Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: aLOHaZ003oAUc+AhiTwIYQrg74qvy7ybb2KaqA3q+Mo=
Subject key identifier: 5C:87:93:E9:45:45:FE:31:10:6B:FC:5C:D1:F3:38:BD:33:C9:A9:9A
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 0197488CEA935431AC1A6AC2D7AD04F786FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0BF7
Signing time: Sat 07 Jun 2025 04:01:23 +0000
Manifest this update: Sat 07 Jun 2025 04:01:23 +0000
Manifest next update: Sun 08 Jun 2025 04:01:23 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: EK5Pov61YryutszwiQTvUWhSFh7rLY7F1x51D0GAidw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ea:93:54:31:ac:1a:6a:c2:d7:ad:04:f7:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Jun 7 04:01:23 2025 GMT
Not After : Jun 8 04:01:23 2025 GMT
Subject: CN=5c8793e94545fe31106bfc5cd1f338bd33c9a99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:cd:89:e1:29:56:ae:67:15:6e:91:25:e2:
54:e4:bc:30:3e:ff:8f:d8:ae:09:23:47:aa:9b:8a:
2f:53:ff:fa:47:0b:cc:3f:99:d0:55:98:91:11:ac:
01:66:03:63:0f:b7:c0:4e:de:b5:76:4d:15:62:26:
5d:60:ed:a2:8a:a8:b2:47:8d:7c:9b:ae:5f:8b:a8:
90:02:a9:75:fa:59:57:f9:f9:aa:74:11:41:7a:1a:
bf:51:2b:1b:d0:56:29:bd:d5:4f:db:e7:b9:57:93:
6c:00:ce:11:61:bd:3f:2e:bb:85:a9:e0:14:b3:1e:
8d:1b:7d:af:41:63:a0:58:ce:e4:84:21:3b:17:eb:
2b:7b:da:50:da:ed:26:17:1e:d1:86:1e:c2:48:0b:
27:34:ca:71:4e:c1:28:c7:4d:1f:91:ad:f2:70:b9:
45:cc:63:e8:05:ae:17:f5:f5:2c:0a:78:fc:b3:30:
6e:8b:af:f7:f2:39:8c:c6:36:e7:ff:4a:1c:13:e5:
34:3f:ac:02:39:b3:b3:16:c6:d3:ce:89:b9:3a:39:
ec:90:45:53:31:65:8d:f4:8c:95:78:8a:70:23:b4:
ad:3c:59:ce:f3:5e:17:80:a2:50:71:d9:de:af:29:
11:1e:f2:57:5c:d1:86:aa:92:19:e8:75:c5:e5:77:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:93:E9:45:45:FE:31:10:6B:FC:5C:D1:F3:38:BD:33:C9:A9:9A
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:fa:ce:5a:b0:10:c0:e8:eb:09:39:a1:4a:90:87:a3:d1:
8c:a3:d0:e2:ec:f2:91:49:10:59:a5:b7:7e:25:1c:0d:cc:c6:
c1:9e:0e:f7:c3:76:75:f5:8f:a8:5d:30:df:e6:e0:0b:5e:98:
2c:18:8d:c1:5d:73:09:73:ac:3c:0c:5a:3d:93:e1:53:6e:1d:
17:d2:fb:9b:06:08:d9:f0:93:05:ad:7e:60:1c:e7:a0:34:b6:
be:f6:bf:6e:bc:52:4e:80:73:5c:a3:a3:f5:a2:d5:fd:c1:59:
cd:c7:85:af:c9:1e:9c:84:d9:bd:e6:50:fe:80:9f:4a:01:e6:
b9:62:1c:b1:ba:e7:b5:bb:32:99:be:de:d8:6d:01:72:e1:00:
b2:a3:21:24:7a:b1:fd:a9:19:88:51:83:1e:19:18:96:8f:e8:
c0:cf:18:30:77:a9:9b:22:af:0b:d0:23:bf:ca:2e:70:a7:78:
97:67:26:25:1f:12:91:c5:54:a2:0d:da:00:80:ae:81:b3:28:
cf:f2:ff:3d:11:5b:bb:24:ec:ac:07:0f:da:03:4c:64:13:02:
63:b5:9b:69:25:49:14:23:40:b7:5c:1b:b7:2a:98:0e:68:b9:
0b:92:05:00:d3:6f:47:4d:f9:f7:a9:cd:1a:06:46:63:a3:c9:
20:19:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:40:56 2025 by rpki-client