Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: vu/3EoGwtKsTtOwT1MNHMStfi8EWKVoLqARHAveyKxE=
Subject key identifier: A7:63:48:36:64:06:24:7C:29:6C:14:54:41:51:5D:0F:8A:6F:76:62
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019679447602184E4FDC3CE8DEA68971F667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0D7F
Signing time: Sun 27 Apr 2025 22:00:51 +0000
Manifest this update: Sun 27 Apr 2025 22:00:51 +0000
Manifest next update: Mon 28 Apr 2025 22:00:51 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: WHnxRbeoXl8QUwAawH2T2wJA85sDAH/OXF1aFvVHlU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:76:02:18:4e:4f:dc:3c:e8:de:a6:89:71:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Apr 27 22:00:51 2025 GMT
Not After : Apr 28 22:00:51 2025 GMT
Subject: CN=a76348366406247c296c145441515d0f8a6f7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:93:ab:ef:52:60:90:85:68:bd:74:78:90:
83:ad:52:53:89:b8:40:fe:62:32:9f:38:30:cb:48:
51:cd:69:d5:a4:93:4d:b9:10:ca:07:f0:64:78:f9:
2c:85:b9:ec:8d:d2:6a:68:1f:7a:ed:7c:cc:cc:50:
12:b4:9a:68:b0:ad:21:71:59:03:f3:1f:16:5d:70:
0f:70:ff:64:b9:85:76:b0:df:ca:d4:b3:38:71:4c:
f8:2c:8a:9e:11:65:c1:e9:7d:55:7d:e3:97:be:41:
f4:00:94:fa:8f:ba:d3:b7:74:25:1d:ab:6b:f9:d9:
92:f8:12:b9:68:91:db:81:20:20:82:67:f8:5b:2f:
7d:45:66:45:fa:ff:60:59:8e:8f:36:bc:8f:b7:f1:
a8:8b:71:d7:55:b2:0f:17:77:14:b7:f5:9e:d0:66:
1e:99:8a:f5:43:0f:fa:fe:e4:e9:6c:56:13:21:e7:
d9:45:10:9d:6b:44:46:3c:b9:9b:ca:10:42:ab:e1:
f2:ff:14:a1:4d:15:fd:67:e9:f5:f0:45:1d:13:22:
ec:44:2f:05:b7:5d:90:79:b1:4e:b5:27:29:d4:32:
d0:84:c5:ba:f0:9c:2d:16:25:20:48:9a:63:1e:29:
66:ec:fa:26:3a:42:bd:76:c3:cf:2c:6d:62:0f:95:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:48:36:64:06:24:7C:29:6C:14:54:41:51:5D:0F:8A:6F:76:62
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2c:84:23:fe:4c:59:4d:9c:cf:0e:51:27:34:fc:84:ab:d7:
f1:a1:cf:2e:d2:46:18:dc:12:e9:84:c7:f0:0e:9a:d3:d3:32:
96:c9:b8:a8:fb:91:1f:e0:26:72:3a:54:e2:ea:7b:dd:c9:ee:
fb:c2:83:f5:c6:50:87:4d:a8:ff:66:11:82:c2:35:60:2f:0b:
8f:fd:32:02:2c:48:81:b1:af:e2:7e:e0:ff:3a:1e:af:1c:3d:
b2:2d:e8:ae:7f:5c:a6:e3:2f:23:87:5c:ab:45:d2:23:19:5e:
8e:16:c3:00:4f:25:27:20:f3:82:18:48:0e:34:35:87:91:4b:
86:0b:c8:51:57:27:8a:05:4b:aa:4b:44:2b:ab:7b:60:97:66:
b9:72:85:e6:28:4d:f6:af:30:5f:1c:fb:f8:c2:42:19:87:13:
ae:6f:5f:8c:f7:9b:a1:83:16:d9:62:e8:d0:3b:b9:b0:1f:f1:
38:42:b6:f9:11:69:d3:b8:7e:ae:e5:4f:c4:bb:5b:56:d6:7c:
db:81:6c:a5:b1:72:78:5f:3d:b3:e5:b7:49:54:40:c6:3d:b3:
b9:e3:81:aa:95:b0:9d:a9:f8:e3:4d:fd:9d:28:04:fe:24:e7:
07:56:55:ad:78:98:fd:b3:a8:78:41:f2:c9:0e:4c:6f:1a:11:
fb:fb:33:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RHYCGE5P3Dzo3qaJcfZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwNDI3MjIwMDUxWhcNMjUwNDI4MjIwMDUxWjAzMTEwLwYDVQQD
EyhhNzYzNDgzNjY0MDYyNDdjMjk2YzE0NTQ0MTUxNWQwZjhhNmY3NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU6Tq+9SYJCFaL10eJCDrVJTibhA
/mIynzgwy0hRzWnVpJNNuRDKB/BkePkshbnsjdJqaB967XzMzFAStJposK0hcVkD
8x8WXXAPcP9kuYV2sN/K1LM4cUz4LIqeEWXB6X1VfeOXvkH0AJT6j7rTt3QlHatr
+dmS+BK5aJHbgSAggmf4Wy99RWZF+v9gWY6PNryPt/Goi3HXVbIPF3cUt/We0GYe
mYr1Qw/6/uTpbFYTIefZRRCda0RGPLmbyhBCq+Hy/xShTRX9Z+n18EUdEyLsRC8F
t12QebFOtScp1DLQhMW68JwtFiUgSJpjHilm7PomOkK9dsPPLG1iD5V1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdjSDZkBiR8KWwUVEFRXQ+Kb3ZiMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyyEI/5M
WU2czw5RJzT8hKvX8aHPLtJGGNwS6YTH8A6a09Mylsm4qPuRH+AmcjpU4up73cnu
+8KD9cZQh02o/2YRgsI1YC8Lj/0yAixIgbGv4n7g/zoerxw9si3orn9cpuMvI4dc
q0XSIxlejhbDAE8lJyDzghhIDjQ1h5FLhgvIUVcnigVLqktEK6t7YJdmuXKF5ihN
9q8wXxz7+MJCGYcTrm9fjPeboYMW2WLo0Du5sB/xOEK2+RFp07h+ruVPxLtbVtZ8
24FspbFyeF89s+W3SVRAxj2zueOBqpWwnan44039nSgE/iTnB1ZVrXiY/bOoeEHy
yQ5MbxoR+/szlw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:49:59 2025 by rpki-client