Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: 2O8lzRAy+wa+OdkI4lUvf+g0Jc+Pqf90SLLTgrN/GIA=
Subject key identifier: 86:08:ED:C3:EE:37:6D:2C:59:D2:12:B4:A1:54:52:A2:D1:B8:9F:E5
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0197B6A2005BCC4F1C620CE51FFEE75641C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: 2FSvGG9alGEgyYHmk43t1P4Q08UqQhTapnLXM05XHFg=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:00:5b:cc:4f:1c:62:0c:e5:1f:fe:e7:56:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=8608edc3ee376d2c59d212b4a15452a2d1b89fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:37:a1:8a:8f:7e:57:6c:f9:19:fd:91:09:
4b:7e:ec:2a:33:32:cf:da:71:97:c3:65:08:cf:1b:
4c:58:a8:cd:b2:ad:7a:5b:71:24:9e:b8:aa:99:f0:
1e:05:73:c3:8d:c2:a5:fa:59:a5:c9:44:18:6b:42:
4d:b0:01:7a:5f:38:48:5a:42:10:8e:e3:03:53:ef:
00:36:41:f9:50:81:a5:e6:4f:ac:0d:17:e0:8f:0e:
b6:1c:85:fe:5c:ba:fe:9c:52:a8:f4:0b:6a:fc:bd:
b8:a4:72:2a:48:47:34:09:9a:6d:61:a3:bc:22:4e:
a2:50:c6:7e:10:8b:25:b2:fc:01:7c:d5:4f:ab:9c:
80:c4:ed:43:db:c1:c3:a2:83:6a:38:d8:c1:11:1d:
44:eb:02:77:1a:ab:8e:71:4d:25:84:06:fb:18:af:
3f:c1:7e:2d:90:f1:26:37:28:e6:69:16:d3:ac:d6:
01:a3:dd:69:95:d3:f3:db:56:c7:60:1a:50:ce:cf:
18:a1:10:4e:2b:ac:fe:58:54:4b:a6:08:a5:43:ee:
ac:1a:4f:0e:4b:2d:f5:67:e4:69:28:8b:58:40:f7:
38:6c:4d:96:50:7f:2d:d4:58:15:21:16:3b:c4:34:
bd:ed:0a:e7:61:ed:7a:e6:d9:94:2d:52:b1:9d:b6:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:ED:C3:EE:37:6D:2C:59:D2:12:B4:A1:54:52:A2:D1:B8:9F:E5
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:0f:c8:59:c3:fc:d3:58:87:cb:25:7c:3d:b8:89:d6:37:
53:ac:31:d8:43:1a:62:29:85:6a:81:d7:25:77:27:15:72:e0:
9a:eb:37:79:8f:a9:37:fb:51:b7:04:6a:a7:56:db:34:91:aa:
93:75:af:7e:e3:86:00:a0:da:7f:14:c4:2b:32:ea:83:92:3f:
60:99:e1:fc:31:19:06:e6:ec:0b:d3:3d:e0:19:14:5d:ed:c1:
40:f2:56:49:4d:91:79:bf:34:0d:01:3e:a9:da:e3:aa:4e:11:
02:2b:2e:a4:36:bb:07:fd:9b:3c:8a:87:27:ba:16:9c:93:b1:
69:ef:62:cf:33:06:37:53:6d:0a:ba:5d:ad:6f:ae:cf:07:1b:
79:5b:13:79:31:35:cb:4a:52:73:ab:51:5b:d5:01:b9:ff:61:
3c:24:6b:03:55:d5:c1:ee:61:ae:fd:6b:8b:f1:a1:d8:a9:6f:
e9:7f:3a:2e:c4:f1:c8:66:d8:12:34:d3:6d:cc:9f:06:9c:9a:
b4:f9:99:52:81:71:98:3c:62:c4:41:2c:3a:ee:cf:e4:40:8e:
ee:b7:1d:40:1e:04:6a:22:cc:0c:25:c1:ab:c7:8f:2a:40:19:
34:08:10:f5:32:39:cc:86:7c:65:3c:d4:31:39:59:c2:c6:32:
6e:53:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:49 2025 by rpki-client