Manifest
$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File: 861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier: 6FdkAcBqP15l9T9z7a2blagfqAhJgFAF1h8MIA0ryKc=
Subject key identifier: 8D:8C:3A:22:0F:47:DB:59:62:7B:D1:02:BD:11:40:AF:62:38:43:80
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer: /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial: 3C2F51668469867D89D46FAD1E8827F7E8532C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number: 0679
Signing time: Fri 13 Jun 2025 14:12:48 +0000
Manifest this update: Fri 13 Jun 2025 14:07:48 +0000
Manifest next update: Sat 14 Jun 2025 16:36:48 +0000
Files and hashes: 1: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
2: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: qtLYGhQP9IrEaPzkXBcGqoWDhlhem2nAzqyhprjUvSw=)
3: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
4: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
Validation: OK
Signature path: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2f:51:66:84:69:86:7d:89:d4:6f:ad:1e:88:27:f7:e8:53:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
Validity
Not Before: Jun 13 14:07:48 2025 GMT
Not After : Jun 14 16:36:48 2025 GMT
Subject: CN=8D8C3A220F47DB59627BD102BD1140AF62384380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:fe:54:92:4d:96:47:2d:43:5b:d8:69:6c:
60:aa:1b:12:b0:88:2e:7b:4c:0a:8c:01:36:46:ce:
1f:f2:50:81:70:b3:24:14:96:41:e8:81:29:98:33:
12:ec:cc:29:89:bd:2c:4c:57:c6:0e:dd:43:37:f2:
7e:fb:93:ef:27:ba:75:26:4b:c7:bf:c7:64:ef:a9:
7a:aa:58:2d:4e:b5:de:b7:0b:a9:ce:f7:ce:e0:de:
6c:34:5d:89:70:7c:85:64:bc:36:4b:2e:45:39:ff:
18:52:4c:99:21:84:e0:7c:c0:43:ab:02:4c:ef:21:
36:d0:e6:96:20:70:fd:92:38:8d:4e:37:5f:7a:8b:
7a:bd:90:c7:59:24:34:1e:34:fe:91:b1:f1:62:02:
a4:9a:32:82:64:f9:ab:a7:d3:9d:22:a7:6f:a2:6f:
2d:45:15:13:e5:76:1b:d5:c7:10:85:1d:93:f9:ed:
5b:0d:a7:6e:51:f7:67:40:ab:0d:cc:a4:09:0d:07:
4c:e8:fa:b5:e9:03:83:9c:97:ab:98:32:fe:3b:f7:
99:4c:25:28:8f:e6:36:bc:a3:d6:46:ba:e5:cf:cc:
31:c0:3f:bc:df:7a:76:92:79:94:e6:1d:d8:42:87:
63:90:a7:37:84:48:ed:88:d4:7d:54:e5:c6:8f:32:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:3A:22:0F:47:DB:59:62:7B:D1:02:BD:11:40:AF:62:38:43:80
X509v3 Authority Key Identifier:
keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:2e:d4:7a:76:2f:1f:0d:85:37:f4:9b:ae:6c:1f:c7:d3:
ad:a2:48:87:be:78:cd:81:0b:b6:15:19:2d:1e:49:a9:85:24:
9f:91:79:7e:30:9d:92:1c:da:76:fa:35:15:6c:f1:26:14:41:
1d:e2:0c:c4:dc:d5:36:17:1b:b8:93:3c:65:95:38:7d:08:2b:
41:e0:7c:fa:1e:f9:8b:cd:19:85:8c:2e:b4:87:7e:f6:b7:50:
85:99:50:ec:38:5c:db:5e:8d:fb:22:68:e5:9a:97:4b:ea:9a:
72:fa:ba:7c:00:9b:dd:34:4f:af:3e:56:91:e5:79:0c:2d:8e:
6d:d4:76:5c:68:8e:6e:f8:fe:d1:f7:6f:c4:cb:95:8d:50:2e:
0f:c8:5e:27:c1:f5:00:df:bb:e8:63:f7:4a:24:66:d2:5f:43:
9c:8c:36:55:e4:a5:ce:fc:3c:9b:b5:88:e4:4a:a6:b8:6f:b6:
cc:06:a0:f4:41:f1:b1:78:86:c7:80:3d:dd:1a:d5:73:5a:12:
fd:de:0a:38:fc:b0:b1:8a:42:94:8f:14:69:67:43:99:b2:30:
c2:38:f7:34:65:9c:57:e1:48:3a:fb:9d:9f:e1:6b:76:75:94:
78:5e:0e:69:8a:92:dc:da:8b:f6:6c:b2:fd:23:1d:9c:f8:7e:
68:40:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:27 2025 by rpki-client