Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: DEJItYJpkpWr/hzZF58/YGazKkjsssDbW/Yi69VoLXg=
Subject key identifier: 9A:02:2F:34:55:47:28:D2:80:B9:78:4D:D1:78:C4:59:D3:02:A3:4C
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 0194BB28F8A5888F974D120D97F49C66D4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 07E9
Signing time: Fri 31 Jan 2025 07:00:12 +0000
Manifest this update: Fri 31 Jan 2025 07:00:12 +0000
Manifest next update: Sat 01 Feb 2025 07:00:12 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: SYq+3mPJdhx116m4/x17hHyarabTFvvEexPSvDBAXco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f8:a5:88:8f:97:4d:12:0d:97:f4:9c:66:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jan 31 07:00:12 2025 GMT
Not After : Feb 1 07:00:12 2025 GMT
Subject: CN=9a022f34554728d280b9784dd178c459d302a34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:d5:fc:37:db:99:50:e0:49:1e:40:54:e3:
7b:b0:a1:8d:b5:a6:16:8a:6f:da:3c:06:3a:55:72:
0e:2a:3c:b3:07:4b:14:bb:c9:27:f3:18:7d:e0:4a:
69:dd:c2:09:44:29:94:bd:a5:32:70:a9:7d:24:f0:
05:d0:a4:6a:75:ee:ae:af:c6:c9:a1:53:af:b6:70:
b9:28:df:d7:fb:1d:e7:77:45:ed:2d:7e:14:e8:d7:
cf:ee:9f:fc:2e:14:e9:ce:9d:9e:d4:34:b7:72:02:
80:55:1e:83:cd:1b:55:31:83:00:bd:23:00:82:13:
f3:67:c7:0d:cc:e9:e5:78:ad:bb:30:4d:d3:d9:1a:
17:d5:0c:9a:f7:5d:e5:37:be:bf:62:f4:8a:49:38:
39:7c:09:81:21:f5:d5:bb:0a:23:11:e0:9d:1b:17:
90:84:df:fc:b5:d4:e9:1e:93:b7:98:7c:e1:2c:af:
f5:e1:64:30:20:59:c3:34:41:d5:ae:84:22:a0:0c:
f9:9a:89:7a:b0:f3:7f:53:dc:ce:39:29:79:47:3b:
d3:a1:5f:e2:ef:76:02:00:ec:78:a8:97:a2:ca:01:
d4:fb:2a:b5:fb:0c:d5:3d:1e:70:79:00:2a:84:b1:
cc:c3:41:80:8d:4b:ff:77:04:12:64:bb:6a:a4:95:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:2F:34:55:47:28:D2:80:B9:78:4D:D1:78:C4:59:D3:02:A3:4C
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:06:83:29:ad:5e:65:c7:15:2d:c6:11:bf:69:94:04:c7:
1f:5e:f3:df:7b:fb:8c:c6:33:b3:b8:d4:61:af:da:b5:54:8d:
9c:cc:96:95:16:8f:5c:67:9e:b2:ad:3f:a6:1c:98:46:62:e5:
c1:8c:ab:33:50:ed:bf:24:b8:f0:43:a8:87:dd:75:6b:f9:d7:
e5:ec:1c:cc:2e:d2:50:34:97:e4:be:09:44:ec:d2:cb:91:b2:
e5:66:bf:12:d8:ab:6e:3a:5c:2f:3d:2f:c1:e2:6e:81:3d:ba:
87:a8:6e:26:5a:05:94:b8:e3:ce:f8:5f:1d:4f:0c:5b:b4:24:
5d:c7:05:0d:64:25:85:5c:41:6a:c4:04:b2:85:9a:a0:8d:95:
ba:fa:1f:4d:bc:ae:32:f9:13:d2:36:b5:49:23:51:47:0d:f3:
61:a4:21:2d:0f:52:07:a8:be:49:aa:c2:4b:65:95:6b:51:d2:
2f:fa:07:fc:11:d2:0a:eb:44:18:15:71:ba:17:ca:f1:31:f4:
bb:04:2b:65:a6:0e:53:e2:ad:4f:2e:68:ff:93:a1:1a:09:a0:
a2:bc:48:e2:42:ed:de:ba:e5:06:3e:e4:b5:cb:22:26:d3:76:
4a:3e:e9:c2:cb:ed:32:49:38:15:19:20:f5:b2:ac:fa:0b:89:
77:c5:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:50 2025 by rpki-client on console-fra.rpki-client.org