Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: WgEhkOZSVGhj3AgF1/X/Gwo7VL1XGbeUU2vJcHuHzjQ=
Subject key identifier: B6:11:BB:B2:83:03:DE:E9:57:1D:36:51:E6:7A:1F:A5:AA:E4:BA:72
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019844E3ABBAFC7CABC55200E02B7C88AA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0E6D
Signing time: Sat 26 Jul 2025 04:00:27 +0000
Manifest this update: Sat 26 Jul 2025 04:00:27 +0000
Manifest next update: Sun 27 Jul 2025 04:00:27 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: MyD8OPKjRzu0TF90zbomkY7rvpfcRxQ5udO4AU7rIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:ab:ba:fc:7c:ab:c5:52:00:e0:2b:7c:88:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jul 26 04:00:27 2025 GMT
Not After : Jul 27 04:00:27 2025 GMT
Subject: CN=b611bbb28303dee9571d3651e67a1fa5aae4ba72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:8d:9c:2c:90:52:3b:38:2c:65:24:91:99:
49:71:f8:4c:99:4a:be:a8:eb:b6:bb:76:e9:2c:b4:
57:bb:f2:75:b5:2a:25:bc:a8:ed:e1:7d:e2:c0:37:
94:63:52:8c:63:d7:d9:51:7d:52:6c:6f:8e:25:0a:
48:84:cc:7f:25:45:2c:5e:97:2b:57:12:a4:d5:c6:
b1:10:12:fd:23:3b:6e:6f:e7:fa:62:8c:b0:d3:cc:
12:fc:8e:6b:37:5b:ae:24:84:00:ee:c5:08:99:f9:
76:82:7f:6e:5b:d0:15:2a:78:53:8e:d7:3d:11:1e:
c0:07:52:cc:79:81:ea:dc:47:55:93:ee:1a:7f:e3:
f2:c4:f8:a8:cd:49:65:af:fe:65:3d:c0:e5:45:47:
12:27:0a:3f:a0:48:1e:7b:c5:bc:75:3e:92:f4:53:
42:ff:c4:09:76:0c:55:87:14:71:48:a6:5f:82:6d:
21:e2:cc:b8:1d:ec:22:4d:62:32:72:ad:6f:27:26:
27:c1:96:64:85:24:d1:76:fb:f1:9d:7b:44:f4:49:
1f:60:e1:3b:6e:0e:35:17:1c:9d:4a:5a:8b:b9:c5:
ac:b2:f3:07:7e:9a:67:a4:7c:22:64:16:c5:79:0c:
b5:18:31:46:6c:c9:3b:4d:57:33:0c:9f:a3:af:61:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:BB:B2:83:03:DE:E9:57:1D:36:51:E6:7A:1F:A5:AA:E4:BA:72
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:a3:9d:7b:1a:31:22:75:f5:ff:12:7d:62:68:be:61:5a:
ef:cf:b4:0d:3c:18:d3:72:f4:cc:18:53:e1:ba:ec:94:d5:73:
81:e4:a3:6e:d1:21:78:87:c8:05:2c:77:bd:58:2e:d6:4c:71:
68:58:21:0e:0f:8a:4c:e0:9d:64:90:93:80:33:f0:e5:39:bc:
10:35:96:39:53:26:a7:c9:86:5a:a3:54:44:47:86:f8:5e:78:
55:10:04:89:f1:c8:4a:78:35:d1:07:c9:68:f2:69:03:a9:af:
79:19:49:10:ff:66:58:c8:a8:73:d6:a0:20:a0:ef:f1:58:3b:
f7:ef:c6:54:ab:70:03:38:09:76:88:e0:f8:08:39:2f:fe:a8:
7e:a0:28:ae:67:5a:32:27:d1:45:08:9c:f0:a4:ff:4f:75:92:
68:15:ff:31:76:0f:66:5a:fb:7d:6b:46:36:cf:64:bd:84:d8:
47:46:ad:26:4d:3d:3c:f8:5e:92:16:55:d7:1f:07:f2:72:da:
ab:ae:d0:e4:ed:45:f9:09:6a:9d:33:4d:d2:6d:06:e5:35:35:
00:d5:33:d9:ce:2d:52:23:c1:02:21:b0:f2:18:d6:62:e3:62:
e9:37:50:49:60:e4:73:af:ec:78:8f:76:a3:b3:d2:43:b1:51:
6e:e9:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:37 2025 by rpki-client