Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: bM1+QfCFHKGq1llAzDq4loh379A1bpoj6tLheplLhxw=
Subject key identifier: B7:17:F9:96:99:19:F1:D8:92:8E:7E:66:D3:9F:BD:F0:29:56:65:D0
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 0199FE0FD00A0930C76D24205827ABF94AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 20:01:13 +0000
Manifest this update: Sun 19 Oct 2025 20:01:13 +0000
Manifest next update: Mon 20 Oct 2025 20:01:13 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: ZtU7/fDJARt3f9us7b+4/6NN5xggarATGAUUJEpJsLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d0:0a:09:30:c7:6d:24:20:58:27:ab:f9:4a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Oct 19 20:01:13 2025 GMT
Not After : Oct 20 20:01:13 2025 GMT
Subject: CN=b717f9969919f1d8928e7e66d39fbdf0295665d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:79:04:4b:76:a7:84:32:c9:19:7d:5d:64:
1f:60:6d:d1:fc:d8:58:96:94:66:47:50:69:d2:e5:
01:73:15:b4:87:7c:1a:73:f5:35:60:d8:9f:5c:d8:
18:c7:da:b8:f3:19:6c:e8:e6:2d:6f:cb:22:9c:ee:
da:58:86:89:dc:30:c6:35:8d:c0:87:50:02:03:b5:
21:35:5b:04:11:92:94:ac:e9:5e:e1:01:63:57:f9:
9d:a4:bc:55:ea:29:13:a0:3f:14:4b:68:a8:ab:64:
fd:52:d5:25:e4:b4:0f:13:ff:67:35:17:f5:1b:85:
e2:f7:27:7a:e7:67:42:0b:a6:1f:23:52:f2:46:3c:
62:df:c8:02:b0:15:63:ca:d0:9c:bb:1a:e0:ed:76:
e3:03:32:9f:3e:ff:6f:1a:68:49:55:35:af:99:84:
ef:7f:71:da:82:8d:9e:77:96:15:2a:9a:04:c1:1d:
d6:a7:f2:72:f2:5c:62:23:e0:fc:cd:35:48:77:78:
f2:f9:a6:ea:ee:9a:27:dc:9e:dd:c2:4c:b1:3e:3d:
7c:39:82:8b:5c:d5:cd:3f:27:d3:bf:1f:7a:f0:22:
f7:04:4f:27:e1:69:69:88:01:76:f9:8d:1b:19:1e:
eb:06:45:c3:6b:53:4b:5e:aa:36:cd:20:22:c5:29:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:F9:96:99:19:F1:D8:92:8E:7E:66:D3:9F:BD:F0:29:56:65:D0
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:74:7f:48:eb:34:86:df:38:c1:5d:f1:8e:0d:93:aa:b5:
51:34:6e:cd:46:37:27:4b:fa:4d:01:d1:dc:2a:d2:04:43:90:
9a:33:c2:93:75:5b:3f:da:87:1f:30:f3:ef:e7:4c:71:15:a8:
03:9a:14:d9:27:23:06:2a:47:7a:86:3c:b2:8b:89:06:b3:46:
a8:7a:b3:11:b3:7f:c4:e7:f3:09:a3:f8:fd:4c:9b:77:94:6c:
69:68:4c:9c:ec:0b:82:6d:37:63:8e:2f:30:85:98:51:19:20:
3e:11:aa:12:0b:6d:e5:7f:4d:64:fe:07:5e:93:26:40:3c:c2:
b6:42:c9:41:8f:db:4a:e1:76:99:1c:55:d1:fe:26:7f:88:2b:
c9:8a:cd:85:d4:12:58:60:1d:70:6c:1c:cb:23:1a:30:14:bd:
3b:6a:d1:f5:54:af:8d:08:b5:c2:46:92:4a:cb:5f:e8:81:18:
5c:bf:5f:ea:e6:a6:c2:47:5f:0c:87:cf:39:82:62:5e:a5:ae:
80:61:93:18:d2:c0:03:60:a6:19:2e:28:ac:10:c6:a2:97:5e:
4f:9b:a4:1a:8f:4d:97:b2:2d:45:66:fc:b6:d4:2f:7d:c6:a1:
4f:9c:e6:fa:4b:66:d2:fb:cf:11:b8:9b:a4:2d:3c:14:03:2d:
c0:f0:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:24 2025 by rpki-client