Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: GZAnS2aJZACA/tCRod8h2BvMjYj0bmccHFQWrb7rmvk=
Subject key identifier: 7E:9A:BB:67:DD:36:13:43:6C:84:E7:84:C2:7C:89:79:C6:01:9F:EE
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 01957910ADB93F8025ECC486C3FA599241AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0B07
Signing time: Sun 09 Mar 2025 04:01:30 +0000
Manifest this update: Sun 09 Mar 2025 04:01:30 +0000
Manifest next update: Mon 10 Mar 2025 04:01:30 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: lGJ8iHrRl6Fz1QIh0zHUx7sAGu6m22YpM0CrerTitk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:ad:b9:3f:80:25:ec:c4:86:c3:fa:59:92:41:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Mar 9 04:01:30 2025 GMT
Not After : Mar 10 04:01:30 2025 GMT
Subject: CN=7e9abb67dd3613436c84e784c27c8979c6019fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:28:1a:61:4e:48:b2:ec:40:aa:5d:75:6c:
6f:c2:d0:4d:08:78:a8:83:d3:7c:4b:58:f6:3a:e3:
7e:2e:98:df:e4:c1:6b:18:99:72:34:79:23:2e:4e:
2c:bc:8c:e7:91:93:ed:eb:41:a5:99:4f:17:63:69:
8c:ae:98:c1:27:9a:37:95:1d:89:d1:5c:de:41:f0:
61:a1:ae:5f:eb:50:65:95:9c:e0:5d:f3:6b:c5:33:
50:c5:5f:c4:96:06:e1:84:18:06:b0:63:b3:9d:01:
8b:bf:44:9d:83:f6:0e:3d:56:66:49:90:af:cd:88:
a5:54:a9:2d:15:8d:95:c2:ee:10:f9:66:d1:e4:6b:
3b:44:eb:16:c6:9f:f5:da:9c:ea:80:7d:87:e9:dc:
d0:4d:d3:22:fa:da:3b:d7:3f:74:f3:30:71:60:4c:
0f:cb:fd:f3:1f:9b:5d:97:50:48:02:e5:c4:3f:a3:
a7:ea:58:07:d3:ec:1b:14:19:6c:16:18:45:6e:5d:
32:aa:73:1d:cb:3a:9e:87:b7:08:60:48:97:52:a5:
eb:86:3d:58:ad:ad:05:f7:9e:09:81:02:06:6c:a5:
33:eb:42:d9:24:e7:5d:55:21:6c:5c:6c:2f:d0:5f:
4f:4d:f8:26:9b:b2:ae:7a:7a:cf:3e:96:07:e3:e9:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:BB:67:DD:36:13:43:6C:84:E7:84:C2:7C:89:79:C6:01:9F:EE
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:66:6f:d8:bb:1c:bb:b7:a1:1e:af:1d:f1:29:b4:8e:e4:
f6:12:55:08:61:3d:00:2d:4e:97:56:c2:2a:cb:21:0a:82:e6:
41:5b:47:73:dd:5f:5b:a8:d6:02:00:f1:c9:85:ee:55:a1:a8:
97:e9:5b:27:56:d6:f7:a9:fb:a7:e4:9b:6d:e0:74:63:c7:e1:
6a:97:e5:10:ce:df:ca:a3:7b:da:1b:2c:d3:2c:67:90:61:12:
16:42:f2:08:0e:21:dc:75:0b:43:58:61:ae:c5:af:b1:8e:e9:
c2:fd:ec:4b:8b:0e:6b:a4:ac:3b:e3:d2:b8:f6:07:8e:6a:78:
34:e3:b1:e3:3d:dc:ac:04:26:72:42:a3:85:ee:42:8a:24:34:
8a:0a:34:af:c4:5c:dd:d3:ba:8b:2d:cf:f2:65:cd:90:24:91:
c6:d3:ec:8a:ba:16:b9:61:e8:0c:98:15:59:9e:0a:3e:bc:c7:
95:c8:e6:0d:f1:95:7d:88:03:cd:25:ef:15:b3:c5:c2:28:f4:
60:32:31:3a:03:81:bb:4d:22:73:c0:35:8f:07:dc:d7:00:55:
ef:1a:75:4e:3c:62:c7:b4:6d:94:a4:b5:4f:e9:57:2b:37:3c:
82:d7:35:c9:15:65:0d:09:1a:9e:78:9a:f6:9a:85:91:ee:7d:
2d:e5:e6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5EK25P4Al7MSGw/pZkkGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjIwMTM2M2NjYzU1NmJlYzg4NzAyNTY5ZDhkMzgxYTBl
ODk1NjYwHhcNMjUwMzA5MDQwMTMwWhcNMjUwMzEwMDQwMTMwWjAzMTEwLwYDVQQD
Eyg3ZTlhYmI2N2RkMzYxMzQzNmM4NGU3ODRjMjdjODk3OWM2MDE5ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5goGmFOSLLsQKpddWxvwtBNCHio
g9N8S1j2OuN+Lpjf5MFrGJlyNHkjLk4svIznkZPt60GlmU8XY2mMrpjBJ5o3lR2J
0VzeQfBhoa5f61BllZzgXfNrxTNQxV/ElgbhhBgGsGOznQGLv0Sdg/YOPVZmSZCv
zYilVKktFY2Vwu4Q+WbR5Gs7ROsWxp/12pzqgH2H6dzQTdMi+to71z908zBxYEwP
y/3zH5tdl1BIAuXEP6On6lgH0+wbFBlsFhhFbl0yqnMdyzqeh7cIYEiXUqXrhj1Y
ra0F954JgQIGbKUz60LZJOddVSFsXGwv0F9PTfgmm7KuenrPPpYH4+lAFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6au2fdNhNDbITnhMJ8iXnGAZ/uMB8GA1UdIwQY
MBaAFLGyATY8zFVr7IhwJWnY04Gg6JVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYt
MzI1NjI3YzQ2NmUyLzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYtMzI1NjI3YzQ2NmUy
LzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEL5mb9i7
HLu3oR6vHfEptI7k9hJVCGE9AC1Ol1bCKsshCoLmQVtHc91fW6jWAgDxyYXuVaGo
l+lbJ1bW96n7p+SbbeB0Y8fhapflEM7fyqN72hss0yxnkGESFkLyCA4h3HULQ1hh
rsWvsY7pwv3sS4sOa6SsO+PSuPYHjmp4NOOx4z3crAQmckKjhe5CiiQ0igo0r8Rc
3dO6iy3P8mXNkCSRxtPsiroWuWHoDJgVWZ4KPrzHlcjmDfGVfYgDzSXvFbPFwij0
YDIxOgOBu00ic8A1jwfc1wBV7xp1Tjxix7RtlKS1T+lXKzc8gtc1yRVlDQkannia
9pqFke59LeXmgg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 07:30:06 2025 by rpki-client