Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: rzxcom5J4Cg+dQ//p7+QGntk8rjQPrNTak418jJ15CY=
Subject key identifier: 3C:76:08:7B:46:E6:0B:0F:B5:38:6B:24:99:28:06:C9:8C:D2:F1:EC
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019A4EF4C265CE9D01C4C3F074F5886E3E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: MeK75RnjXYmmEwCZEPD2m8mX2HBCBcBYLcvNbGSuVKM=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c2:65:ce:9d:01:c4:c3:f0:74:f5:88:6e:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=3c76087b46e60b0fb5386b24992806c98cd2f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:2a:b2:e6:62:57:3b:10:7c:d4:1a:70:1c:
c5:25:3f:3d:10:6e:1e:cd:f7:ed:74:c2:ba:65:44:
5a:42:3e:9d:a1:4b:18:36:01:a8:40:ca:18:1b:ca:
a0:10:50:d3:02:3a:b1:b2:46:67:e9:da:10:00:2d:
e0:f2:a4:1b:e4:a9:40:bd:54:8b:08:70:99:f0:94:
2a:9b:59:7f:57:cd:c8:8d:8b:53:3c:a6:cf:78:00:
c3:41:6c:52:1a:99:f2:15:5b:b5:eb:31:a5:51:02:
80:21:27:2b:52:35:89:07:3d:19:b4:36:21:7b:69:
42:0d:c6:73:60:1a:c9:65:7c:db:56:26:e2:4b:a8:
c5:fb:cf:13:3e:1e:2f:b1:12:5e:be:97:f8:1b:11:
46:96:2a:9f:03:ba:12:e5:69:14:82:d9:54:30:24:
02:e8:c5:c3:54:38:62:e2:49:ce:67:a8:bf:0c:3c:
ed:4a:d8:31:11:c6:24:23:0d:45:58:04:a5:a2:ef:
75:88:18:14:cb:4a:8f:d1:78:6a:a3:36:ee:3f:e3:
2d:1f:5f:94:7a:c3:a3:e2:0f:94:fd:b9:52:9b:8e:
99:dc:11:39:81:d1:10:44:53:49:70:66:73:9f:f8:
00:f0:6b:63:e4:52:f7:48:dc:e5:14:a3:6c:a0:51:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:08:7B:46:E6:0B:0F:B5:38:6B:24:99:28:06:C9:8C:D2:F1:EC
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:5a:b7:60:2c:60:93:64:13:0e:05:0e:e2:b6:19:9d:a0:
2f:cf:d3:4e:f5:57:e7:7b:a1:8f:4c:8f:68:7f:a4:f9:32:ba:
3f:af:d4:e6:0f:05:a9:8d:fa:31:4d:f2:30:9d:aa:db:8c:2a:
0e:98:f0:cd:05:dd:9e:ef:d1:6b:1d:44:18:e6:a5:9c:af:36:
be:41:8b:15:e1:25:50:86:94:12:af:64:e2:f0:1c:66:ff:85:
e4:2c:26:bb:79:76:e7:e7:8b:6e:45:a8:35:2f:34:e3:ea:60:
9c:cd:ca:1e:53:af:bc:93:27:59:d4:4b:27:8b:5e:c9:18:03:
b8:4c:71:cf:93:7b:54:5f:40:33:55:22:5c:68:9b:83:95:67:
c0:98:08:42:94:9b:a0:75:ac:c1:8e:0e:ab:eb:49:3a:da:68:
67:91:3a:84:a5:43:50:9f:ec:00:7e:13:4e:ad:b9:09:3d:ff:
2c:3b:72:55:86:51:62:29:4f:ea:61:bb:c7:e3:c0:aa:59:97:
7c:d1:e7:1c:4c:a3:96:64:d2:f2:23:29:72:f8:47:7d:4b:9f:
a2:ba:b0:f1:49:88:eb:51:6d:0a:28:e0:dc:bf:72:98:3b:be:
37:74:8b:04:17:12:54:ad:74:d7:b8:e4:e1:f1:82:40:a7:6d:
4b:17:0a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MJlzp0BxMPwdPWIbj6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjUxMTA0MTMwMDU0WhcNMjUxMTA1MTMwMDU0WjAzMTEwLwYDVQQD
EygzYzc2MDg3YjQ2ZTYwYjBmYjUzODZiMjQ5OTI4MDZjOThjZDJmMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49sqsuZiVzsQfNQacBzFJT89EG4e
zfftdMK6ZURaQj6doUsYNgGoQMoYG8qgEFDTAjqxskZn6doQAC3g8qQb5KlAvVSL
CHCZ8JQqm1l/V83IjYtTPKbPeADDQWxSGpnyFVu16zGlUQKAIScrUjWJBz0ZtDYh
e2lCDcZzYBrJZXzbVibiS6jF+88TPh4vsRJevpf4GxFGliqfA7oS5WkUgtlUMCQC
6MXDVDhi4knOZ6i/DDztStgxEcYkIw1FWASlou91iBgUy0qP0XhqozbuP+MtH1+U
esOj4g+U/blSm46Z3BE5gdEQRFNJcGZzn/gA8Gtj5FL3SNzlFKNsoFGG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx2CHtG5gsPtThrJJkoBsmM0vHsMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwdat2As
YJNkEw4FDuK2GZ2gL8/TTvVX53uhj0yPaH+k+TK6P6/U5g8FqY36MU3yMJ2q24wq
DpjwzQXdnu/Rax1EGOalnK82vkGLFeElUIaUEq9k4vAcZv+F5Cwmu3l25+eLbkWo
NS804+pgnM3KHlOvvJMnWdRLJ4teyRgDuExxz5N7VF9AM1UiXGibg5VnwJgIQpSb
oHWswY4Oq+tJOtpoZ5E6hKVDUJ/sAH4TTq25CT3/LDtyVYZRYilP6mG7x+PAqlmX
fNHnHEyjlmTS8iMpcvhHfUuforqw8UmI61FtCijg3L9ymDu+N3SLBBcSVK1017jk
4fGCQKdtSxcKHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:32 2025 by rpki-client