Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: orZqAwpYCEGzx1DU32AIoKbLETn8zZyZt9sG84NepZA=
Subject key identifier: EF:7B:8E:63:04:94:E7:91:06:83:86:F4:F4:E9:FB:E0:AB:5F:EE:05
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 0197711A61056E9EC28896C1F2EBD6E17ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0C0C
Signing time: Sun 15 Jun 2025 01:00:43 +0000
Manifest this update: Sun 15 Jun 2025 01:00:43 +0000
Manifest next update: Mon 16 Jun 2025 01:00:43 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: m4ERkLftIuvYQYNNPL2wha6nbx927qxogGwkkjj0REs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:61:05:6e:9e:c2:88:96:c1:f2:eb:d6:e1:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Jun 15 01:00:43 2025 GMT
Not After : Jun 16 01:00:43 2025 GMT
Subject: CN=ef7b8e630494e791068386f4f4e9fbe0ab5fee05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:60:ba:a1:0a:76:35:2c:bd:b6:cb:32:74:
38:13:7d:d1:43:f7:37:8e:fa:3f:51:3d:59:f6:a0:
f0:cf:46:8e:ed:7e:fb:89:40:66:9d:3f:92:fc:44:
b6:ba:1b:0a:81:52:2f:52:18:08:bc:f5:6b:26:e7:
6b:3d:22:23:e6:79:4c:93:40:ac:ed:2b:7e:84:2f:
16:59:d3:f5:2f:5f:60:56:3a:a8:bd:f9:25:8c:39:
97:27:a4:e3:45:19:a3:2f:58:78:1b:7c:72:1a:f5:
1f:9a:4b:aa:f0:8c:6a:95:5b:26:c6:0b:7a:9f:59:
2d:d2:34:c6:4b:71:c0:08:37:69:1f:bf:38:68:0c:
f8:44:ba:ce:3b:7d:ff:5b:f6:3d:c9:25:48:cf:70:
1e:c7:52:48:31:0a:c1:11:17:7c:3c:ba:ec:2e:7f:
bf:a3:67:62:cb:c3:a1:66:2d:55:0a:b1:ed:6f:c9:
d5:f0:93:9a:67:6e:27:6c:74:cd:88:c0:16:9d:2b:
7f:13:8c:5d:68:6b:98:e4:20:63:8d:77:e5:0d:87:
fe:d4:89:01:3d:a2:b4:b2:df:eb:62:f4:75:fa:ec:
f2:d6:25:5c:ec:ca:51:eb:39:d0:44:ab:58:40:a1:
31:d4:3d:d6:e5:57:d1:2f:f7:85:7b:6f:c8:42:e0:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:8E:63:04:94:E7:91:06:83:86:F4:F4:E9:FB:E0:AB:5F:EE:05
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:5e:5c:5d:2f:d6:ec:d7:88:87:d9:64:a1:bc:cd:24:c9:
bf:88:44:47:e0:03:d5:fa:c2:5d:6c:bd:d1:5b:b7:22:a4:61:
8f:bf:4a:5f:f9:83:e6:a5:fe:9d:e0:6e:e3:a9:88:76:30:f9:
99:52:37:6a:58:d4:bd:c3:ce:55:0f:03:95:84:ec:4e:34:7f:
97:89:3d:41:bd:35:81:44:1b:4c:73:e4:6b:e7:a0:c5:a0:b0:
e2:e7:0a:0d:47:c4:3f:ef:d8:5c:38:e4:d3:fd:da:9f:2a:09:
7c:ff:cc:cf:96:e2:d9:09:c4:11:b9:ce:4b:b4:01:ef:41:e1:
23:e0:af:3a:3d:2b:42:76:63:d5:92:07:fb:7b:94:87:87:1c:
78:38:b9:c7:f3:c6:87:74:ee:c9:02:dc:0f:96:94:24:43:90:
d9:b0:25:0c:0e:1a:76:b0:20:79:96:d2:fd:5b:67:1d:9d:bb:
89:8c:97:e3:9b:15:1a:c5:80:47:4c:e1:38:77:a2:b2:9d:3a:
3b:f7:f9:d1:6d:d9:82:86:29:76:c2:07:88:9a:5c:9a:98:c5:
98:68:ed:88:c1:8c:c0:56:11:7b:0c:c1:73:15:1c:f9:56:2a:
20:2d:ca:68:2c:24:93:e5:23:55:3c:b3:7f:12:11:55:b4:71:
d8:49:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:57:32 2025 by rpki-client