
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: //QHFW09UNwIzERo1oY5vBwkWL07eS9WfceUJA1zel0=
Subject key identifier: A1:E9:8F:06:AF:8F:25:C5:50:A8:18:7D:46:E6:8A:EF:2A:FE:08:67
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0196B3D93C14F984F092DA39FB90EE8B3CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 07:01:20 +0000
Manifest this update: Fri 09 May 2025 07:01:20 +0000
Manifest next update: Sat 10 May 2025 07:01:20 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: pjN2IBHp457IQtc69Rgsh4lw+aUTlvdNA7DpBDPz4rU=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:3c:14:f9:84:f0:92:da:39:fb:90:ee:8b:3c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: May 9 07:01:20 2025 GMT
Not After : May 10 07:01:20 2025 GMT
Subject: CN=a1e98f06af8f25c550a8187d46e68aef2afe0867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:60:34:8d:26:5a:5b:43:bf:8b:ad:5d:8f:
bd:d3:3a:3d:3b:b0:f7:8f:0f:ba:5a:4e:0e:e4:ce:
dc:13:f7:d7:eb:87:63:7b:e9:91:8e:dd:12:b5:2a:
01:85:37:0a:96:79:4a:fa:90:52:75:98:b5:cb:80:
69:b9:b4:6e:cd:80:a6:ac:3f:62:f6:54:7c:90:59:
9a:32:38:a0:11:32:20:aa:df:34:ef:fe:53:64:e6:
86:aa:ec:d7:1a:25:fc:da:57:37:ad:c5:5d:18:b6:
c1:91:45:fb:31:af:1f:2b:a6:7a:eb:53:74:c0:31:
f0:f2:6e:05:7e:3e:c0:3b:01:eb:72:67:cf:0b:91:
25:13:3a:e7:0e:b0:eb:fa:ff:07:94:9d:85:3e:5d:
4d:2b:ac:b5:ca:70:d7:9f:5a:16:97:d3:7e:69:3b:
cb:c7:ec:23:9e:3d:77:36:b3:29:1b:bf:87:f1:28:
be:b1:b0:b6:d1:1d:17:1c:9d:0c:46:0d:21:a4:0c:
9e:07:c2:2e:13:54:d5:81:67:42:4a:f6:64:0a:fc:
35:d2:06:62:ba:c5:a0:82:a1:78:3d:9e:7c:91:e3:
9e:69:9b:9e:ef:48:e4:d1:8a:57:72:98:cd:6f:12:
e8:b9:8a:ca:73:2b:ef:c2:c9:37:61:5f:f4:d2:d9:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E9:8F:06:AF:8F:25:C5:50:A8:18:7D:46:E6:8A:EF:2A:FE:08:67
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:21:50:7c:65:2c:51:7e:5e:2d:66:6e:e0:01:de:c1:af:
00:01:3b:cd:f9:21:d2:f3:25:20:8f:32:a1:a1:d8:40:df:9e:
0c:71:d0:bb:9b:fb:de:31:74:00:71:bd:c0:27:53:2a:41:3d:
5b:20:1d:b7:75:34:e1:58:53:5f:93:6e:90:89:ba:23:e9:8e:
82:62:e2:d1:2d:c8:12:b8:ce:35:bc:c8:3a:1a:e7:61:2a:65:
62:35:32:f0:92:90:d4:98:58:fc:a4:50:38:a8:78:5e:08:5d:
fa:2f:b5:87:cf:d1:4b:56:16:5d:6d:2c:3e:9c:8a:39:30:2c:
7c:11:49:0a:92:ac:73:bb:8a:cf:7e:6e:57:34:e2:df:9a:14:
c0:6b:e6:d7:9d:9e:b9:41:0e:35:20:a5:17:8a:e2:dd:0b:ce:
a9:37:3e:dd:fa:ef:54:1b:fd:6b:24:26:0f:d1:2d:b9:65:e2:
4a:ca:97:9e:e6:c7:12:45:90:6e:9b:ae:78:f2:5a:c6:f3:aa:
be:9d:27:11:45:a2:04:9f:d8:22:2b:a5:fb:f7:65:39:e2:ac:
f5:20:cf:72:e9:9a:c2:2f:6b:4d:00:87:1f:ae:74:09:b1:43:
a0:7f:f5:71:6c:74:fb:e1:c6:6a:cf:e4:c5:9c:2f:cf:a9:b4:
a6:4b:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:33 2025 by rpki-client