Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: Big7iegNvDTuNhN8ebSQ7fh8L3PHAGufeNWD5YWDfQA=
Subject key identifier: A2:99:B8:36:D4:06:F7:F0:4F:E3:89:0F:FA:6D:34:74:86:DC:C0:1D
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 019844E37BDEFF44AB727E091EFCFD235BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 09BE
Signing time: Sat 26 Jul 2025 04:00:15 +0000
Manifest this update: Sat 26 Jul 2025 04:00:15 +0000
Manifest next update: Sun 27 Jul 2025 04:00:15 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: cyETN0h/4EHwMYycli8BabQ+yny47Ov+oF19qN5PnkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:7b:de:ff:44:ab:72:7e:09:1e:fc:fd:23:5b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jul 26 04:00:15 2025 GMT
Not After : Jul 27 04:00:15 2025 GMT
Subject: CN=a299b836d406f7f04fe3890ffa6d347486dcc01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:bc:7e:85:43:7a:3a:e8:0d:85:79:94:b1:
88:b0:12:ac:c9:68:df:e8:da:8e:97:48:00:58:a8:
9e:1e:bf:16:4b:d4:77:87:98:bf:e6:5e:7d:c2:2c:
8a:ce:8a:bc:6a:8f:10:12:da:1e:8b:40:de:26:8a:
c9:5a:7a:a3:d6:b2:f6:d8:3d:3d:35:89:8e:e7:f8:
cf:49:62:09:e1:03:76:27:c6:d9:07:20:67:c2:95:
0e:84:76:fa:ef:47:d1:34:95:e7:46:e7:83:87:a8:
cd:ae:96:4e:ba:68:30:c6:59:ae:bc:1c:de:d3:b0:
e7:18:b1:99:2b:5b:ed:92:b3:71:fa:0e:33:bd:bc:
73:ae:9a:50:47:77:62:74:e6:4a:7f:9a:7e:75:a9:
24:fb:67:4e:4b:36:b5:e9:59:b1:1d:1b:22:e9:93:
4a:ce:ca:27:91:54:00:39:46:a5:e8:d0:f4:8d:5b:
9a:32:b2:96:dc:ec:7d:20:16:78:22:39:61:28:06:
51:6a:fd:77:54:d8:64:5f:bc:ae:3f:e8:0d:48:dd:
5e:ac:7a:95:68:1a:ca:07:48:53:ff:ee:66:18:38:
9c:6e:d4:b7:75:09:9e:23:71:bc:84:c1:b8:18:4f:
c8:65:76:02:6e:12:38:d4:d4:4f:81:62:ec:44:3d:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:B8:36:D4:06:F7:F0:4F:E3:89:0F:FA:6D:34:74:86:DC:C0:1D
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f5:70:4e:3e:bc:d7:5a:df:9d:bb:46:9b:d0:18:e1:2f:b4:
b4:14:bf:c0:96:7e:d0:98:bc:2d:25:47:95:49:55:98:05:a8:
8f:b2:59:0f:cc:dd:c3:6f:ee:78:b1:d2:38:8b:6f:9b:82:3b:
69:f2:17:8a:65:0e:52:17:1c:ef:16:a3:72:0f:c0:0d:7e:02:
0b:76:ec:44:b8:09:f4:47:05:f0:57:9e:21:24:59:ac:e7:b5:
1a:0d:de:cc:06:df:25:15:fa:21:a1:fe:b1:78:70:cf:01:61:
cf:30:24:eb:7a:28:a4:80:e5:2c:a9:dc:7e:87:3c:f0:e0:92:
c8:92:36:41:09:83:77:4a:02:88:4a:27:ec:58:94:84:70:a5:
4d:5a:bc:94:3a:e2:e8:aa:ec:ab:41:b6:7b:c6:fb:2c:01:fe:
94:04:f8:09:1b:74:c8:e1:13:9d:f6:95:e2:48:00:d8:03:6a:
51:26:bc:aa:05:30:d9:cf:c8:c1:1a:43:47:14:46:8c:f5:cf:
fc:35:8e:1b:48:6e:95:a8:35:7a:37:8b:ec:40:6c:c1:1b:5b:
0a:d7:07:83:d0:73:b1:af:9c:f3:84:3c:ab:f9:59:46:4b:78:
2a:bb:ce:6f:0d:c6:ad:a7:d9:e2:fa:0c:e5:53:c5:17:92:ae:
ee:3e:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:23 2025 by rpki-client