Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier: JcXU1f0fV8knFz2gRIUBTJtuhWo/GhO1GSQI3Zso3Uk=
Subject key identifier: DC:DB:80:01:3D:B4:D0:F7:EE:5C:D7:38:97:0B:4E:F1:9B:83:A1:84
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial: 0199FBEB3AD29049E0091531DC80BAD43F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number: 0453
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: +dVF5117ELyIgPsg5IrqYgMgjpFEVeKZAFmELBr52ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3a:d2:90:49:e0:09:15:31:dc:80:ba:d4:3f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=dcdb80013db4d0f7ee5cd738970b4ef19b83a184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:2e:07:de:f9:17:9f:f3:ee:0d:37:66:17:
00:86:c9:a7:2e:fa:1f:7a:fb:52:0f:64:1a:d5:e4:
b1:22:60:2e:ea:ee:a9:04:e7:f4:d1:6d:da:15:71:
2f:ed:96:b3:8e:dd:24:66:ff:31:d9:e4:99:5a:c9:
63:cc:21:df:8d:c6:10:ef:0e:66:eb:6d:f9:a3:9d:
5f:3d:a4:6f:0a:aa:45:f6:06:a7:00:2a:af:13:17:
82:87:5f:73:a6:e4:29:50:d7:27:fe:ca:bd:5c:39:
76:e1:a7:c2:cc:d5:52:ed:ef:f0:63:a2:08:60:d0:
03:c9:0d:3f:76:51:33:88:15:a7:c1:ba:fb:9a:c6:
37:59:43:3f:9e:32:ce:da:4f:5e:db:30:a2:2f:68:
00:2d:16:c0:8f:be:87:a9:fc:bb:11:b5:f8:73:4b:
ed:08:75:78:68:cf:a4:d1:0f:45:c7:36:f3:46:0c:
6f:d5:3a:10:61:be:ba:d1:0f:0d:4f:a6:8c:e6:1c:
4b:4f:e7:26:83:19:1c:77:12:fe:26:4b:bf:f8:85:
38:8a:bd:54:55:69:74:e4:e4:a2:83:dd:08:77:e1:
77:c9:ff:1e:c1:ee:92:8d:88:f3:27:8d:25:84:6b:
eb:52:f9:69:bf:65:7f:c2:2f:a3:38:51:5e:f7:7e:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:80:01:3D:B4:D0:F7:EE:5C:D7:38:97:0B:4E:F1:9B:83:A1:84
X509v3 Authority Key Identifier:
keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:69:b1:0e:2e:a8:21:39:61:01:ee:fa:42:2f:2d:0c:bd:2f:
df:db:89:93:68:ec:4a:6a:76:e0:cb:ef:9b:1b:ed:93:38:37:
41:c4:0a:8e:6f:e0:38:e8:63:9c:ee:83:1d:62:86:3b:c7:9d:
0f:06:db:da:22:36:0e:6d:19:5c:1d:e9:83:aa:5f:fc:86:8c:
fb:76:2e:44:67:40:01:e7:fc:ed:29:f0:d7:41:f8:5c:19:f2:
ad:a9:aa:e4:4f:af:6f:39:41:90:f6:79:74:02:b6:99:2f:4e:
57:92:2e:31:2d:fb:9a:d9:4d:f8:bc:b1:44:41:ea:c4:cd:60:
dc:97:2d:37:2f:df:b8:77:7d:50:f5:e5:bf:3f:6b:e9:89:20:
47:6b:ef:8b:e7:d7:fd:96:83:1b:17:ea:c3:09:84:0f:28:b4:
e7:8e:6b:74:7c:b6:cf:b7:af:fa:19:41:5c:b7:1e:5e:74:d2:
aa:71:4e:48:38:fc:d6:4b:b0:21:b8:50:f3:42:cb:a5:ed:02:
7b:e9:78:59:c1:51:4f:16:58:9e:21:f0:fe:1a:ee:5a:f8:fe:
c4:42:f1:f4:04:0b:4a:53:c0:67:f9:9d:bf:65:b6:5b:59:ab:
f4:22:c8:3c:82:e9:4d:53:ef:1d:03:be:0a:fe:c5:a9:6d:24:
ed:a8:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:54 2025 by rpki-client