Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: JpPHI2wu0sAXDE6KQstzO6XAgPj6Pbxq50C1Vab9lKs=
Subject key identifier: 09:48:92:31:B8:D5:C4:42:84:A8:41:AF:4B:97:17:8A:51:17:BC:B1
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 018F3AE6057143667A22725824C14E8A4D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 114F
Signing time: Thu 02 May 2024 20:01:44 +0000
Manifest this update: Thu 02 May 2024 20:01:44 +0000
Manifest next update: Fri 03 May 2024 20:01:44 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: f62MO0cJHcrApOcQWCmZHItkl+lRtVENkqhAehX73vg=)
2: UXThVNgMwyMv9MtpPXM4Qd4niWU.roa (hash: hdMqPvXVFigRo2iCCuN7H5TzcOlZvXVdCjcN2etOcr4=)
3: WU49IE_7GcOYNYwRw3RP3mN1H3Q.roa (hash: YHH8Jth9g+JM0DsX4aa0KhMxLXNyRppab/vddrDAjIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:e6:05:71:43:66:7a:22:72:58:24:c1:4e:8a:4d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: May 2 20:01:44 2024 GMT
Not After : May 3 20:01:44 2024 GMT
Subject: CN=09489231b8d5c44284a841af4b97178a5117bcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:8d:ff:d5:31:3b:0e:09:50:11:a5:09:ff:
6f:38:e2:ac:c8:e4:2f:e7:ec:8b:b7:d6:b4:65:ff:
af:80:4c:8d:dc:93:0d:6c:d6:1b:1f:b4:a6:43:7c:
4c:aa:c0:47:3a:49:97:e7:c8:66:1d:67:03:0e:a0:
74:8b:38:76:b6:9d:5f:ad:b7:93:85:d0:6d:68:5a:
6f:81:12:e2:29:1c:93:be:48:aa:6b:2b:34:ab:b7:
c4:b2:f4:57:03:c2:30:e8:17:a7:33:d6:b7:e8:7c:
9d:2a:00:7e:b2:a0:67:5d:c9:ec:14:10:86:1e:be:
f7:4e:69:2e:9c:f1:b3:11:4b:9a:e2:f6:ab:8d:f4:
75:f7:d4:d2:e6:9a:8e:b1:63:ca:00:f8:4a:c9:c8:
ad:26:ef:20:e5:f3:8f:8f:38:6c:d0:78:8f:ab:c1:
79:1d:e7:3e:01:91:77:2b:96:bf:34:52:a9:8d:79:
8b:d4:5e:f9:98:11:74:94:05:3b:7c:7f:82:e3:89:
07:a5:93:41:ca:95:03:12:9d:3a:08:50:4d:51:13:
76:25:7a:01:2f:ff:52:44:0a:61:2e:9d:a8:2d:27:
4f:3f:70:56:a8:ec:ef:8e:e7:b9:84:b9:3c:41:06:
60:d4:2c:21:82:02:f7:80:82:59:37:ff:05:b3:18:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:48:92:31:B8:D5:C4:42:84:A8:41:AF:4B:97:17:8A:51:17:BC:B1
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b2:8d:49:07:0c:74:78:5e:6d:d8:e3:39:2b:d1:3e:42:e6:
45:e6:cd:0f:4b:7c:57:63:8a:80:5b:77:24:36:03:1f:a6:c4:
bd:ab:dd:f9:db:6b:52:e5:00:7b:fd:58:e8:e7:a7:7d:41:28:
3a:d0:21:95:6e:01:c6:ce:e0:bd:3a:15:f4:f6:d1:38:f8:22:
ef:16:8e:33:bb:ce:f4:47:64:45:3e:42:8e:f1:ea:61:c2:e4:
c3:a1:6f:91:d4:75:c8:b5:c5:5f:a1:87:b1:07:df:51:7b:d5:
c1:02:f3:80:bb:4b:b2:b0:ed:46:29:74:48:76:14:e6:e6:27:
b0:c2:d9:a9:da:26:20:2d:4a:9b:58:f9:96:96:65:80:b1:57:
ab:0b:79:5b:c5:26:ba:6f:e3:05:51:5b:2d:87:0f:d1:90:03:
4f:15:f7:5a:f8:8a:05:81:4b:13:f3:48:7a:00:2f:ff:5c:c7:
96:6d:eb:bd:51:92:a9:d9:26:69:08:b3:88:0f:40:b2:34:dc:
ca:b0:4a:cd:6b:aa:73:49:f3:93:d6:30:8f:e3:56:5b:4e:44:
4a:88:1c:13:26:70:0f:92:2f:93:92:09:8c:db:71:25:69:bf:
49:1e:63:d0:46:6a:7c:f4:2d:07:f8:67:99:24:1b:a4:65:cc:
57:2a:18:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY865gVxQ2Z6InJYJMFOik1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj
YjRmNjgwHhcNMjQwNTAyMjAwMTQ0WhcNMjQwNTAzMjAwMTQ0WjAzMTEwLwYDVQQD
EygwOTQ4OTIzMWI4ZDVjNDQyODRhODQxYWY0Yjk3MTc4YTUxMTdiY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCeN/9UxOw4JUBGlCf9vOOKsyOQv
5+yLt9a0Zf+vgEyN3JMNbNYbH7SmQ3xMqsBHOkmX58hmHWcDDqB0izh2tp1frbeT
hdBtaFpvgRLiKRyTvkiqays0q7fEsvRXA8Iw6BenM9a36HydKgB+sqBnXcnsFBCG
Hr73TmkunPGzEUua4varjfR199TS5pqOsWPKAPhKycitJu8g5fOPjzhs0HiPq8F5
Hec+AZF3K5a/NFKpjXmL1F75mBF0lAU7fH+C44kHpZNBypUDEp06CFBNURN2JXoB
L/9SRAphLp2oLSdPP3BWqOzvjue5hLk8QQZg1CwhggL3gIJZN/8FsxiAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlIkjG41cRChKhBr0uXF4pRF7yxMB8GA1UdIwQY
MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt
NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk
LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLKNSQcM
dHhebdjjOSvRPkLmRebND0t8V2OKgFt3JDYDH6bEvavd+dtrUuUAe/1Y6OenfUEo
OtAhlW4Bxs7gvToV9PbROPgi7xaOM7vO9EdkRT5CjvHqYcLkw6FvkdR1yLXFX6GH
sQffUXvVwQLzgLtLsrDtRil0SHYU5uYnsMLZqdomIC1Km1j5lpZlgLFXqwt5W8Um
um/jBVFbLYcP0ZADTxX3WviKBYFLE/NIegAv/1zHlm3rvVGSqdkmaQiziA9AsjTc
yrBKzWuqc0nzk9Ywj+NWW05ESogcEyZwD5Ivk5IJjNtxJWm/SR5j0EZqfPQtB/hn
mSQbpGXMVyoYIQ==
-----END CERTIFICATE-----
Generated at Fri May 3 01:54:15 2024 by rpki-client on console-ams.rpki-client.org