Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: DkA27m2CP1SlAcHmwhjgLJpcmrH8MB/v+2zPdadP+KM=
Subject key identifier: BF:3E:EC:C8:28:F1:11:EB:9F:37:60:76:FB:1B:11:49:4C:18:1E:F3
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0198D473D5F01299C90B1505B5DEF51AE4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: dbr5Azh04yqroJGlUw577bQLZJ6NDDdqQFqakwGlA7E=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d5:f0:12:99:c9:0b:15:05:b5:de:f5:1a:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=bf3eecc828f111eb9f376076fb1b11494c181ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:31:1e:d6:90:3b:6f:c1:ef:c2:f8:0b:99:
8b:2c:9f:66:c9:e7:92:40:fe:b3:ec:32:bf:e1:37:
bd:eb:d7:c1:68:9e:d8:9a:1c:08:49:2e:45:da:f7:
44:ab:5a:0d:30:6a:75:60:d1:c7:63:8a:2c:90:dd:
3d:90:95:5a:15:45:92:c0:24:ed:21:8d:41:e3:14:
3c:33:63:38:42:9d:a5:32:b8:75:35:34:67:c4:5e:
ec:37:1f:1e:34:ef:43:9c:95:3b:0c:43:f6:90:c2:
05:dd:1e:27:96:ae:d7:85:f5:c1:50:30:23:1c:c5:
e1:1c:ad:8c:61:4a:91:82:7e:d3:b2:d3:9c:6a:b4:
29:34:c8:31:ad:06:c0:ff:7c:5a:54:ef:0c:95:d5:
0d:b0:80:01:9e:99:62:ee:19:20:72:c9:d2:63:b3:
b6:3e:08:09:b9:bb:03:4f:ba:50:78:17:3a:18:32:
f3:ca:a3:1a:a0:62:48:99:09:80:92:cf:0f:3c:fd:
c9:9c:71:89:ee:f4:22:a0:97:59:98:4b:9b:1d:4f:
e0:f3:37:71:3f:0a:66:4f:42:42:97:d8:6b:15:f2:
33:d3:6b:f7:f2:6e:26:61:15:19:d1:1b:2d:1d:60:
eb:a3:a3:4c:0b:71:6e:a0:e3:33:e9:86:8d:31:b8:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:EC:C8:28:F1:11:EB:9F:37:60:76:FB:1B:11:49:4C:18:1E:F3
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:dc:fd:d6:a7:d6:5b:d5:fa:95:f7:44:b3:53:17:a6:81:
fb:4f:99:bf:b7:76:7d:c8:a0:3d:6c:03:c7:16:2d:e8:b9:23:
05:51:1b:c6:0e:b7:7f:ef:63:a2:a4:82:44:e2:2b:31:a8:bf:
61:9a:22:01:65:ce:af:93:5c:22:0e:f6:f9:e8:20:db:49:59:
ad:fe:0c:11:06:c0:9d:63:d3:4f:bd:66:af:60:34:a6:e5:d4:
4b:d6:fd:49:18:9b:b8:4a:43:89:f1:68:db:c3:51:00:7a:32:
bb:cd:66:a3:1c:67:8d:2a:b2:d7:8d:50:59:23:87:73:5c:bc:
c3:14:2b:79:30:7f:2d:3c:fb:92:6c:c7:c4:9b:1b:71:f6:1a:
f1:7c:98:4a:6f:63:49:6c:4d:ef:f6:6f:fd:a1:dd:9b:56:f6:
71:e0:f2:fc:11:00:2a:af:bf:e0:51:ce:a3:5f:77:26:e1:d7:
38:20:19:16:dd:ee:76:df:09:b9:0e:51:b7:24:b0:27:cd:75:
05:cf:f4:f3:cb:49:14:37:33:06:55:e3:c8:74:3d:cf:7e:24:
f5:95:39:c1:52:bc:b7:87:d1:52:4e:a0:dc:92:b8:4e:5d:71:
37:06:0c:82:47:a8:6b:94:bc:15:39:52:13:de:2e:8e:53:d1:
2c:89:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:15 2025 by rpki-client