Manifest
$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File: 861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier: qRQx16aZzSFUDS9OIUW2pmgsi4mvcJp83USPw1zwLeo=
Subject key identifier: 87:1E:3E:18:93:C4:F6:E0:E5:C2:6F:C5:20:F5:A5:DE:49:80:B5:66
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer: /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial: 3967EEFEDE49C7FDE349249417E3FD1A14A21F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number: 0670
Signing time: Fri 06 Jun 2025 18:22:44 +0000
Manifest this update: Fri 06 Jun 2025 18:17:44 +0000
Manifest next update: Sat 07 Jun 2025 21:53:44 +0000
Files and hashes: 1: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
2: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
3: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: MoZiDFio77DCfk/sPEtjD5lKzJ19KhK5noIynuT07js=)
4: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
Validation: OK
Signature path: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:67:ee:fe:de:49:c7:fd:e3:49:24:94:17:e3:fd:1a:14:a2:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
Validity
Not Before: Jun 6 18:17:44 2025 GMT
Not After : Jun 7 21:53:44 2025 GMT
Subject: CN=871E3E1893C4F6E0E5C26FC520F5A5DE4980B566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:9a:cb:02:a3:fb:b1:8b:bf:75:73:85:ab:
89:2c:b5:e7:3b:2a:1e:25:16:fd:f6:70:6f:00:34:
43:35:43:06:26:ed:5b:72:6b:ad:8f:9b:fa:1f:76:
c9:9d:5c:21:06:cf:50:7b:10:a7:42:2b:76:6e:9d:
e8:95:dc:cd:cd:1d:eb:4c:7e:7b:cb:3d:a7:ad:e8:
c0:b4:25:ad:b6:aa:08:c1:21:c0:85:41:f0:8d:9b:
e9:59:8b:28:4a:dc:aa:ff:97:e9:e7:0f:f3:f2:c0:
00:7f:36:49:0f:77:5e:5c:99:ce:a5:42:1c:97:a9:
b1:14:60:4b:43:c1:97:74:66:b5:c3:9c:19:f2:49:
71:83:13:a3:88:80:7a:6d:76:56:4e:85:49:31:8e:
db:62:52:fb:62:c4:c2:d3:19:33:cf:40:2c:a2:e4:
e5:2d:0c:7e:d7:6b:9b:af:f5:ac:e8:a4:ed:9e:5f:
73:d2:13:9e:95:5a:de:47:ac:6c:55:a5:a6:76:54:
57:2e:ee:8e:3d:cf:e8:2a:11:ee:ee:ad:1c:fc:d5:
b4:79:60:ed:9c:47:7e:1b:a9:4e:88:dc:40:94:ec:
93:59:0b:e0:e8:a2:a3:2a:87:ed:c2:d2:24:17:e1:
57:39:c2:cb:2f:62:81:43:c0:9e:3d:94:dd:8a:52:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:3E:18:93:C4:F6:E0:E5:C2:6F:C5:20:F5:A5:DE:49:80:B5:66
X509v3 Authority Key Identifier:
keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cb:4f:9a:72:26:62:d9:ae:48:a0:66:13:51:3a:ea:98:c4:
4e:b0:78:d7:bb:ea:f6:a4:da:44:7b:6b:b5:d9:71:0a:0f:97:
59:64:5e:4f:ba:7a:d8:e2:a2:30:f2:10:79:c7:27:85:6a:76:
ea:2e:9f:ec:04:06:b9:24:d5:5a:4d:44:9b:4f:20:3f:94:55:
4d:42:a2:91:bd:3a:f8:64:a9:3a:27:5f:d4:6f:c9:ef:f3:cd:
05:3b:b1:42:f8:69:c2:d8:70:98:27:f9:71:c0:cd:f0:b8:a8:
20:d4:ff:c9:e4:27:03:e3:70:55:42:5f:4b:db:09:7b:59:aa:
56:81:ed:32:a9:fb:c0:08:95:2a:b2:a8:b8:e5:88:96:9d:e9:
48:34:9d:1c:ea:91:be:56:41:81:47:0d:10:22:6a:79:b6:7a:
e2:2a:03:45:86:90:35:c1:ff:c3:87:aa:4a:0c:16:62:9e:8d:
b9:a6:4b:fd:bd:50:c9:84:84:f2:83:44:fb:37:99:a0:00:05:
a4:77:d3:2f:dd:cd:1f:74:7e:9c:39:20:43:d0:b5:0e:c0:8a:
e9:ba:1a:1b:29:f4:79:a1:f2:10:12:8e:38:16:95:f0:6d:62:
82:a4:cb:cf:78:cd:06:03:28:1d:94:43:2e:36:33:e3:26:9e:
99:f8:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:11:46 2025 by rpki-client