Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: hdojvefxiaUOhuoA/ADfczuotvItKPQmuAmtDzk5yRs=
Subject key identifier: BD:01:04:BD:B4:96:00:0F:11:BF:36:B8:8B:C7:96:D8:32:14:6B:37
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019749D5B248BC11CD1EBA2A1D045A147A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0DEB
Signing time: Sat 07 Jun 2025 10:00:30 +0000
Manifest this update: Sat 07 Jun 2025 10:00:30 +0000
Manifest next update: Sun 08 Jun 2025 10:00:30 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: 4q+dvLgz4xWzLGRUFPFolPCfWbd3jJf0lliFpZhdIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b2:48:bc:11:cd:1e:ba:2a:1d:04:5a:14:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jun 7 10:00:30 2025 GMT
Not After : Jun 8 10:00:30 2025 GMT
Subject: CN=bd0104bdb496000f11bf36b88bc796d832146b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:9b:fc:b1:86:9b:a6:1e:bc:34:32:c8:43:
4e:6b:1f:5e:9d:6a:ab:1a:90:c6:f8:d5:41:e8:2b:
4b:2b:ef:ae:6e:28:10:4e:ee:c5:01:ae:49:55:0e:
50:a9:51:a2:3e:d1:ae:34:f1:13:0e:91:c5:2c:00:
94:2c:1e:05:c9:5c:b2:51:32:fa:b6:b5:97:44:27:
de:28:81:3a:c7:6d:fa:ce:ac:6c:9d:2d:07:99:d4:
ad:5e:94:2c:7e:ac:a8:97:00:9a:9f:93:5e:07:30:
cb:42:a5:8c:5b:6b:68:ac:28:43:62:b9:86:6f:c9:
11:29:a4:37:00:e4:ee:d5:1b:30:eb:fa:79:e3:d5:
4f:d9:b6:1f:75:91:38:55:a3:2c:f5:ed:7b:ac:1a:
81:99:72:fb:c9:cf:2f:65:b4:af:b0:98:64:d5:44:
e0:a1:55:9b:0a:67:c7:a0:b3:7b:29:5c:f4:b7:0b:
9a:98:2f:86:f3:c3:41:73:a4:01:91:da:f0:42:5e:
aa:30:c8:4b:e6:68:5d:59:79:b0:b9:2f:7e:bc:27:
a5:e4:a5:17:46:e8:32:2a:4f:fd:9d:35:a8:68:58:
5a:1e:60:60:15:46:23:e9:90:5b:3d:dd:49:42:5d:
f0:e0:12:94:05:1c:d8:e8:f6:25:5b:5c:ba:21:15:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:04:BD:B4:96:00:0F:11:BF:36:B8:8B:C7:96:D8:32:14:6B:37
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e4:8c:19:d5:5c:38:9a:37:b2:17:b7:4b:a7:7c:58:46:19:
af:dd:e6:0c:2a:75:fa:fa:3f:fd:40:93:53:8e:af:22:2a:57:
21:ac:10:8d:28:de:2f:94:d2:9b:82:58:8f:f6:a6:a9:2c:37:
6e:da:ce:01:56:16:3f:cd:95:eb:20:40:9c:e4:61:97:57:f7:
8f:d3:1e:2c:0c:71:a0:25:41:f0:75:18:d7:22:78:27:38:1b:
dd:df:27:1c:17:1d:6b:46:c9:56:08:0a:1b:fb:ed:89:8c:80:
23:4c:e6:8c:64:7c:31:9e:9c:02:8b:47:0d:9f:18:4c:ed:10:
a1:72:6b:15:33:be:03:7b:53:15:ca:55:b7:90:78:0b:e1:ac:
8c:62:a9:20:7d:0d:7d:e8:d3:ec:2d:c9:40:0d:22:5c:c0:c0:
7b:c4:b3:b6:0a:81:97:2b:67:2d:fe:2f:24:66:bb:22:45:4a:
02:0a:31:4a:2e:c1:4f:fc:9e:ad:3c:47:67:78:5c:da:09:2f:
bc:ab:b4:ee:e7:85:47:e4:74:6b:65:0a:1c:fe:8a:07:48:33:
80:38:67:5e:c0:84:59:95:43:df:19:14:34:54:94:11:11:c4:
52:10:e0:30:89:f8:38:66:6d:0a:e2:9d:ad:2f:81:14:17:83:
87:d6:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:00:16 2025 by rpki-client