Manifest
$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File: 861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier: +4UPGiUUNR39VuQQUEVKXkS8zQc42pie4BxW699BDPc=
Subject key identifier: C8:87:B5:AE:F9:62:8E:77:0B:D4:22:9D:44:D8:AC:4D:08:08:A5:B2
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer: /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial: 12AB245937D7A40AB8D3CA3C6E52FA339A25B3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number: 0690
Signing time: Mon 30 Jun 2025 14:38:02 +0000
Manifest this update: Mon 30 Jun 2025 14:33:02 +0000
Manifest next update: Tue 01 Jul 2025 18:26:02 +0000
Files and hashes: 1: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
2: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: aP+2rdcBnjbVe0EF281i1f+wuUTNC39JTzFb6ZuYvQ4=)
3: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
4: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
Validation: OK
Signature path: rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 18:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ab:24:59:37:d7:a4:0a:b8:d3:ca:3c:6e:52:fa:33:9a:25:b3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
Validity
Not Before: Jun 30 14:33:02 2025 GMT
Not After : Jul 1 18:26:02 2025 GMT
Subject: CN=C887B5AEF9628E770BD4229D44D8AC4D0808A5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:8b:95:bf:0e:2d:ce:1a:92:78:e1:6b:a7:
cd:8c:f4:5a:16:e0:e4:30:7d:d3:a1:55:eb:3d:7b:
49:f6:66:57:26:27:91:96:99:1d:08:4c:bb:db:29:
1e:7b:9f:91:37:64:fb:d7:b8:a5:84:94:b4:59:a6:
c4:75:21:82:75:20:ed:f4:b4:4a:fb:9a:8b:2a:23:
95:b4:7c:16:87:d5:33:aa:a9:fc:23:b9:13:a6:9c:
14:c4:a8:80:db:d7:35:0f:4c:40:de:b7:b7:d6:7e:
f1:50:b0:0d:11:06:b2:d7:0f:ee:32:dc:83:49:21:
ee:ca:4b:d2:06:95:2b:9e:a0:5e:94:4f:43:13:a3:
19:c4:3c:22:94:31:f1:62:53:e7:ef:c4:ca:12:7a:
6f:72:20:a3:66:14:2f:9d:63:1b:cb:ab:b9:32:06:
19:32:62:ce:02:16:95:78:da:61:cb:86:40:18:0c:
fe:c9:b2:a6:76:ca:2c:21:00:83:c1:4e:56:64:b0:
1a:a8:b3:20:97:44:95:c7:73:9d:01:d7:3c:66:97:
5f:cf:e4:f6:6b:a6:7e:c7:14:41:1e:fd:4c:d7:fb:
de:2b:6d:5f:5d:5b:07:09:5b:7e:d6:83:32:1a:5b:
3d:59:ac:4c:02:69:e4:25:3e:01:a0:36:a9:7a:e3:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:87:B5:AE:F9:62:8E:77:0B:D4:22:9D:44:D8:AC:4D:08:08:A5:B2
X509v3 Authority Key Identifier:
keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f3:52:59:d5:3a:f2:c6:83:74:82:a0:fd:81:f5:c2:65:ca:
78:e2:97:35:1d:a1:35:87:1f:23:9b:4d:60:e7:69:c5:8d:82:
60:96:8e:0a:c1:dc:05:b1:15:90:ea:48:96:5a:d4:32:4b:47:
e5:da:e5:51:9b:7c:12:72:c5:67:4b:5d:d4:a3:5d:dc:8e:e5:
e0:f2:eb:29:57:f3:eb:84:57:27:05:3b:cf:a2:59:28:96:ab:
90:8b:c2:b3:d2:39:0d:8b:e8:bd:f0:c9:0a:63:d7:6c:13:86:
ba:5a:cf:1e:12:97:6b:54:12:88:cb:64:b1:28:f3:34:f1:5c:
67:7d:3f:41:a3:be:1b:d9:79:6c:0f:bb:c9:ee:ed:9e:1e:3f:
3e:60:ea:5d:d3:ab:46:80:fc:b8:47:3d:45:a2:28:6f:79:16:
bf:85:f7:45:1f:3a:2f:ed:74:a4:1c:5e:f0:ed:cb:e3:a4:4d:
e2:12:44:63:0a:3a:e3:ec:fa:bb:a9:24:9c:fd:73:0a:bc:45:
cf:d7:73:d2:ab:5c:f6:19:63:1d:92:c8:f1:5b:e8:d6:11:f5:
52:cb:20:83:c5:0f:50:1c:1c:e1:2b:13:5c:f6:f1:c8:0a:d1:
52:35:20:83:e4:f6:79:b4:5a:c9:8b:f3:c1:b3:0d:bd:cd:a1:
e1:c3:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:05:09 2025 by rpki-client