Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: AsGLT9IeD25kwDK6gV1eT9zhacp+vgIhDnZJYrr3vj0=
Subject key identifier: F2:CF:BB:C5:66:76:38:90:28:28:C0:32:2D:84:54:6E:B5:A2:56:9F
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 019682EBF38FE80A87BD1A74A535959442E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 08D5
Signing time: Tue 29 Apr 2025 19:00:23 +0000
Manifest this update: Tue 29 Apr 2025 19:00:23 +0000
Manifest next update: Wed 30 Apr 2025 19:00:23 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: W0ev4N+AbkhTpsQVEbDoiakZtQ0LtUk4kllSE3RfsME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:f3:8f:e8:0a:87:bd:1a:74:a5:35:95:94:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Apr 29 19:00:23 2025 GMT
Not After : Apr 30 19:00:23 2025 GMT
Subject: CN=f2cfbbc5667638902828c0322d84546eb5a2569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:52:2c:1f:6d:9f:82:90:fb:a0:43:67:df:
cd:90:cb:1f:b1:45:bd:df:27:1f:0e:33:f9:7c:ab:
4e:92:97:06:0a:e1:57:1a:6e:5e:0f:79:59:da:ec:
7c:93:14:ba:14:9d:a4:5e:4b:c8:3d:4e:82:3b:8a:
44:26:fc:41:e4:2d:71:0b:eb:33:4f:e0:7b:b4:b7:
40:62:01:04:d3:73:f6:c9:7f:78:a4:bb:18:30:2a:
d1:dc:ef:8e:5e:40:43:f7:86:fa:6d:14:02:61:77:
f1:79:f6:36:68:85:76:30:0f:34:30:3b:6d:9d:58:
97:82:d1:0c:b7:5c:db:8f:63:c2:4e:1a:98:13:ab:
bb:fb:f1:65:f3:90:9d:d0:00:24:97:84:5c:09:42:
57:89:21:7b:25:f1:ea:5c:ea:9a:0f:b2:17:2a:62:
1d:e3:29:52:4d:92:27:ec:78:c3:c9:9e:6d:4d:e7:
e7:38:a6:9a:e1:09:39:64:31:d1:d2:f5:6e:82:c0:
b7:8d:68:00:60:6f:89:6f:39:b1:b3:68:85:0d:c5:
06:18:e6:21:c9:ca:20:c8:5a:d1:ca:eb:fb:10:3a:
af:53:c7:b2:7b:c6:a4:56:88:2f:71:cc:c0:c0:8c:
90:d4:41:10:43:dd:d7:17:38:5c:b5:d4:54:f3:f6:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:BB:C5:66:76:38:90:28:28:C0:32:2D:84:54:6E:B5:A2:56:9F
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:19:05:58:3e:00:f6:0a:f7:53:2e:28:6a:bb:d5:c9:32:
98:57:cf:77:63:df:ac:f1:20:d0:af:46:36:53:4a:0a:0e:f9:
85:fe:ed:23:3b:39:28:f2:60:16:7e:7d:1e:4b:1e:7b:6e:fa:
d9:db:44:79:bd:29:af:07:86:88:af:50:bf:f0:45:7b:b8:3f:
b2:7e:4b:15:2b:fa:8f:0a:60:1e:23:c0:60:36:67:b7:2c:79:
70:f5:49:db:45:13:2f:09:67:21:da:26:09:85:e4:d5:42:01:
b2:e7:8f:a4:e0:19:34:c0:97:f6:05:1e:0d:c7:13:dd:8b:91:
80:c8:df:5e:39:8a:ca:9a:27:5d:5a:ba:76:e8:6c:e0:3c:4f:
19:e8:13:5f:51:1e:1e:ef:d8:ce:c3:55:96:0c:b8:4f:a8:66:
6e:c8:e2:ca:6d:1f:66:0f:3f:04:5c:5b:92:ee:61:c0:e2:b9:
81:88:49:06:4c:23:38:b2:cc:f3:b2:fc:2f:3b:61:3c:70:23:
ec:2c:78:14:4d:30:d4:1f:b1:87:fa:f8:a8:77:4e:30:f9:35:
be:98:23:f3:eb:1b:37:13:f0:1f:bb:53:87:5a:90:f6:d3:ac:
0e:b4:56:54:6e:6e:49:27:24:9c:3a:7c:ec:86:17:23:0f:77:
51:89:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:36:19 2025 by rpki-client