Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: bHk9hf8mjV7Uobzo8R2Z2VKb3GCX/oliEUWNdHa2LMI=
Subject key identifier: 5C:6C:7F:87:7E:FE:57:81:45:8E:39:84:CD:88:E1:E8:85:85:DF:49
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01974A7AA80A3F929E28DCA3C55BFBC365AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: RaEQpR7SG9vFDN88lLTOTljgnqBgAz3y58kb4b27riw=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a8:0a:3f:92:9e:28:dc:a3:c5:5b:fb:c3:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=5c6c7f877efe5781458e3984cd88e1e88585df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:f7:18:04:00:dc:eb:12:4d:e4:89:a0:ab:
0e:5e:6e:be:56:96:25:0f:fc:c4:76:db:59:b3:91:
70:36:bf:60:ab:8e:29:40:da:e0:6f:d9:2f:c3:9d:
8c:0a:3d:1a:da:02:66:ff:cb:ac:6f:51:bf:89:6e:
03:70:72:9e:81:ed:a1:a2:27:90:f0:2d:4c:0c:d2:
d0:91:a6:81:36:78:99:34:ba:ab:30:8e:f9:21:4a:
e8:29:ef:e2:55:8b:65:5c:1e:b4:50:8f:c2:bc:89:
3f:e2:25:5d:fd:dd:f3:8d:39:8e:25:55:54:df:80:
f5:ab:f4:0e:39:11:aa:ab:69:7c:b5:8b:bf:fc:28:
63:66:c2:99:75:df:02:ea:ec:54:38:bd:35:05:9c:
fe:5c:b4:3f:94:0a:86:7e:c2:39:08:cb:f9:4c:c9:
7d:d8:24:fb:88:64:b0:43:d8:06:d0:47:b6:c7:7a:
fb:0b:9d:7a:9f:71:0a:1f:09:10:a1:ed:ef:b6:c7:
41:39:c2:0b:0d:9e:53:5d:52:0d:de:3d:55:de:11:
0f:c4:f3:94:5e:09:d8:14:3b:23:3c:f1:3d:ff:a4:
b2:6d:d9:1e:90:00:b0:8a:a1:74:19:39:84:99:9e:
93:1b:16:e2:0d:f6:2d:29:dc:d3:d4:4f:92:cd:68:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:7F:87:7E:FE:57:81:45:8E:39:84:CD:88:E1:E8:85:85:DF:49
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:58:e3:47:39:ee:27:9d:e2:60:e2:27:af:8a:b3:71:7c:
ce:3b:29:27:d3:16:e2:15:4b:88:d8:40:97:d6:80:0e:fd:13:
4a:e3:8b:a7:90:65:b6:97:66:86:78:5b:c4:f0:cb:b4:c8:c7:
12:05:1d:e4:3d:04:be:18:42:b1:61:5e:a6:7f:17:6b:a7:55:
0c:c3:f4:22:5d:78:99:57:c5:3a:a1:83:a2:c1:23:b0:6a:c4:
29:8d:56:56:5c:be:ed:1a:f2:2d:0e:a6:01:32:0b:6e:85:0a:
25:32:d3:28:fa:8d:78:fd:33:16:24:64:7f:99:c4:bc:33:7c:
3a:62:16:ad:d6:52:db:4c:ee:37:27:d6:bd:10:06:b4:42:f0:
d2:e7:58:89:d9:72:8f:23:41:91:bc:1c:51:9f:7d:c3:ce:81:
d0:70:01:79:8b:a0:13:78:a7:0f:4f:d2:6c:61:ee:e0:d4:31:
c0:4d:05:f3:f2:47:d9:0c:bc:4c:f1:6a:27:4f:c0:07:d4:83:
11:b2:03:91:be:5f:a7:13:2e:e8:31:fe:8a:7b:a5:a9:63:c4:
88:15:5c:9f:cd:23:36:a4:32:59:05:f2:8b:85:e8:0d:88:22:
1b:fc:43:33:84:3f:4d:27:32:42:1c:b3:65:82:f8:f3:ed:08:
9f:aa:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:40 2025 by rpki-client