Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: Ab+HfK1euc0KlLMPl4TKHbFtTeIjnfZBfz2GsIxlU9A=
Subject key identifier: C8:B4:94:2E:D0:1B:C2:7E:CF:AC:44:D3:94:4E:ED:62:9D:3A:66:70
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0199239F1567FFE022A3BE7950092A90FD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:00:52 +0000
Manifest this update: Sun 07 Sep 2025 10:00:52 +0000
Manifest next update: Mon 08 Sep 2025 10:00:52 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: /aepuEcTRQayTBwDpxcIzeRSM0svIPzc383BxROyP50=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:15:67:ff:e0:22:a3:be:79:50:09:2a:90:fd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Sep 7 10:00:52 2025 GMT
Not After : Sep 8 10:00:52 2025 GMT
Subject: CN=c8b4942ed01bc27ecfac44d3944eed629d3a6670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:d9:3d:92:21:72:b7:5d:70:dd:65:9a:1d:
13:19:7e:94:be:5a:dd:13:63:6d:66:63:a3:9b:cd:
95:92:8d:9c:8b:45:b9:a4:9b:07:65:eb:f4:c9:a2:
e4:dc:58:7c:33:84:82:9c:95:bc:fc:17:6f:bb:17:
a6:f0:3e:cd:85:12:3a:33:69:3c:c2:6c:ea:d9:f4:
b9:bc:bc:d2:99:f6:8b:31:52:98:f4:28:ae:32:a7:
f9:46:41:4d:3a:eb:37:19:5c:65:2e:b1:61:54:76:
55:12:aa:c0:07:d6:f6:b1:79:b7:9a:57:95:69:9d:
9d:da:8b:ca:34:e1:f4:63:ef:52:55:4f:68:8d:4d:
19:9a:db:d8:95:6e:46:e4:f4:0b:92:a8:5c:f8:68:
bf:e1:37:37:6f:3e:6c:fb:28:5d:6b:ce:28:31:22:
4c:b2:f5:b9:25:58:f6:9e:5f:32:dc:52:5d:2d:f5:
20:59:47:cd:bb:f8:51:01:77:f1:98:84:99:8f:e2:
57:a2:dd:93:8c:a3:7d:e6:3f:60:f7:fe:e5:7e:d7:
dc:2c:03:55:7f:e0:33:7e:7d:aa:30:52:19:97:e4:
4c:9a:6a:36:2b:e6:a0:9d:66:1f:57:f7:2f:65:e4:
67:6e:c0:7f:b4:ac:4e:c6:d8:40:3c:d1:c2:b0:e0:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:94:2E:D0:1B:C2:7E:CF:AC:44:D3:94:4E:ED:62:9D:3A:66:70
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:53:02:81:5c:cf:05:fd:82:05:7c:27:e9:36:7e:4a:7f:
73:40:57:25:d9:b4:fd:e7:60:e7:81:6a:cd:e1:61:e8:56:73:
1f:38:1a:41:e9:e8:dc:98:27:ec:ef:c4:0b:a0:f9:85:59:07:
4a:64:a5:97:85:f1:9e:76:de:eb:96:68:d9:99:70:25:e5:0c:
fa:d4:82:e9:fa:5a:0e:3f:2f:3d:62:26:d5:5f:29:12:97:64:
a5:d0:c7:fb:10:cb:fd:6f:95:f8:76:12:bd:ce:cd:c8:3b:a5:
57:14:d8:c7:5d:e5:ae:d8:70:f9:7a:69:5d:1a:d9:ce:d0:0f:
71:12:3e:43:e0:6d:54:30:35:b1:b4:9d:f3:7c:d9:ba:b8:e8:
6f:c2:0e:d5:66:6c:2d:43:ae:66:6a:e9:bf:ff:f4:f5:b5:c7:
3d:22:91:cf:c7:ba:bf:97:9f:12:03:dd:a7:3c:e1:b9:fd:e1:
7a:47:7b:82:dc:da:ac:c8:d2:2f:a2:f1:bb:c8:b0:53:f2:75:
16:21:28:6a:60:cc:8d:7d:a5:7c:88:d3:0d:27:3b:a5:d9:06:
a3:0f:48:23:c4:9f:90:47:3d:10:26:b1:d6:27:3b:80:c7:10:
11:08:b8:72:b8:99:b8:01:9d:36:84:b5:0b:3d:cf:b0:28:8f:
b0:3f:a3:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxVn/+Aio755UAkqkP0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjUwOTA3MTAwMDUyWhcNMjUwOTA4MTAwMDUyWjAzMTEwLwYDVQQD
EyhjOGI0OTQyZWQwMWJjMjdlY2ZhYzQ0ZDM5NDRlZWQ2MjlkM2E2NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrnZPZIhcrddcN1lmh0TGX6Uvlrd
E2NtZmOjm82Vko2ci0W5pJsHZev0yaLk3Fh8M4SCnJW8/Bdvuxem8D7NhRI6M2k8
wmzq2fS5vLzSmfaLMVKY9CiuMqf5RkFNOus3GVxlLrFhVHZVEqrAB9b2sXm3mleV
aZ2d2ovKNOH0Y+9SVU9ojU0ZmtvYlW5G5PQLkqhc+Gi/4Tc3bz5s+yhda84oMSJM
svW5JVj2nl8y3FJdLfUgWUfNu/hRAXfxmISZj+JXot2TjKN95j9g9/7lftfcLANV
f+Azfn2qMFIZl+RMmmo2K+agnWYfV/cvZeRnbsB/tKxOxthAPNHCsOCPSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi0lC7QG8J+z6xE05RO7WKdOmZwMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2NTAoFc
zwX9ggV8J+k2fkp/c0BXJdm0/edg54FqzeFh6FZzHzgaQeno3Jgn7O/EC6D5hVkH
SmSll4Xxnnbe65Zo2ZlwJeUM+tSC6fpaDj8vPWIm1V8pEpdkpdDH+xDL/W+V+HYS
vc7NyDulVxTYx13lrthw+XppXRrZztAPcRI+Q+BtVDA1sbSd83zZurjob8IO1WZs
LUOuZmrpv//09bXHPSKRz8e6v5efEgPdpzzhuf3hekd7gtzarMjSL6Lxu8iwU/J1
FiEoamDMjX2lfIjTDSc7pdkGow9II8SfkEc9ECax1ic7gMcQEQi4criZuAGdNoS1
Cz3PsCiPsD+jTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:43 2025 by rpki-client