Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: sbHkK6gTPeI2+Fajfy1wd4jGybASjohix2ShExZ2gxs=
Subject key identifier: 36:49:BA:F7:9B:BC:15:BB:0E:9C:2A:66:1C:45:40:4A:2A:CF:8B:B9
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 01976C98EE5F0A7ED040C9501D045B880D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 094E
Signing time: Sat 14 Jun 2025 04:00:51 +0000
Manifest this update: Sat 14 Jun 2025 04:00:51 +0000
Manifest next update: Sun 15 Jun 2025 04:00:51 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: yiEMyegn/tHiLR7BO0vdAvebhMsL0UBesOG12x/4K2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ee:5f:0a:7e:d0:40:c9:50:1d:04:5b:88:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jun 14 04:00:51 2025 GMT
Not After : Jun 15 04:00:51 2025 GMT
Subject: CN=3649baf79bbc15bb0e9c2a661c45404a2acf8bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:1c:51:dc:5f:9c:7f:b5:1e:8e:1c:93:9c:
f9:2c:8b:ff:55:a3:a4:2c:a6:6b:22:8f:8f:f5:b4:
a7:e5:54:cf:80:d3:32:fc:45:97:07:b0:7e:71:41:
8f:c3:7f:49:98:b3:81:83:08:ec:51:5c:62:54:b7:
eb:13:98:8a:46:bf:04:de:33:ff:36:87:e5:76:65:
49:3c:e6:23:74:b1:64:aa:e5:19:16:f1:f0:31:48:
a9:a7:9e:1e:da:d4:67:6d:c1:42:d1:c8:e1:64:ba:
53:f9:9c:c2:4e:b2:50:02:5b:1a:af:33:53:07:60:
84:15:79:57:19:21:0d:b0:d1:65:41:38:a4:05:c2:
ff:ef:93:2f:16:48:46:f0:99:1b:27:e4:85:37:6e:
2c:75:fe:44:c9:ef:b4:35:14:a8:2e:15:a5:e1:f9:
8e:3a:b0:e6:ee:48:21:17:24:98:d0:6b:89:a1:34:
88:66:be:5e:22:3f:bb:3c:b6:3f:71:6a:e7:ee:54:
5d:89:d3:9e:ba:13:18:6b:23:27:62:91:6c:6b:a8:
09:f8:9f:81:ee:b3:2f:42:66:e6:f6:31:27:c1:f1:
f3:ae:4f:75:34:52:77:52:bf:2a:78:be:bb:0a:fd:
a6:fe:1a:55:6f:ac:06:74:b3:3a:9e:f9:aa:82:77:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:BA:F7:9B:BC:15:BB:0E:9C:2A:66:1C:45:40:4A:2A:CF:8B:B9
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:52:3b:ed:a5:dc:cd:2f:32:81:18:c0:4b:33:99:97:42:
69:5a:3a:9d:d1:57:a1:ce:7b:6e:81:df:48:8a:39:99:a2:8e:
63:0b:88:ea:09:33:1c:e3:58:fd:8a:49:6c:90:21:7d:a0:ec:
f5:07:27:69:cc:9e:2d:30:c0:db:8b:09:3c:71:f5:76:6e:1e:
de:87:ad:fa:93:95:98:77:4d:ef:00:d4:aa:6f:dc:21:c9:e1:
1b:40:03:0c:39:0a:ef:55:b0:a9:ff:e8:76:d1:87:22:a8:82:
21:1f:dd:bc:40:63:bf:56:f0:f0:2a:69:83:42:ee:3e:85:6b:
86:3d:7f:c6:79:2a:97:6a:5f:db:d8:25:85:95:ab:4c:a5:8e:
3b:e0:bd:03:e2:53:97:e4:7a:a7:d1:37:ce:3a:c1:2e:29:c1:
aa:4c:d0:d3:80:d7:14:21:3a:aa:86:cb:92:3f:5f:fa:c6:b3:
b1:f1:0d:fe:4e:97:7d:28:61:0e:89:d2:5d:aa:21:bb:ae:a7:
04:00:75:41:74:79:47:33:ea:88:56:7b:05:09:a4:d1:dc:ff:
bd:9e:b2:89:94:7e:e5:23:75:21:e9:d7:ef:7e:94:08:7b:49:
3e:0f:93:30:b0:b7:d2:3a:0e:4e:78:d9:58:27:86:70:e0:84:
2f:9b:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:39 2025 by rpki-client