Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: aC+BevelM2o3ftG5XsPEiFgZlFoEt11DRZe0DoBZ88E=
Subject key identifier: 80:EC:62:35:6D:35:41:0F:9C:E0:DE:2F:82:CA:D7:94:94:82:27:BA
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 01974DB2ECF8A523CD8DC37824BED5E2E17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 093E
Signing time: Sun 08 Jun 2025 04:01:01 +0000
Manifest this update: Sun 08 Jun 2025 04:01:01 +0000
Manifest next update: Mon 09 Jun 2025 04:01:01 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: 5+Ox6xD+sk6D0QtLz52ZuRuacUcJ/cp/ygeKN1dim5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ec:f8:a5:23:cd:8d:c3:78:24:be:d5:e2:e1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jun 8 04:01:01 2025 GMT
Not After : Jun 9 04:01:01 2025 GMT
Subject: CN=80ec62356d35410f9ce0de2f82cad794948227ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:69:62:05:61:11:91:5b:10:75:95:a4:c6:
df:85:2c:57:01:bc:bd:b1:e6:5d:7c:92:46:c7:ee:
f7:99:07:83:ad:52:90:f6:79:93:d4:36:58:91:57:
1b:67:4e:e7:f9:32:a9:37:07:13:66:58:b0:48:8c:
a3:b5:fe:8d:76:9f:89:60:6e:1c:cf:29:3c:aa:ac:
f4:80:59:94:aa:a7:5e:a8:81:d8:b3:3f:ff:83:d3:
d5:8d:3f:02:e4:4d:5e:4e:50:7e:34:93:f2:6e:3c:
5d:b0:66:40:11:dc:bc:25:4b:6f:26:56:12:87:3c:
35:0b:ce:62:6e:8f:2a:95:c4:3b:03:22:cd:62:2d:
e8:0e:7d:88:1a:cd:6d:ea:1b:56:78:c6:80:19:0e:
d7:5e:23:0c:16:f3:d8:55:60:de:48:13:8e:f9:af:
de:a7:87:77:8e:91:e6:4f:17:c9:d3:c5:f7:51:d3:
71:32:9a:84:e7:56:8e:0d:f4:7c:9a:8c:99:e6:9a:
56:dd:27:53:22:a5:95:e5:a6:d3:b3:62:aa:94:6a:
08:70:fa:f4:dc:b6:10:e7:11:af:69:ec:16:6f:09:
cc:1d:3f:4b:2d:38:bc:2f:93:8b:9c:db:19:1d:36:
d3:d6:dd:a0:e8:c9:17:cb:86:31:c5:fa:c6:1a:7b:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:62:35:6D:35:41:0F:9C:E0:DE:2F:82:CA:D7:94:94:82:27:BA
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:ac:38:54:bd:43:37:85:18:51:69:97:ce:b4:01:17:a0:
70:fa:05:e4:89:b8:b6:48:3f:14:d4:df:45:b1:2c:ee:4f:18:
71:74:f5:9c:48:dc:df:25:4f:04:03:3c:42:06:5d:43:18:2f:
04:c4:f9:fb:d5:b1:ae:a5:a2:39:4e:32:16:84:93:ae:b1:23:
ef:69:e3:19:de:7a:f8:7d:7c:fb:94:42:b3:1a:5d:e0:bd:57:
75:1c:6f:dd:79:2b:4e:58:42:0a:6e:bc:ba:64:0d:fd:34:e5:
83:8c:64:ad:20:da:5a:cc:41:3e:ee:f0:22:bc:89:ee:28:39:
6f:bf:6c:46:20:10:66:36:78:2d:fd:e6:7c:9d:04:2b:16:e6:
bd:3a:bf:cd:60:fe:16:cd:b6:11:0c:d0:02:50:02:ea:b3:93:
f8:f1:c5:5e:12:9f:5a:84:97:84:94:77:22:03:23:e1:39:d0:
58:0b:4a:38:81:a8:43:75:fc:c2:1e:71:9d:b3:d3:3a:d6:90:
11:a5:83:9c:42:cc:c2:8f:72:3a:65:b6:2c:b7:c8:80:2d:1d:
f9:03:40:bd:b0:27:49:d4:e4:a0:c4:c1:be:61:b9:f4:aa:57:
5e:75:6d:d0:d5:60:17:4e:3d:c9:2f:ab:24:3d:fb:65:4b:50:
ad:a6:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:26 2025 by rpki-client