Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: MLNJ9l1hjuGxJkXRhf58+CtH23LlPIwcJp3jvnPgCn8=
Subject key identifier: 36:43:DA:3F:8F:38:C4:40:94:1B:D1:3A:DF:EE:CE:A8:AE:18:34:01
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 019849D350E1291ECF6198B3941304E76E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 0482
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: Qts0Z+x/NQHOeXFlhB0H2D366gOcbA9snSV3KoRaRQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:50:e1:29:1e:cf:61:98:b3:94:13:04:e7:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=3643da3f8f38c440941bd13adfeecea8ae183401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:c0:94:0d:ad:28:27:f3:14:84:07:65:6d:
4b:3e:59:83:8f:06:b2:f4:cf:72:38:7c:c8:dc:5a:
1a:35:1a:76:81:7b:71:da:b5:55:a1:1a:1b:e3:26:
26:49:66:1a:6f:56:69:f5:aa:5a:d9:f5:40:8c:6d:
f3:e7:ee:43:7e:59:f3:41:62:ea:64:ad:4f:76:73:
d5:65:2a:4f:c0:e3:f3:66:a6:0d:aa:0c:da:47:40:
44:90:cf:b5:b4:33:8f:39:43:6f:54:ec:97:69:df:
d1:6d:89:2e:c0:17:79:ac:0d:e3:75:56:a5:ff:f2:
d2:66:6d:5d:47:89:81:0c:bf:04:0a:97:cf:b3:95:
80:27:f1:ed:ac:3a:dd:f0:78:80:bb:cf:0b:c4:44:
54:d7:07:9b:8a:7b:1b:f9:d4:bd:67:7a:2d:34:f1:
27:f7:79:37:7f:a5:3d:38:e7:b6:f4:b0:f6:11:74:
78:ab:30:f3:6a:e2:6b:19:ac:96:0c:da:fb:62:a4:
68:5f:19:24:e4:e1:89:86:45:dd:8a:a4:4b:2b:f3:
e1:58:36:ca:32:53:8e:c1:48:98:b4:d6:0a:25:95:
e1:28:47:c9:70:e8:64:fb:6d:a3:bf:b3:44:8a:56:
60:21:1c:2b:75:09:0a:57:e5:1e:b2:4f:4c:bc:00:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:DA:3F:8F:38:C4:40:94:1B:D1:3A:DF:EE:CE:A8:AE:18:34:01
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:eb:a7:a9:4d:dc:4a:28:a7:01:f6:8d:91:f7:4c:ce:83:
cf:9c:85:0b:ae:c3:cc:e0:0f:79:29:91:75:44:b2:55:29:2b:
ee:c5:a1:66:69:4c:cf:ac:5d:0a:55:e1:d9:0c:0b:55:2e:e1:
d3:b9:a8:38:61:b3:1b:bb:79:9d:8b:91:9d:15:44:e2:54:80:
d6:c4:cd:7a:37:44:1b:ec:75:78:ff:4b:e1:69:9e:b6:15:11:
3e:c5:a2:0b:9e:b6:b9:3e:25:d3:54:c3:af:8e:5a:68:60:56:
90:cb:86:d8:0f:14:74:4a:1f:d7:cb:57:c7:12:e2:2b:83:fb:
c9:f6:a5:80:f1:b4:2e:6f:c9:ff:bb:62:10:0c:29:d3:11:b1:
27:7a:65:2d:60:64:89:3f:0a:89:7e:43:60:ed:1b:2f:eb:73:
4b:77:1d:46:ee:4e:65:62:35:15:7f:92:77:2f:2f:8c:ac:92:
be:25:4f:81:d6:ec:29:79:a6:8a:b6:e3:c5:0a:b3:6b:be:37:
1c:95:53:36:b3:bc:ed:61:70:e4:71:de:5b:0f:8f:b4:7d:23:
08:f0:c7:ad:66:cf:43:ff:fe:c0:28:9a:52:33:53:fb:88:f0:
76:42:65:81:70:be:38:86:7b:04:fe:fc:48:7d:ed:3a:27:91:
1a:f7:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:08 2025 by rpki-client