Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: 6iPvgG3fWOSNuGCeuYXgTgMWKzMgyMGesO2/NbeakZM=
Subject key identifier: FA:61:91:7A:D3:1A:FE:EF:A0:96:83:AB:FC:2E:8A:E6:BF:19:C1:78
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01964F6D42B0B83A8810718B49A70B97BB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:01:22 +0000
Manifest this update: Sat 19 Apr 2025 19:01:22 +0000
Manifest next update: Sun 20 Apr 2025 19:01:22 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: 5g3Sbg2zZbo4oTwLVNkLCTdll782p1dAxA7xshMrlPk=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:42:b0:b8:3a:88:10:71:8b:49:a7:0b:97:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Apr 19 19:01:22 2025 GMT
Not After : Apr 20 19:01:22 2025 GMT
Subject: CN=fa61917ad31afeefa09683abfc2e8ae6bf19c178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c7:73:84:f9:f2:47:d7:5c:7f:39:c8:69:2e:
57:cc:2e:9b:c5:88:22:3e:4a:be:09:69:55:15:0f:
a9:e7:69:47:2e:17:5d:1c:63:2c:58:19:70:8b:ee:
b4:98:d3:39:d5:fe:e3:3d:9e:87:22:c5:c0:8c:7d:
e6:76:ac:d3:20:3a:55:49:d5:78:d3:25:f3:33:a3:
6d:3a:bf:c8:38:31:c4:fb:a3:61:9c:69:9e:81:21:
b3:3d:ba:1c:f8:14:05:7f:1f:39:9c:7a:d4:f6:8c:
8d:31:9d:0c:92:37:8e:f1:26:25:06:8a:01:7a:f2:
94:63:6b:4a:bb:79:64:68:cf:7c:66:a7:da:07:a9:
d6:4e:46:1b:d3:20:11:4b:7b:c3:36:01:02:2d:2c:
84:ea:90:57:70:56:44:c8:64:93:9e:c7:72:2f:cd:
a4:e5:ca:c1:17:1e:b0:30:95:16:78:94:7b:cb:9c:
af:aa:00:5b:82:4d:a9:37:23:49:ed:5e:db:26:c6:
a6:24:6d:27:cd:14:27:4c:c1:30:44:2f:a9:61:c4:
d1:be:b3:47:e2:d7:4e:19:6d:c6:02:bf:aa:d4:ef:
9b:4f:42:da:c1:4b:a1:c8:e4:e5:24:55:3c:c8:cc:
e8:cd:e6:90:82:a6:80:2d:c2:67:6f:57:dd:b7:fa:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:91:7A:D3:1A:FE:EF:A0:96:83:AB:FC:2E:8A:E6:BF:19:C1:78
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:dc:1b:de:a4:47:d1:7a:bf:f7:83:49:cb:64:d9:77:70:
13:7c:b4:83:94:b0:4e:6c:49:a6:ac:a4:03:46:7f:11:85:71:
ce:ee:32:22:d2:71:19:28:98:e2:7d:25:6a:81:ff:85:22:da:
f9:e7:2d:16:0b:a6:09:d8:df:4d:79:5d:c8:ed:2c:ac:f1:34:
7a:59:1c:0b:e8:86:86:b2:11:be:dd:82:95:f2:44:8d:ee:b0:
0b:7a:0e:09:8a:99:b1:6a:c9:6b:4d:3c:b2:d3:68:dc:71:73:
bb:4c:de:7c:3c:8d:39:98:f9:67:5b:a3:98:07:d5:bc:21:35:
ea:29:84:0f:b6:2b:8c:02:7a:b6:0a:6d:fd:33:01:b9:71:2d:
b9:55:fc:6f:88:00:5e:09:e8:45:be:68:a8:47:5f:28:ad:d6:
40:05:30:2a:d8:5d:f2:c9:33:62:6b:9e:db:2c:6a:9d:ab:af:
3b:74:ec:3c:05:2a:a8:54:cf:fa:64:1e:34:fc:5d:17:2e:d3:
32:4c:cf:31:66:a8:b5:d5:38:00:7d:68:4c:38:fd:da:86:11:
38:9a:8a:09:96:f9:fb:75:a9:25:e5:e3:d7:00:82:1e:b3:1b:
89:4c:a9:fe:ba:5b:a3:38:d6:77:75:8b:51:36:57:6c:31:82:
5f:db:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:32 2025 by rpki-client