Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File: sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier: 3T5hd9HvhZCyZH/jADIVurRFD8WFIHuxBwT5h7zZbsA=
Subject key identifier: 03:D5:39:1E:9E:62:D1:01:63:8A:FD:1E:6A:77:7D:55:3D:6A:81:A0
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial: 01974B569C5672884A1DCFB77B70C30187B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 17:00:56 +0000
Manifest this update: Sat 07 Jun 2025 17:00:56 +0000
Manifest next update: Sun 08 Jun 2025 17:00:56 +0000
Files and hashes: 1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=)
2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: lz6mS2OCtI/b3onXlPKMvDwq0ea2WBhJboyCBjhgwws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:9c:56:72:88:4a:1d:cf:b7:7b:70:c3:01:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Validity
Not Before: Jun 7 17:00:56 2025 GMT
Not After : Jun 8 17:00:56 2025 GMT
Subject: CN=03d5391e9e62d101638afd1e6a777d553d6a81a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:f2:75:75:6c:03:99:23:6d:71:7c:12:10:
eb:d3:54:b0:14:06:7f:68:7a:a3:b7:90:5a:6f:28:
f4:12:85:e0:bc:54:72:47:a6:36:93:0c:9c:e5:e8:
81:68:c2:bc:17:22:87:ef:a6:ac:7c:9d:03:4a:03:
eb:87:ac:25:b2:d4:6f:c7:87:43:70:04:57:e1:24:
f7:f5:63:f1:48:e8:c7:0f:34:a7:b9:32:52:c6:b2:
75:c7:ed:6c:37:83:67:48:13:ca:2b:5d:6a:61:af:
39:00:74:32:d8:a2:c7:1b:cf:c3:2c:c3:20:d0:20:
4f:05:ef:b8:d6:4f:0f:58:26:b7:80:5c:31:ee:5a:
52:01:d9:51:a9:d7:9f:7f:f4:9e:19:8d:f8:07:37:
64:d3:aa:52:3d:3a:f9:50:00:47:08:98:42:71:f9:
e6:68:13:18:ad:b7:3b:53:64:6f:24:65:af:53:c7:
a2:c0:38:52:a6:fb:1e:b9:fa:39:7b:84:54:ae:79:
57:ef:f2:23:f7:ce:ac:08:5f:cd:4b:68:73:aa:3f:
01:b3:8e:e8:b8:db:af:15:2b:7d:b6:6a:7a:8e:07:
4b:64:ac:d6:69:50:92:cc:98:35:7a:fd:06:a2:65:
4e:75:66:14:48:dd:d1:d5:63:52:e7:0b:66:26:24:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:39:1E:9E:62:D1:01:63:8A:FD:1E:6A:77:7D:55:3D:6A:81:A0
X509v3 Authority Key Identifier:
keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:72:9d:a7:7b:39:2b:cf:48:e4:b9:99:c5:a7:21:a4:68:
0a:9b:8b:5c:6a:b6:99:db:30:04:c6:6f:05:38:4c:33:94:2a:
50:f2:a9:3f:8d:31:cb:0a:17:e8:0e:65:0b:54:47:1e:5c:73:
a0:f6:df:d9:b9:93:a9:3f:4a:52:67:a1:8f:c4:98:e9:2e:72:
b3:0f:5c:b1:88:cd:20:69:8b:77:fd:99:e0:8d:81:88:26:f9:
9d:b5:76:86:cc:d5:9d:8e:18:d9:e3:ad:0f:3c:6d:ad:f0:c3:
b5:a2:75:72:71:19:f0:95:b0:4f:b8:06:12:76:8d:98:47:8a:
fe:8b:84:cf:f8:20:4c:e1:cf:6a:c0:41:05:ba:cb:dc:d0:29:
84:1d:cd:6a:92:33:c9:fe:3b:eb:fe:13:e1:ab:2b:eb:69:6d:
cc:8c:ef:cb:74:54:64:2d:e1:68:79:ae:67:83:10:59:5f:5f:
d3:8a:fb:96:5e:33:86:f3:43:d6:5e:ed:33:74:ce:98:4a:ce:
c7:73:cb:bd:a5:46:f3:6f:36:8e:13:08:f0:c4:e8:f5:1c:d3:
b9:e4:34:c9:81:98:b1:78:1e:99:95:68:7e:fd:75:45:4b:39:
31:97:ef:49:db:27:55:a0:f5:b5:a6:61:b6:82:f1:1a:63:31:
bc:a0:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:43:40 2025 by rpki-client