Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: XypmpYTogj/j3t0Il3MtHAB6nuED4izIrIcrwWnQ2OY=
Subject key identifier: 68:CB:89:57:70:49:02:90:34:1D:D0:C0:5A:F5:46:B2:4B:B4:54:94
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0199FDDA52B5EDAFE9EA4321910D2F3B6EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: X0p8G/k8O4BzyNX85MYj/Rshr+Lu6FigG3uV/8H981g=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:52:b5:ed:af:e9:ea:43:21:91:0d:2f:3b:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=68cb895770490290341dd0c05af546b24bb45494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:c9:24:6c:59:a2:37:29:58:8e:09:c4:81:
ba:82:95:1e:88:13:8a:da:29:41:f3:7d:31:f6:e9:
58:32:28:a0:2b:55:40:f4:58:63:f7:70:e2:6b:e6:
c3:c8:37:c6:b3:1a:3b:da:a7:4a:40:21:99:32:20:
77:e3:4d:e1:07:18:8b:ba:e9:88:35:c0:c4:c7:e8:
fe:1c:e8:c9:c6:19:7f:fc:ef:83:56:dd:47:8d:cb:
e1:3f:8b:a7:98:d6:3f:93:97:09:ae:20:52:72:d2:
3a:3b:22:6b:50:9e:dc:a1:8e:c2:5f:70:4f:8a:24:
c5:3c:75:ed:f1:44:24:1f:d1:1d:dd:35:0d:ce:a1:
89:3d:2d:cd:bb:b2:60:de:4b:e8:13:4e:ae:90:fc:
59:f2:ba:f7:1a:6e:09:db:eb:3d:2c:ab:9e:90:e9:
ef:a4:d6:94:eb:b9:35:94:52:62:4c:6d:0f:89:c5:
e9:6d:31:a7:12:3d:53:ac:74:5c:d3:66:a2:49:2b:
39:11:a5:aa:1f:90:d4:41:c4:f3:a9:92:74:67:ec:
11:6a:4d:e8:ad:3c:59:9d:78:f1:25:d2:0a:47:3b:
01:b0:2c:24:05:a0:fe:73:35:1e:3f:60:2f:b3:23:
d2:e2:b0:2d:17:fd:2d:68:ba:c6:e6:9f:f5:a8:05:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:89:57:70:49:02:90:34:1D:D0:C0:5A:F5:46:B2:4B:B4:54:94
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:b5:fc:24:8e:c2:19:f5:76:24:e5:41:03:fb:b0:3d:a1:
31:ef:1b:3e:26:1c:dc:71:6d:e2:d9:20:01:0d:3c:5e:66:7f:
4d:ac:69:6f:62:4e:10:08:62:df:74:a6:85:a1:de:8e:b3:9f:
66:27:ac:ca:ed:d0:2d:1a:0c:fc:35:19:54:fd:73:33:1e:2c:
63:17:4b:f4:bd:63:c9:57:16:ea:93:c2:ad:95:1a:e3:58:94:
f1:e4:de:51:00:44:45:67:58:2d:ed:c6:8e:54:82:31:9d:5d:
99:ba:5d:c2:e7:a7:b2:92:cc:ac:4e:f7:0d:3a:8a:cf:4c:49:
ab:45:d3:eb:9a:e4:51:16:84:42:b4:bf:79:66:ea:c3:da:cf:
60:37:40:e1:70:af:db:f9:e8:29:71:ec:64:08:85:c1:87:81:
cb:9f:37:6f:3f:ed:25:01:18:0c:7e:9c:d1:be:91:b2:3b:eb:
d2:a1:81:cc:21:78:6c:10:26:a8:e6:4d:97:69:2b:c9:b3:1e:
e0:16:76:5c:3b:2d:43:cf:e4:20:7d:b4:af:1a:23:13:b8:95:
fd:20:2a:bd:c3:4c:bc:0b:01:76:67:a2:2f:5d:29:88:c5:41:
a8:90:00:3c:08:fd:49:dd:b8:c4:c3:af:65:82:b6:0d:aa:bc:
c2:94:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:59 2025 by rpki-client