Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier: Zl3OoGWYY/J2HOSjXiNUNnbGET8TNjZer+mbJhTxiD0=
Subject key identifier: 64:87:84:83:38:A3:00:72:15:3D:4F:EA:31:2E:31:B3:83:8F:F3:D4
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 019745C26112EA39F5EA3F4EA823B5DCF5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number: 12D1
Signing time: Fri 06 Jun 2025 15:00:56 +0000
Manifest this update: Fri 06 Jun 2025 15:00:56 +0000
Manifest next update: Sat 07 Jun 2025 15:00:56 +0000
Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=)
2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=)
3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=)
4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: kBQwvT8KICo8xFq0+gwt8wENydvJor1w+nDAjZ6d+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:61:12:ea:39:f5:ea:3f:4e:a8:23:b5:dc:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jun 6 15:00:56 2025 GMT
Not After : Jun 7 15:00:56 2025 GMT
Subject: CN=6487848338a30072153d4fea312e31b3838ff3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:37:ed:c4:04:86:27:db:fa:2c:99:0f:7c:
bc:2a:f6:b3:11:75:7d:53:a3:f8:7f:8b:41:ba:bf:
72:44:ab:67:fa:25:77:e9:48:4e:be:93:c4:a9:17:
ed:1b:25:f5:df:24:ea:3f:ee:7d:fb:8b:fe:7c:53:
74:db:e0:0b:76:52:16:c0:da:a0:98:36:23:6d:d5:
96:63:8a:aa:d2:eb:54:37:d5:78:2c:1f:b1:23:2c:
d1:9d:27:48:97:a7:d0:cc:2d:e4:ea:2c:fb:ef:ef:
65:c3:96:6d:c9:06:95:2c:76:3c:59:78:cc:ac:dc:
e2:fb:d7:9b:19:86:3c:4d:c5:b8:b7:8f:3e:30:88:
bb:14:23:da:62:9d:9a:87:0f:49:d6:44:e7:db:81:
5f:8d:19:07:08:c9:56:ad:e0:bc:96:ae:d9:c7:ec:
71:ae:1e:fa:82:f7:f4:31:54:2d:88:13:7f:80:9e:
30:c8:0f:2f:9f:47:24:67:6e:95:5d:3d:94:6f:8b:
cd:91:d0:57:48:4a:96:25:45:f2:ab:45:be:a5:cd:
ec:08:58:4d:d2:6f:aa:93:a7:93:75:22:42:d9:3b:
25:58:c0:bf:dc:7f:dd:01:8d:fa:64:0f:e3:cc:35:
1d:4d:43:f3:51:27:15:59:ba:05:4c:f1:0d:8e:aa:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:84:83:38:A3:00:72:15:3D:4F:EA:31:2E:31:B3:83:8F:F3:D4
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:62:13:7a:85:33:5b:f8:04:ff:cc:5c:98:ad:e3:51:ce:
a5:c8:b9:15:92:f3:e6:47:eb:e0:d5:a5:35:fa:61:ed:22:f1:
c0:9e:f0:9c:f9:28:cd:11:f6:42:6f:cb:4f:5a:08:27:a7:45:
55:83:94:88:d4:43:c5:2c:be:81:cd:cd:1d:34:65:27:5d:60:
81:42:d8:c2:ce:d7:24:2c:13:af:49:14:56:b6:2f:66:4d:ce:
39:e7:cb:54:fc:12:df:3f:33:c2:b9:29:ac:e0:93:c4:44:30:
b0:39:5e:fe:df:b3:42:ac:67:a8:4c:77:06:ef:54:ab:00:7c:
66:af:a6:36:32:b8:03:04:54:1f:08:8c:49:a3:89:20:e0:85:
a0:12:49:4d:e7:3f:b9:9a:a6:3c:21:f6:82:f5:53:24:05:38:
5f:cd:c1:b6:ae:09:36:fd:1f:d2:29:b3:b9:a1:0e:cf:7f:1c:
31:ad:34:c1:30:ca:31:5c:ea:d6:83:40:d9:d2:83:5f:c7:5b:
03:78:da:cf:a0:e2:2d:37:ca:55:83:7e:99:b1:2b:0b:e6:f0:
9d:ff:a4:f6:7e:ae:2a:d6:53:6f:42:ef:d1:c9:0f:23:27:c4:
61:c3:3f:82:7d:97:d9:9f:a4:de:17:cd:cc:25:08:47:57:af:
d4:4c:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:32 2025 by rpki-client