Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: GdXZHarxYQ4RvQy7a8EP3kFVOjZsUril2IYJsjC5VCQ=
Subject key identifier: 03:00:C1:CA:72:DA:2A:5F:F5:23:3B:31:78:D9:0D:33:02:32:72:71
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019873E1D5A41CF03783220E9EFCCA657515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:00:36 +0000
Manifest this update: Mon 04 Aug 2025 07:00:36 +0000
Manifest next update: Tue 05 Aug 2025 07:00:36 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: baOkVwqVlXu6IiWsS0eaQmxxlbIQ+a5Wq4/epLBaFz8=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d5:a4:1c:f0:37:83:22:0e:9e:fc:ca:65:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Aug 4 07:00:36 2025 GMT
Not After : Aug 5 07:00:36 2025 GMT
Subject: CN=0300c1ca72da2a5ff5233b3178d90d3302327271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:f4:91:e3:fd:64:f0:1e:8c:cd:b9:c1:0f:
3c:91:04:9c:52:3e:44:35:25:2e:d5:40:55:97:6c:
f4:28:13:aa:1b:76:98:34:69:f7:5f:9a:1a:30:2e:
86:44:2b:60:2d:21:07:dd:94:91:77:af:15:b3:e2:
6c:27:0d:9a:eb:bb:c4:65:e8:69:9d:8e:fb:5f:f5:
17:f4:4e:d4:d8:48:58:02:95:ee:aa:c5:d5:98:4b:
8a:66:81:e6:d0:17:77:18:3c:b6:01:7d:b6:bd:4c:
e2:d2:d7:4f:77:63:4b:c3:58:2b:40:c1:7e:a9:00:
2a:76:29:b2:bc:cb:22:2f:39:ef:3d:ed:a7:26:aa:
58:e5:77:99:80:c9:a2:58:af:8c:66:46:ad:43:e8:
03:13:cb:fa:51:ea:87:ad:09:25:e2:c9:f7:5e:28:
86:57:dc:b9:26:1c:d5:55:e7:6d:9b:89:d8:50:da:
10:ce:0e:16:57:e6:3a:5f:52:01:b1:7c:de:46:90:
a5:2f:ff:6d:30:04:73:79:f1:fd:c0:db:8c:09:2e:
90:2a:6d:b7:a9:aa:7c:b2:24:2c:05:1d:75:fa:b7:
db:69:e0:c0:2d:a5:55:09:b5:0c:74:28:0a:cb:ae:
dc:b4:a9:4e:ec:10:84:a2:75:e1:5c:49:21:ee:dc:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:C1:CA:72:DA:2A:5F:F5:23:3B:31:78:D9:0D:33:02:32:72:71
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:36:11:c9:ac:46:15:e0:54:0f:f4:6b:e8:c4:b7:e2:39:
da:ef:d9:e9:72:09:11:f5:5e:7d:a1:ed:69:0f:c1:7d:3a:6a:
c1:ee:8e:ee:a6:e4:6c:6c:2f:8f:31:0a:4e:c5:de:2c:cd:48:
c8:3c:a3:c1:9b:ef:e5:e0:c5:cd:f5:62:64:be:51:e0:6d:4f:
31:88:d6:b8:7c:0b:7e:7c:2f:3c:b8:f1:7b:d3:24:43:c8:ab:
32:f0:43:64:74:a7:a4:f5:68:07:de:6c:f1:1e:ce:53:77:a6:
86:b2:7d:a2:5f:78:4a:4f:00:1b:fe:c2:71:16:f3:92:e7:9a:
04:e7:56:c7:e9:4b:97:e7:69:9b:a1:ec:dc:bc:68:27:31:31:
46:e1:24:62:c1:e7:16:86:7f:0f:a0:42:44:6f:36:bb:46:e5:
a2:46:3b:75:50:11:cc:3e:c4:90:8a:2d:06:42:d3:38:c9:96:
03:ae:32:05:cc:85:dc:cb:f8:2d:3e:16:f6:91:95:bc:a1:97:
12:0b:26:5e:16:c9:4e:22:c3:d5:26:7c:ab:e9:33:c5:54:63:
5c:8e:91:4b:c8:78:7f:3d:64:f8:cc:e6:fe:3a:33:39:44:a8:
f6:6a:cb:de:8b:b1:04:e3:f3:d8:8f:b5:01:21:eb:87:ad:8b:
c8:40:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:43 2025 by rpki-client