Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: Tdc1kIQtZ0fp7/8lClOMvzcppEK2ohxWoWAYlnt03Wk=
Subject key identifier: 3D:E2:59:AF:21:65:23:7D:DC:92:E9:FB:6B:25:AB:AD:5E:EA:F0:2A
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019845F64037F5543B3CB0BD061F33C85695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0BC7
Signing time: Sat 26 Jul 2025 09:00:22 +0000
Manifest this update: Sat 26 Jul 2025 09:00:22 +0000
Manifest next update: Sun 27 Jul 2025 09:00:22 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: NUyAjbpazi18Ecl25DstnhP7JQPtjKZrhpthEL3BUyE=)
2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:40:37:f5:54:3b:3c:b0:bd:06:1f:33:c8:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Jul 26 09:00:22 2025 GMT
Not After : Jul 27 09:00:22 2025 GMT
Subject: CN=3de259af2165237ddc92e9fb6b25abad5eeaf02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:86:92:0c:81:1c:25:78:b4:48:6a:fe:cd:
90:45:77:98:0e:20:f6:54:02:f0:b1:c3:ed:b6:bc:
59:07:02:97:36:88:28:75:ec:b9:5b:f6:2d:93:48:
c1:4d:db:fc:50:35:30:2e:a5:cc:07:39:72:31:6f:
2c:a0:b1:48:00:ea:6f:32:70:1f:c4:bd:3c:3a:ee:
2b:48:27:0f:e7:3a:1b:f8:b4:b1:0f:4d:34:6e:38:
33:1d:7f:a9:f9:9f:1d:9e:94:60:56:16:af:32:1d:
50:3e:d0:86:f2:53:35:2f:20:a2:49:43:8b:30:16:
ca:4f:d9:7d:0a:b7:8b:3a:7b:82:8a:c1:d6:ae:86:
f2:10:d8:17:99:39:22:fe:fb:b0:00:f7:97:21:e9:
8f:e1:75:4b:2e:3c:32:ea:94:48:10:4c:12:a4:32:
a1:87:a4:75:8a:d7:56:af:05:a3:8f:75:2f:0e:98:
8d:0b:5f:ab:cc:68:11:13:20:47:db:d4:83:43:eb:
4e:5f:9a:ef:13:c0:25:06:ad:ee:d8:7c:4a:fe:42:
ae:24:6a:5d:d0:4c:0c:82:3c:73:c3:5e:42:c3:9b:
91:37:af:12:7d:49:06:b7:7e:62:a1:d3:e1:e9:3c:
2f:70:83:f6:2e:0a:65:a4:db:d1:f8:b6:15:d3:52:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:59:AF:21:65:23:7D:DC:92:E9:FB:6B:25:AB:AD:5E:EA:F0:2A
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:af:f8:09:84:76:dc:a7:4e:8c:a3:f8:d0:55:d3:37:77:
95:83:94:c4:6b:90:cd:a4:38:43:ed:b2:42:e3:c2:d1:20:f1:
e3:76:03:8e:95:7d:b2:eb:db:9e:34:59:1d:2a:82:42:5e:30:
5d:84:7d:dc:e3:41:d1:22:48:89:2b:1d:5a:31:dd:d7:b2:1b:
4d:59:28:8a:14:89:ea:31:ec:a0:24:75:70:4d:6f:53:41:20:
06:0c:07:f6:12:81:7a:3f:43:86:a3:99:db:f7:66:3e:35:c4:
98:63:29:87:72:60:b5:c7:d4:a8:36:77:6b:f9:c8:94:fb:b9:
95:c0:0a:29:4f:1e:88:03:71:ad:98:94:ac:5c:7b:70:50:0f:
93:02:d4:cb:92:dd:31:13:51:99:d3:5a:25:20:24:2d:55:5e:
8c:ed:3d:ad:ec:cb:e2:38:8e:e4:0a:5b:80:77:45:d4:1a:5a:
bf:a6:e0:c2:47:4b:b9:49:59:6e:8d:82:9c:ea:f0:ed:ee:00:
3c:a8:5d:a3:ed:ec:83:77:04:47:2a:52:24:4a:23:99:7c:c3:
a9:4f:af:47:69:81:14:9b:de:03:a0:1d:3b:38:4d:bc:fe:d4:
19:8e:b9:5d:25:cb:f2:0d:d5:4b:33:01:a8:09:67:1c:a5:e7:
51:a4:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:37 2025 by rpki-client