Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: hrW/eEGHVfWQNW5DeCKzKebnAO+7mq5B04N0HpV5wb0=
Subject key identifier: 78:FF:46:3A:05:C7:2C:FD:AE:17:8F:F2:47:CD:A9:E9:B2:55:FB:F6
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 0199FBB35B78EF3CB0FA3C9FE642E8B2F95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: 5Tl8vhjZVMi3g8k4KHU61NFXUGFlC1AMVrAy1QpeJ1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5b:78:ef:3c:b0:fa:3c:9f:e6:42:e8:b2:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=78ff463a05c72cfdae178ff247cda9e9b255fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:e4:bb:27:40:07:4b:19:12:9d:b0:c1:11:
9e:c8:d5:e6:22:0d:00:6b:63:b6:9f:02:1e:f9:68:
61:d5:72:5d:60:18:15:41:f0:a5:0c:b1:dc:ac:33:
f1:6b:57:a1:34:8c:b8:15:27:d8:2f:90:14:57:93:
06:91:f8:15:65:f4:c0:2e:b2:eb:22:4f:7c:46:4e:
69:18:a5:26:c0:e1:da:3e:6f:1b:a7:c6:18:9e:1f:
82:bb:34:29:e4:20:cc:66:9b:c8:f8:7d:02:f2:0e:
44:78:97:bf:3b:89:98:d0:cc:43:4c:5d:f7:a2:92:
0d:80:48:10:b9:37:b9:78:cb:97:f2:cf:a2:f4:38:
f3:cb:d7:a5:7f:7a:ef:c4:5c:1a:3c:85:bc:1d:c9:
25:99:d4:c5:a1:43:f7:aa:b7:d6:11:06:3c:1e:6f:
a5:6e:ba:a1:f5:ff:bf:27:df:fd:56:c0:b2:2b:40:
ed:37:3b:d2:03:35:de:06:5a:8b:4a:ec:85:20:6a:
39:51:42:61:d2:5a:a8:3a:22:4d:52:84:a9:3c:ee:
cb:e7:ea:ac:53:cb:a4:05:fa:31:dc:fe:10:1b:5c:
e1:c5:d2:ef:38:1f:4b:81:1e:c7:1d:07:ce:3a:71:
c8:53:f3:89:4b:7d:41:73:89:74:91:b3:5b:df:93:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:46:3A:05:C7:2C:FD:AE:17:8F:F2:47:CD:A9:E9:B2:55:FB:F6
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:0a:cd:ac:b9:77:f9:ee:3a:e0:e1:ca:34:47:60:97:97:
1d:01:00:35:fd:cb:d2:68:67:8c:5b:19:27:77:a0:8f:af:99:
c0:63:a8:f2:78:e9:da:1a:86:13:74:ae:14:b3:cf:43:09:09:
5c:af:15:19:66:b8:1e:df:8e:9a:2d:a6:55:16:8c:46:cf:0d:
a6:ac:18:50:9d:08:a0:60:4c:9e:38:e5:2f:c8:f0:c1:49:a2:
bd:2e:0e:3b:5c:27:8a:9b:b0:78:7e:5a:50:b4:41:92:2c:19:
ff:4a:a9:9d:91:06:94:15:2d:79:f9:20:5b:63:6b:be:bf:53:
98:e5:19:30:38:ad:57:f6:ef:ac:5b:46:98:8d:9c:02:6f:da:
ae:15:25:6a:41:83:66:e5:7b:b5:ff:b2:79:a4:5e:7c:d0:b4:
7d:d7:8f:70:4f:b7:b2:11:88:8b:c6:ad:b6:93:9d:aa:a7:72:
b0:b1:e0:2e:3c:76:55:60:c2:64:a4:e9:c2:6b:77:f9:f9:00:
03:e0:9a:17:10:8c:e3:e5:c2:37:94:07:90:fe:44:23:ec:a9:
87:cf:64:95:cb:58:70:6c:eb:d2:01:cb:7b:1c:60:ec:98:38:
bd:7e:fb:b9:26:c9:30:4f:4f:ad:4f:30:1d:98:fc:57:0b:00:
0a:15:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:12 2025 by rpki-client