Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: /QzMdBQT2hW2dOaCiye5jNeD6OgsyU/0hfJ81L1nGu4=
Subject key identifier: A4:DE:21:FB:C3:F1:51:7C:05:B1:0C:E4:D8:44:87:95:F6:1A:73:21
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 0196748BCB473172EABE1151FB8E15CAF309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 038F
Signing time: Sun 27 Apr 2025 00:00:40 +0000
Manifest this update: Sun 27 Apr 2025 00:00:40 +0000
Manifest next update: Mon 28 Apr 2025 00:00:40 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: imbmbOQ5bMwEdgsQ7XllzD6oO7uE24Cbx1Xj3DlKxMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:cb:47:31:72:ea:be:11:51:fb:8e:15:ca:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Apr 27 00:00:40 2025 GMT
Not After : Apr 28 00:00:40 2025 GMT
Subject: CN=a4de21fbc3f1517c05b10ce4d8448795f61a7321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:64:6d:97:68:12:2b:45:53:2a:9b:17:04:
27:bd:d1:23:f9:db:0a:64:09:77:bd:89:51:aa:93:
84:80:98:eb:c0:9d:ba:c9:a8:2b:d6:d9:94:5b:ad:
05:f9:74:1d:3a:2c:ea:a8:af:7b:b9:c4:9e:0e:95:
ea:ee:b8:74:f3:b2:34:13:dc:be:eb:19:42:e5:7b:
cb:8c:a6:87:dc:e3:58:30:6a:1b:a5:d8:ca:e7:fa:
95:a4:30:f4:3f:1f:f4:e4:8c:8a:4c:03:27:40:64:
ca:df:d1:d3:1f:87:da:d5:f9:5b:d5:7c:28:84:21:
ab:e2:01:bf:9d:8d:d3:73:38:be:c4:1e:82:3a:a9:
db:e0:6e:15:77:f8:70:0e:c5:db:03:a9:fb:8f:d6:
c0:f5:b3:77:74:79:00:ff:40:4e:4b:86:f8:17:e1:
2f:9a:3f:52:bb:a9:54:32:5e:8a:a5:3b:5d:53:b4:
96:b2:f1:cc:52:81:f9:5f:f5:09:82:6a:1e:0f:ab:
96:2b:15:b4:6b:78:62:16:98:42:58:a9:30:90:4c:
cc:ad:85:84:8a:2f:2c:25:b3:a9:54:41:dd:fa:ed:
5d:2a:16:b2:9a:52:12:7e:5b:6e:e9:1e:85:05:fd:
bf:e9:1b:e2:b4:9b:04:22:cf:50:c9:16:6a:b7:dd:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:21:FB:C3:F1:51:7C:05:B1:0C:E4:D8:44:87:95:F6:1A:73:21
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4c:dd:ae:e2:d7:63:ea:ed:40:3c:f1:d4:f6:ea:dc:4f:11:
15:fe:08:8a:00:bd:75:8b:13:5d:7f:8d:f9:ef:e6:72:6c:30:
f3:31:fa:bb:3f:d8:be:f6:27:6d:b4:bf:d6:52:7f:0d:d4:24:
72:35:89:21:b7:5b:61:d5:e4:3c:1a:e1:eb:54:07:06:ad:97:
d5:ba:81:f6:a0:77:e6:98:dc:75:2a:c5:20:9a:ad:4e:59:d3:
37:e1:a7:3d:39:87:25:75:8e:ed:ab:1f:32:c5:46:c2:ed:d3:
e5:2c:83:09:60:ba:c8:96:e1:df:77:99:d1:f2:9e:c6:b2:a2:
00:47:df:ec:13:92:e3:d8:18:d5:07:ef:94:82:6e:c4:0b:c9:
45:54:72:51:e0:f3:91:e0:d8:ab:a5:39:bd:9c:2b:6a:25:c9:
c6:6a:c4:59:90:b9:5c:30:d0:59:b0:d3:d6:27:d0:6a:05:a6:
09:7b:c7:a8:40:0f:36:87:ec:e8:17:d5:3c:2d:54:21:bb:4e:
43:3f:b0:2e:64:d5:14:76:96:21:b8:05:61:b1:21:c2:6a:86:
92:4e:da:98:e8:86:27:80:8c:6f:2a:39:3d:73:08:7c:e1:aa:
b1:b6:67:af:5d:92:a4:d7:32:ae:53:f0:93:42:d3:78:fe:0c:
9f:ee:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:48 2025 by rpki-client