7:95:29:18:b0:c6:78:70:3f:a4:cf:9a:ef:a3:35:c6:51:
e7:8a:4d:8d:f2:6a:c3:79:4d:c5:67:e0:dd:53:11:4b:82:09:
d8:de:16:c4:f3:79:d5:e2:9c:47:b3:ae:97:15:09:f8:ac:15:
09:20:28:63:7d:42:fd:64:6d:a0:cb:95:a4:fc:ae:ac:5e:7d:
bc:76:26:82:5f:f8:ca:6c:cf:db:ed:84:b0:a9:aa:32:22:2f:
5a:54:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:54:10 2025 by rpki-client