
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: nvtZWeWyJq2YVdrj9PvDYUwhiobuSSYSsm5Jwf7cl5Q=
Subject key identifier: 42:46:47:11:39:C0:29:BC:BE:12:B4:BA:6D:09:E9:F6:F8:17:F4:BC
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0197711A8BFBA5377B4D6705A115178D49B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 01:00:54 +0000
Manifest this update: Sun 15 Jun 2025 01:00:54 +0000
Manifest next update: Mon 16 Jun 2025 01:00:54 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: YWH/eWJ74/nMtXnVVKj/CmPQAm+wtKZeY+KBMBy49r4=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:8b:fb:a5:37:7b:4d:67:05:a1:15:17:8d:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jun 15 01:00:54 2025 GMT
Not After : Jun 16 01:00:54 2025 GMT
Subject: CN=4246471139c029bcbe12b4ba6d09e9f6f817f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:b3:53:bc:3b:3c:ee:82:98:60:f7:35:36:
62:a7:a1:92:59:cc:81:73:2b:d7:60:32:32:f1:45:
19:86:6f:ea:33:ba:94:29:12:49:ae:77:d2:d8:45:
7e:eb:c4:f7:09:2d:db:7c:df:58:c4:8b:39:ff:c4:
76:63:32:22:30:9e:c9:9b:b1:58:3f:b9:d5:d2:24:
ec:96:94:5d:55:59:a5:7c:5c:85:63:f6:15:a1:c2:
ab:39:1b:06:86:31:87:60:0e:d4:48:31:e4:0c:a7:
41:af:1d:d0:07:53:e6:a4:a6:44:47:58:9b:de:a4:
e2:21:c4:3d:da:0c:8b:20:50:2a:4d:f6:ca:7d:46:
44:fb:1b:ee:a3:95:8f:c6:e0:1a:07:23:fb:fa:cd:
ec:b2:d8:04:3d:3a:9e:63:66:fb:0e:b7:5b:5a:e4:
8b:8a:8a:e4:e1:8c:92:30:e8:b6:8b:70:29:2b:24:
15:d1:c5:af:d0:fd:db:d9:bf:1b:df:f1:a9:48:5d:
4d:6b:0f:e2:6c:82:ad:e0:d7:5c:72:76:e0:57:e0:
c8:8c:5e:ca:2e:3c:e5:2b:8a:38:3b:d6:0a:bd:0a:
06:d9:e9:a3:af:d7:5c:7b:b3:3a:87:40:70:56:45:
2a:a8:ee:29:87:a6:15:d3:1e:c7:6e:50:0c:19:75:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:47:11:39:C0:29:BC:BE:12:B4:BA:6D:09:E9:F6:F8:17:F4:BC
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:83:d8:18:6f:a2:df:cb:99:4a:97:7e:6b:05:df:ee:46:59:
44:92:f0:8d:b5:f4:56:95:e4:54:3d:d5:6a:5e:20:14:31:c9:
41:01:2f:fd:29:49:dc:dd:76:17:08:df:9d:68:5f:ad:4a:a0:
6b:c8:44:93:b3:3a:db:d9:9e:0a:c3:49:e9:68:87:da:cf:54:
7d:63:96:16:d8:ca:75:ca:91:42:d0:28:e2:f4:ea:55:95:2f:
85:61:63:1f:a1:4f:4b:f7:70:8f:d8:35:ca:37:a8:ee:30:f1:
72:94:65:7f:b8:34:fb:6a:da:f6:38:79:a4:64:e2:3a:c3:24:
61:6e:50:d1:06:28:0c:73:65:c2:98:14:9e:0f:b3:ae:94:36:
0f:5c:f1:b2:2b:35:8d:50:e2:a3:ff:8e:74:8f:30:48:de:6e:
fa:55:29:3e:2c:72:d0:25:05:a7:3b:e9:e6:90:7e:48:a0:27:
5d:b7:66:b1:30:75:ae:d9:95:23:67:cc:dd:39:6e:8a:7e:bf:
e3:06:03:d4:ff:e4:91:6e:bb:ac:9a:d8:53:35:28:dd:36:b3:
0b:21:8d:f4:3a:0d:90:4e:62:1e:36:fb:2c:a1:5b:18:67:ac:
a9:b8:27:bd:3b:ba:51:84:a9:8b:1d:24:69:cd:c6:eb:6c:c6:
28:b1:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:59 2025 by rpki-client