Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: eDDIZGO2gz1QskVaSe089lrTQ052BFHkap0925uy1jo=
Subject key identifier: CB:89:85:9B:8D:46:2E:6A:5E:84:D9:E9:1A:8D:E1:46:82:D3:E4:36
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019A71B8EFF641894E175E7284BB846F135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: 0T9vyYO3UHKH8eF1qyQaAgJeNWIeiagXbo8eozKY8sc=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ef:f6:41:89:4e:17:5e:72:84:bb:84:6f:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=cb89859b8d462e6a5e84d9e91a8de14682d3e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:c2:e3:e0:64:0b:fc:24:90:7f:ca:be:c1:
9d:91:a0:30:54:1e:82:b8:75:73:52:6b:6e:a9:fc:
2d:cc:cd:70:1b:55:93:fd:d6:f6:dc:da:d3:8c:ef:
92:33:46:89:4b:f6:a1:bc:d4:64:db:cf:22:87:c3:
57:e5:32:5f:31:a3:5f:cc:18:c7:78:37:70:78:28:
ee:67:30:10:bb:68:b6:20:33:4e:78:0a:26:2a:f8:
1e:69:e6:80:0a:93:e9:f0:75:87:24:1d:7a:bb:e3:
7a:bd:7f:10:3c:2b:a9:22:48:5b:6d:5f:10:8c:11:
67:a3:ec:e0:bc:4e:1b:46:86:ce:f1:f3:6a:f7:aa:
48:89:59:f7:ca:d3:fc:3f:34:fa:df:83:15:f0:c4:
a4:b6:90:9d:31:a9:1a:86:8e:1c:15:f8:45:3d:c4:
12:2b:ba:52:7e:70:e6:9f:10:cc:48:3c:86:1c:a1:
a8:9b:28:03:d7:4b:2f:92:de:c7:20:8e:84:90:a7:
0c:9e:a9:8b:4f:75:4a:3f:2f:ac:3e:03:8e:ca:51:
e0:b1:9a:e7:79:cf:9b:3a:65:77:ce:a6:ce:77:00:
79:9b:3f:3c:d4:43:dd:98:24:1c:b7:e7:4e:2c:23:
b5:f2:f4:e9:63:c3:31:4a:2c:1e:92:c3:ae:00:6e:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:85:9B:8D:46:2E:6A:5E:84:D9:E9:1A:8D:E1:46:82:D3:E4:36
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:78:f6:3b:95:da:9f:3c:ff:ee:f3:b0:74:31:2e:f8:e0:7f:
36:21:c9:87:f6:a7:b0:1a:7c:c7:f7:01:0f:71:0e:3d:cc:59:
df:6e:e3:3e:8b:98:f3:6a:67:34:29:c5:89:9f:fb:b5:ef:6a:
ba:91:b2:df:b9:cd:60:35:bd:e4:8e:fa:21:65:1a:c1:2c:64:
95:4e:1f:d8:2e:3e:62:2d:75:12:e1:e1:21:bf:30:92:a3:a7:
55:bc:c3:ae:d3:c1:11:db:d0:6b:a7:7b:62:da:d7:c5:4e:17:
49:08:b0:6b:69:2d:5e:59:9c:4b:a8:8a:21:cb:15:c0:dc:74:
28:ed:df:c2:f3:e6:08:f3:f3:48:0e:0d:37:b4:4b:53:3e:fa:
0b:29:0c:08:d6:21:43:2d:e4:88:05:9f:d0:bc:ae:89:16:2a:
e9:90:26:4c:43:e6:ec:c0:b0:44:52:b4:3b:27:30:ff:83:a9:
a1:2d:22:cf:6d:9f:0a:6b:95:3e:89:48:19:25:c8:90:98:4c:
29:78:4c:9d:ec:85:6e:cc:d4:b9:5c:fc:45:76:62:49:e6:40:
41:44:a0:90:3a:b0:63:a8:ae:85:05:78:76:0b:dc:f8:fb:5a:
8f:3f:05:88:d2:01:bd:71:2a:f0:47:5b:73:80:96:0c:6f:77:
51:2b:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client