Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: m5e2z2so95kr3Q/56ohBhJSMI9ElqmZmVWeIPBD2u8w=
Subject key identifier: C4:8B:F9:6F:B5:4A:F0:D2:EA:F6:FF:AD:25:12:9D:AB:A2:B1:BF:F7
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 01951134BE29B730A37EE2D3F4671121779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 02D7
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: 40YANwscbbfvaptAtwgpvWRse/NDNHKPmRGgExvRagk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:be:29:b7:30:a3:7e:e2:d3:f4:67:11:21:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=c48bf96fb54af0d2eaf6ffad25129daba2b1bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:b9:85:26:8d:a8:50:f6:a8:3e:ab:ec:d7:
dd:37:bb:2a:2d:f5:73:53:21:46:d6:bb:33:63:cf:
d8:68:4e:35:24:bc:9f:c2:92:a9:cc:89:70:96:07:
4a:2f:6a:42:6b:56:e8:48:3b:b6:d9:d9:c1:6b:11:
4c:6e:cf:67:e2:7f:9e:01:7d:c2:ac:b7:f1:12:a8:
b6:6b:ea:e1:2b:32:48:6a:c3:a6:23:a4:e0:8c:cf:
1d:61:9f:79:ca:67:5f:5e:9f:2d:9e:fb:44:d5:48:
55:ab:56:14:01:a2:e9:36:87:65:aa:0e:b7:68:25:
55:ef:bb:c2:2e:c9:d5:95:07:26:fc:f4:27:16:1c:
ee:aa:7a:94:78:22:2f:05:c3:98:ae:2d:2f:dd:53:
ce:9a:ea:71:09:63:5a:2e:7f:43:5e:66:f9:a1:38:
a4:a2:4c:a0:26:f3:1d:6e:d9:a7:68:bb:f6:12:55:
8c:0d:d7:f6:7e:87:e4:1d:0d:bf:8b:63:5a:3b:15:
0d:db:6d:c8:e8:96:2c:c7:f6:c0:20:7d:b2:e4:4e:
e3:7e:fe:aa:c5:c4:fb:03:82:82:68:7d:af:d4:57:
d4:00:1a:ff:20:d3:0a:c2:fe:31:bd:a1:6d:63:fd:
85:db:24:00:61:02:d3:6e:09:29:af:2a:61:0a:93:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8B:F9:6F:B5:4A:F0:D2:EA:F6:FF:AD:25:12:9D:AB:A2:B1:BF:F7
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9f:77:6e:5d:52:e0:0a:13:ae:c7:4d:b7:17:8e:02:96:b1:
c5:62:b3:7e:89:ef:aa:95:22:5b:6e:c5:43:d0:54:c5:c7:d5:
4d:f3:f1:6c:f1:b0:17:d4:3c:f6:9e:4a:00:14:72:1a:25:71:
a4:f1:dc:24:5d:8a:97:da:c9:bf:40:22:cf:fc:1d:e5:17:00:
d8:c4:68:08:04:1b:aa:8a:08:88:e2:1d:d0:91:e9:7b:90:d2:
66:8d:7c:49:24:fa:5a:c9:8d:fb:0c:1e:2d:c5:e0:b5:7f:2f:
04:42:a6:d2:92:aa:40:28:15:d3:a2:b3:c5:8b:22:a5:7d:12:
dc:3c:5f:34:16:a3:f7:a2:0d:1a:70:9d:89:83:da:d5:b3:55:
bc:b7:e8:75:89:03:49:20:b4:41:a3:5c:cc:4c:98:e5:27:7a:
9e:7c:93:aa:ec:b8:3f:de:eb:ff:8e:7b:76:aa:c6:a3:f3:ec:
35:28:1e:d2:47:29:0d:57:f6:64:ba:a5:52:00:27:45:dc:64:
62:d7:f4:15:48:4f:4a:bf:ce:39:c0:7d:e8:87:7a:d7:9f:c2:
24:8b:b4:b3:ad:4c:06:ca:53:51:ce:6d:28:78:7c:cb:b3:d4:
1c:ac:0b:84:59:eb:1a:c0:cb:67:dc:89:b7:7d:27:0f:78:af:
df:b5:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:24 2025 by rpki-client