Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier: N7lvEWOm8xRBIZh3HVHzMCYs3qgArMaLv+axIFrSEk8=
Subject key identifier: 94:46:49:5F:E8:96:36:02:69:17:05:FF:A9:E1:B2:8E:9B:8A:F2:3C
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer: /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial: 01967AFBC92DEB628221EC1594E2C428D31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number: 0167
Signing time: Mon 28 Apr 2025 06:00:43 +0000
Manifest this update: Mon 28 Apr 2025 06:00:43 +0000
Manifest next update: Tue 29 Apr 2025 06:00:43 +0000
Files and hashes: 1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: iGe7EZrJ/fjJI/Nc9T6ELJl0uYFIRbtDMNLM8Z+OJ+4=)
2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:c9:2d:eb:62:82:21:ec:15:94:e2:c4:28:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Validity
Not Before: Apr 28 06:00:43 2025 GMT
Not After : Apr 29 06:00:43 2025 GMT
Subject: CN=9446495fe8963602691705ffa9e1b28e9b8af23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:7d:ae:8a:07:ba:1a:53:1f:50:f4:42:aa:
b3:82:fe:3c:73:1e:d6:ef:54:ce:d0:42:70:0b:9b:
7a:ee:9f:42:3a:cb:8e:e0:22:ea:69:62:65:e7:10:
19:00:05:33:d5:4a:dc:68:18:ab:7b:b9:75:6c:d8:
54:d8:48:7d:53:82:e1:d8:8d:7e:ab:a0:47:9b:5f:
b5:87:47:cc:bb:db:aa:bb:c8:9f:c4:60:11:f2:c1:
1a:e8:2e:81:36:ea:35:41:08:c9:92:8f:9a:75:a0:
bc:6f:9e:90:03:85:8e:c2:49:5e:09:ae:bc:2a:e1:
ff:d4:c0:6a:e3:88:c4:32:eb:1c:7e:8b:69:47:0f:
e4:9b:28:c8:4b:9c:8e:00:9e:3b:9c:63:f1:fa:f7:
b7:a0:16:d7:ab:51:15:7b:ae:18:14:44:e2:6b:c1:
bc:64:7a:00:55:77:24:48:58:87:46:fe:78:df:db:
78:94:bc:9d:a6:27:39:2b:43:96:af:36:5e:1a:1d:
f8:e8:4c:98:bf:85:68:a8:68:22:b6:e4:a4:47:33:
3e:35:9a:31:f9:84:65:68:d1:f9:54:d3:f5:4f:dc:
f4:9a:91:4a:d1:42:86:6b:84:ba:b5:33:f0:f0:7a:
20:da:db:11:70:6c:00:78:cd:f1:fb:17:46:58:06:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:49:5F:E8:96:36:02:69:17:05:FF:A9:E1:B2:8E:9B:8A:F2:3C
X509v3 Authority Key Identifier:
keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:08:93:70:df:7b:d2:4d:9f:b9:8a:19:96:0c:10:09:0b:08:
1f:b1:ef:e7:34:11:39:97:0b:a9:ce:8b:72:a9:b2:78:36:3c:
1a:e4:de:43:83:19:81:6c:d1:65:b8:89:52:88:70:eb:8e:59:
be:f2:01:12:5c:e6:f0:de:a8:bb:5e:50:cb:5d:d1:98:ac:61:
fe:fa:75:ce:7d:2b:12:36:77:66:88:79:2b:5b:87:9a:43:12:
45:84:31:5c:eb:45:76:b4:d7:3c:4c:dc:26:88:cc:e0:8a:dc:
8a:1b:04:a6:1c:d0:02:a5:ea:5d:7c:53:2a:9d:16:cf:d4:47:
db:3d:85:a2:f4:0f:9b:4c:d0:f5:02:67:01:93:3b:50:20:74:
e2:6a:4a:f1:6d:eb:65:0c:d0:9a:b3:db:48:9b:7d:37:68:ac:
44:7a:0e:16:6c:97:78:79:13:74:c4:14:54:4c:f8:37:84:f6:
39:52:56:85:27:25:0c:2b:35:4a:56:85:51:1b:32:4c:b1:1a:
ed:96:28:d1:ca:8e:b3:62:a7:96:f0:ca:bc:e6:7b:d1:25:4e:
3c:ee:fc:54:db:80:23:ba:f5:fa:e5:69:9a:1e:ac:b6:55:a2:
b5:bc:f2:83:58:f3:8b:96:92:63:34:11:0a:ca:66:da:8a:43:
ad:c7:26:8e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ6+8kt62KCIewVlOLEKNMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MjA3NTViZjY3YmE3ZDdiNGQzZDAwMTAyNzYwNGVhMjli
MjNlZDEwHhcNMjUwNDI4MDYwMDQzWhcNMjUwNDI5MDYwMDQzWjAzMTEwLwYDVQQD
Eyg5NDQ2NDk1ZmU4OTYzNjAyNjkxNzA1ZmZhOWUxYjI4ZTliOGFmMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUh9rooHuhpTH1D0Qqqzgv48cx7W
71TO0EJwC5t67p9COsuO4CLqaWJl5xAZAAUz1UrcaBire7l1bNhU2Eh9U4Lh2I1+
q6BHm1+1h0fMu9uqu8ifxGAR8sEa6C6BNuo1QQjJko+adaC8b56QA4WOwkleCa68
KuH/1MBq44jEMuscfotpRw/kmyjIS5yOAJ47nGPx+ve3oBbXq1EVe64YFETia8G8
ZHoAVXckSFiHRv5439t4lLydpic5K0OWrzZeGh346EyYv4VoqGgituSkRzM+NZox
+YRlaNH5VNP1T9z0mpFK0UKGa4S6tTPw8Hog2tsRcGwAeM3x+xdGWAb0AwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJRGSV/oljYCaRcF/6nhso6bivI8MB8GA1UdIwQY
MBaAFPkgdVv2e6fXtNPQAQJ2BOopsj7RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1TQjFXX1o3cDllMDA5QUJBbllFNmlteVB0RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZm
LTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFCQW5ZRTZpbXlQdEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0LzZiN2MzZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZm
ZDcvMS8xLVNCMVdfWjdwOWUwMDlBQkFuWUU2aW15UHRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQiT
cN970k2fuYoZlgwQCQsIH7Hv5zQROZcLqc6LcqmyeDY8GuTeQ4MZgWzRZbiJUohw
645ZvvIBElzm8N6ou15Qy13RmKxh/vp1zn0rEjZ3Zoh5K1uHmkMSRYQxXOtFdrTX
PEzcJojM4IrcihsEphzQAqXqXXxTKp0Wz9RH2z2FovQPm0zQ9QJnAZM7UCB04mpK
8W3rZQzQmrPbSJt9N2isRHoOFmyXeHkTdMQUVEz4N4T2OVJWhSclDCs1SlaFURsy
TLEa7ZYo0cqOs2KnlvDKvOZ70SVOPO78VNuAI7r1+uVpmh6stlWitbzyg1jzi5aS
YzQRCspm2opDrccmjg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:54:41 2025 by rpki-client