Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: Kb/z92djbGdTOWeX65Rxxn4tLjvdo3bllFWzw5cfEaI=
Subject key identifier: 97:8F:32:42:F9:73:9B:E9:C3:81:2E:79:E1:65:B8:24:03:3E:87:1E
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 0197C07F1B35537AF5218AC72989A47A0EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 11:00:44 +0000
Manifest this update: Mon 30 Jun 2025 11:00:44 +0000
Manifest next update: Tue 01 Jul 2025 11:00:44 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: H5DCg9SkpVdlI8Z1BphiJgvSXIZBWz0PDilgYZ6ujuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:1b:35:53:7a:f5:21:8a:c7:29:89:a4:7a:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Jun 30 11:00:44 2025 GMT
Not After : Jul 1 11:00:44 2025 GMT
Subject: CN=978f3242f9739be9c3812e79e165b824033e871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:e2:f2:16:70:49:6b:18:52:a9:c0:47:e5:
24:3b:fe:b9:0b:29:e9:06:3d:e5:98:1c:c9:9a:6c:
2b:5f:a0:b6:d7:92:87:5c:92:3b:ff:a4:45:f7:ad:
a4:f6:6a:df:6d:4a:9e:d4:b2:72:d3:6e:b6:0c:21:
6f:b9:5c:45:76:63:60:06:fc:a7:b9:5e:49:66:7e:
82:6a:f9:03:66:30:4c:88:f0:13:7b:9c:f0:ea:92:
54:2b:42:25:39:50:84:43:d0:99:65:9e:6c:75:e4:
9b:44:50:70:7b:8e:ad:cc:84:8b:fd:be:33:7d:fd:
cd:09:96:21:26:bf:70:f1:37:ef:d2:db:07:35:1c:
f8:33:6c:3d:47:5b:c5:6f:68:3d:7b:63:b9:57:aa:
12:1f:cd:e0:0b:b5:90:11:31:66:c9:e2:92:7b:3e:
de:2a:bf:0c:4e:2c:18:be:7f:3b:73:06:49:1c:2b:
92:ca:08:c0:3c:0d:cb:1e:c7:b5:3e:0c:db:08:1b:
c7:a8:d3:cc:34:e3:1a:e1:60:12:03:b0:30:d3:6a:
be:ce:56:33:a6:8f:92:b4:98:ca:81:ae:46:42:a7:
0a:bc:0e:bc:2d:e8:d8:8f:80:c7:ad:9a:1f:8d:84:
45:b7:7d:46:2a:8b:a6:03:7a:0e:85:7b:c1:5f:dd:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:32:42:F9:73:9B:E9:C3:81:2E:79:E1:65:B8:24:03:3E:87:1E
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b3:cc:9f:f6:ad:90:24:7f:d9:dc:1b:3c:92:4b:e1:7b:fc:
b5:cb:86:b0:d9:b1:79:5e:f6:ac:68:99:3b:72:d2:e5:65:c6:
72:56:62:ac:87:a8:a0:0d:83:e0:4d:ac:15:b3:8e:79:bf:9d:
67:6f:6c:95:40:01:91:68:e5:a8:e7:39:42:dc:11:ed:f7:23:
78:9b:82:d5:27:a7:51:6c:b1:9c:a7:ae:f6:b4:c4:4a:fa:18:
6d:e9:60:9d:39:e3:bc:c5:e0:19:c0:80:5a:c7:7e:15:19:d1:
1c:0c:0e:e2:b5:f1:7a:d1:61:3a:3d:c7:3e:d6:b0:dd:d6:c9:
fb:9e:fe:ca:6c:73:09:42:a3:2e:05:bc:1c:af:57:85:e2:b4:
ac:e5:83:e1:72:ab:a1:9f:0e:79:4f:5c:69:4c:61:70:c4:5f:
1f:13:c0:8d:a9:b9:a2:b4:a6:7b:78:90:84:32:e1:81:35:ae:
7a:e9:57:6e:81:c5:e6:13:6a:fd:fc:c0:3e:d3:b3:46:09:93:
6f:a0:ef:61:1d:0a:67:92:ca:50:19:bf:53:bb:4b:5b:fc:6b:
1b:7e:3d:7d:1c:6b:b3:97:fe:44:92:da:47:cb:cb:8c:c5:37:
e6:fb:7d:63:b0:83:c0:1c:54:cb:b3:fd:3a:93:54:cd:e0:fe:
4c:3e:c3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAfxs1U3r1IYrHKYmkeg6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNTJkZGEyNzIyNmEyNzVlM2U3OWIzNzRjOGYyNjNjZDJk
OGVjZDEwHhcNMjUwNjMwMTEwMDQ0WhcNMjUwNzAxMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg5NzhmMzI0MmY5NzM5YmU5YzM4MTJlNzllMTY1YjgyNDAzM2U4NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fji8hZwSWsYUqnAR+UkO/65Cynp
Bj3lmBzJmmwrX6C215KHXJI7/6RF962k9mrfbUqe1LJy0262DCFvuVxFdmNgBvyn
uV5JZn6CavkDZjBMiPATe5zw6pJUK0IlOVCEQ9CZZZ5sdeSbRFBwe46tzISL/b4z
ff3NCZYhJr9w8Tfv0tsHNRz4M2w9R1vFb2g9e2O5V6oSH83gC7WQETFmyeKSez7e
Kr8MTiwYvn87cwZJHCuSygjAPA3LHse1PgzbCBvHqNPMNOMa4WASA7Aw02q+zlYz
po+StJjKga5GQqcKvA68LejYj4DHrZofjYRFt31GKoumA3oOhXvBX91N1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJePMkL5c5vpw4EueeFluCQDPoceMB8GA1UdIwQY
MBaAFLJS3aJyJqJ14+ebN0yPJjzS2OzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMt
YTE3Nzk5MDRiMWM1LzEvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMtYTE3Nzk5MDRiMWM1
LzEvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrPMn/at
kCR/2dwbPJJL4Xv8tcuGsNmxeV72rGiZO3LS5WXGclZirIeooA2D4E2sFbOOeb+d
Z29slUABkWjlqOc5QtwR7fcjeJuC1SenUWyxnKeu9rTESvoYbelgnTnjvMXgGcCA
Wsd+FRnRHAwO4rXxetFhOj3HPtaw3dbJ+57+ymxzCUKjLgW8HK9XheK0rOWD4XKr
oZ8OeU9caUxhcMRfHxPAjam5orSme3iQhDLhgTWueulXboHF5hNq/fzAPtOzRgmT
b6DvYR0KZ5LKUBm/U7tLW/xrG349fRxrs5f+RJLaR8vLjMU35vt9Y7CDwBxUy7P9
OpNUzeD+TD7DlQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:02:27 2025 by rpki-client