Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: Y41zHL0XMwr512qjaPazmHS6pyrwnb+Y9lYaiAZqUyY=
Subject key identifier: A1:C8:81:DF:D9:D8:44:5C:E5:DE:EA:04:2F:22:9D:1D:8A:27:80:12
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 0199FAD80BC1F5E9ECFA4D4EB747573CF99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: TdC3eolL8Mybwl0q9NemyZ04tFs6ahHhCGV8uHetG7Y=)
2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0b:c1:f5:e9:ec:fa:4d:4e:b7:47:57:3c:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=a1c881dfd9d8445ce5deea042f229d1d8a278012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:93:fe:71:c3:61:2d:ac:53:b2:82:a9:e0:
3a:76:2c:84:06:53:8c:7e:86:c2:41:ce:c8:3b:0d:
e1:90:87:c6:ec:a2:e0:89:bd:9c:29:3a:32:20:c3:
3f:1c:85:d8:c2:5d:46:e7:8c:2b:0b:65:77:3e:81:
90:34:3f:e8:68:0a:2d:b3:a2:94:c1:88:bd:6f:d8:
31:80:76:9e:5a:f5:47:2f:5d:cc:6a:a9:bd:64:f4:
ba:26:81:8a:c9:2d:9e:89:e9:e0:48:b8:da:06:f3:
af:84:18:e7:bb:72:54:f3:3b:5b:8b:5b:ea:46:0c:
fb:a4:e8:49:14:50:61:79:3e:49:aa:76:f8:34:ab:
67:98:44:df:4d:54:17:d2:ce:9d:f0:4d:34:13:af:
ab:eb:cf:f5:fb:29:72:3b:10:0a:57:f8:5c:25:44:
7f:1c:f4:a5:a0:c1:f8:9a:be:b8:23:f1:f7:4e:9e:
28:8c:65:55:ef:8e:2d:fa:f3:58:35:38:92:eb:8e:
27:80:a7:da:83:e9:ab:30:1e:44:48:db:34:44:8a:
04:4e:e7:fa:37:ff:9b:c6:56:5a:79:01:eb:3e:00:
47:e8:cd:b5:63:af:e5:7f:89:51:26:08:21:1d:dd:
ed:9b:73:d3:b3:94:9b:5a:6d:a7:48:d9:0b:a5:3e:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C8:81:DF:D9:D8:44:5C:E5:DE:EA:04:2F:22:9D:1D:8A:27:80:12
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:b3:e5:b4:de:a6:a9:02:b1:bb:93:16:99:35:7f:b9:2e:
6b:00:b7:39:93:b7:3d:c2:67:94:68:11:6a:67:e4:45:f8:92:
49:60:83:63:d9:03:41:2c:19:25:dd:8a:e8:6b:bb:70:19:bc:
c7:73:4f:ea:b3:7c:b7:d1:24:88:ea:05:2b:f5:fb:19:0d:f6:
24:42:fb:e9:47:7b:0b:56:f9:ea:4b:87:9d:b3:b9:d7:50:2a:
d9:43:0c:ce:a8:fe:19:5a:20:25:62:1b:65:55:d4:a8:c9:b3:
10:50:92:45:5e:5d:d0:77:36:3b:3b:41:cb:f4:79:a9:92:bc:
6e:aa:2d:5d:45:21:9c:c3:40:2a:04:a0:11:cb:70:47:ec:3b:
c8:2f:fe:97:21:ab:e7:84:a5:a0:53:f6:da:95:6a:a4:af:84:
fd:94:94:9c:51:21:bd:ec:6c:74:43:a2:2a:c3:f8:36:70:56:
26:9a:cb:08:b0:fe:26:f6:da:cc:c9:d2:d8:10:99:a0:f8:2f:
0c:17:fe:5a:4c:aa:d3:3b:f3:5b:c6:f5:66:e9:f3:dc:93:64:
b2:1b:02:7a:ad:a6:4b:c1:f4:1b:76:0c:2c:d0:db:1e:44:61:
e5:6f:f9:ca:dc:41:a0:e4:b4:d2:4e:30:d5:3d:dd:ef:20:68:
24:7b:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:43 2025 by rpki-client