Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: GgOlZpf8ea5VL+UROgcC/qrBKpu6KuLC+5f7B7lfH3E=
Subject key identifier: FA:AE:C7:BE:9B:1B:1D:68:8B:FC:1F:95:1A:FB:DB:35:A5:98:6E:2E
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01967DC5BD1BA7F51E798BD08B983CB6F85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:00:33 +0000
Manifest this update: Mon 28 Apr 2025 19:00:33 +0000
Manifest next update: Tue 29 Apr 2025 19:00:33 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: LLdaRqsLkLdr8bEwLDA7WHWVrxgaJgY/sbb5GURkybg=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:bd:1b:a7:f5:1e:79:8b:d0:8b:98:3c:b6:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Apr 28 19:00:33 2025 GMT
Not After : Apr 29 19:00:33 2025 GMT
Subject: CN=faaec7be9b1b1d688bfc1f951afbdb35a5986e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:1d:f7:59:7a:ca:b4:65:b3:08:2b:5d:7b:
85:f0:7d:78:24:38:18:b0:45:df:8e:91:5d:f4:6e:
cf:0f:7a:f4:bc:76:86:32:37:af:c7:b8:05:78:86:
25:b9:7d:86:be:75:88:48:2f:b0:ae:92:92:c3:1d:
9d:1a:3a:58:3f:fe:e9:0d:c5:28:6f:86:a2:3f:e5:
3a:3d:2a:b9:62:4c:9a:99:9f:a2:ad:f0:de:ca:ef:
1f:f7:aa:37:6d:6d:c1:e8:68:e8:33:5e:30:b8:33:
9c:af:33:10:f0:e5:14:9f:df:7f:09:c0:17:26:bb:
09:b1:54:b5:33:a4:63:15:90:3b:b3:1d:19:19:5c:
15:0e:02:7b:41:45:bc:20:68:da:55:2c:d7:81:d7:
a8:69:34:ad:65:d0:e7:94:6c:cd:42:25:fd:67:2c:
92:b5:90:cb:ac:7f:ea:18:e9:9b:93:32:4f:29:0b:
6e:a5:9f:5e:7e:8a:53:4b:a6:dd:38:6b:dd:15:8c:
6a:9d:85:eb:35:df:16:86:19:db:7b:55:ba:7b:d8:
40:e7:f6:4f:13:c7:ef:2b:55:6d:4c:45:ea:7a:c7:
48:7e:6f:3e:ce:54:0e:6f:21:a8:8a:68:41:ea:69:
a9:e3:fc:83:2b:0b:b1:b3:3a:e4:0b:80:6c:61:cd:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:C7:BE:9B:1B:1D:68:8B:FC:1F:95:1A:FB:DB:35:A5:98:6E:2E
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:f6:80:12:ca:20:b9:a3:29:23:34:a9:9c:55:fe:93:68:
d2:74:32:aa:d7:82:c1:2c:c3:8c:35:f8:b6:2b:09:ea:07:82:
43:27:55:00:1c:ab:9e:51:20:f6:f9:a6:da:96:f1:81:86:86:
b8:a7:84:cf:f6:7a:53:d0:14:8a:09:4e:71:90:c3:8b:0c:13:
b8:89:c1:5b:08:47:83:c4:f4:e6:dc:d8:95:8e:d7:42:f0:43:
0a:07:96:76:92:0a:69:30:6d:4a:ed:cb:10:4c:40:8a:a6:3b:
53:75:15:fd:62:c3:75:5f:3c:00:04:87:87:25:dd:eb:72:8e:
c9:cf:0e:6d:bb:1f:c3:d8:ca:25:ec:05:a2:d1:74:7b:ce:09:
d7:c1:6b:a2:66:eb:ac:6f:e6:bd:a8:cf:57:c2:82:92:f3:55:
d9:99:fa:b0:15:67:5e:bc:a6:62:61:5c:59:c7:40:a7:7f:13:
5c:98:c4:81:2e:ca:d2:d6:a8:30:ba:09:50:da:f7:bf:16:eb:
f9:ae:0d:0d:36:a0:5c:71:de:cb:af:74:c6:fa:a0:ac:43:b5:
dc:ee:d7:d8:68:bd:6a:a2:98:e6:27:f1:b1:b5:a5:b2:f4:c5:
91:b8:b5:a2:a1:50:84:cf:27:c4:8c:9e:c0:72:85:7d:14:fb:
9d:00:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:25:59 2025 by rpki-client