Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: R9upHicOv0uyvxT240NofokFrRvsO4uLNqnJfylpW4E=
Subject key identifier: 67:97:AE:AD:0B:AD:02:CA:84:2E:3C:A1:79:06:DA:7A:CD:D0:C1:39
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 0197B745158048758EBD584083B5CC7597DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 14A0
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: M4+62lMeAgtwTIiA6H1d0In/eWkV2e+L3rKyDkPLXrs=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:15:80:48:75:8e:bd:58:40:83:b5:cc:75:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=6797aead0bad02ca842e3ca17906da7acdd0c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:a6:f4:a4:13:14:8b:6c:51:73:ab:72:d9:
9a:e3:36:8f:f6:72:42:89:bc:fa:1d:a4:ad:be:06:
6c:03:30:5a:23:00:6b:5a:20:a5:ca:48:7f:f5:90:
06:75:b3:2b:8e:0e:2e:59:fe:40:0d:76:09:16:12:
42:42:0a:2d:f0:0a:16:28:9f:73:d4:89:ac:6c:43:
38:80:92:e6:eb:2b:0d:98:35:03:d4:1b:04:65:3d:
3d:06:b6:56:83:50:0f:dd:ef:72:6d:3c:23:cc:de:
26:f4:57:e9:84:27:56:8e:a6:c3:d2:7b:1e:c8:6c:
4a:89:ad:1e:cc:9b:e2:2d:7c:8a:09:92:17:d5:41:
64:10:9f:36:76:96:44:9a:bd:7a:19:62:cc:31:37:
ee:ca:47:9a:4e:f1:66:4b:6d:c8:1f:b5:4e:bf:38:
bf:a7:1f:e5:f0:1e:5a:d7:f0:ac:19:8c:c8:ea:19:
ec:75:87:ff:8b:b7:7c:b2:36:42:fa:80:63:ea:3a:
0a:30:22:fa:ef:d3:1c:92:f7:20:6b:80:ff:a0:d3:
8f:c2:0b:a5:b9:8c:b6:91:d6:72:43:1f:b2:81:79:
6c:98:4e:33:cb:d2:6a:ba:b4:0c:83:bb:40:22:ff:
8e:66:bf:ef:15:11:39:06:fa:ca:4a:b2:6f:d9:7a:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:AE:AD:0B:AD:02:CA:84:2E:3C:A1:79:06:DA:7A:CD:D0:C1:39
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:67:40:f5:8f:06:a7:de:38:cb:61:0e:83:10:84:bd:81:
b4:1e:a0:f5:72:68:60:ec:e9:1c:d7:69:35:79:0b:40:b3:39:
61:df:a6:72:af:11:25:6b:cd:3d:38:e9:1f:c8:5d:a0:d7:ac:
18:9e:d1:cb:30:8c:ad:ab:bb:cf:65:14:f2:4b:f8:f3:ff:51:
ee:b3:85:2d:f5:2a:17:ff:ed:fa:cc:c2:21:e5:b8:39:9e:f4:
a4:d0:19:33:5d:4f:6c:03:d8:3f:d7:7e:99:5a:73:01:72:e2:
65:e1:4b:7b:45:77:75:f8:c9:e1:0d:08:d8:6c:d3:d3:ac:3e:
91:f6:1c:79:5a:ce:50:19:2f:0d:35:53:d9:31:aa:8c:da:81:
6c:37:bf:df:79:40:b3:6c:04:d6:2f:0c:de:06:35:73:25:96:
c5:4e:5f:52:34:4c:c3:7a:03:b4:c8:1d:91:bd:51:44:d9:9e:
cb:ee:04:f0:11:bf:80:c1:4c:d5:03:d6:39:3a:6a:ca:3d:6b:
fb:63:48:fb:0a:43:d7:30:2f:8c:a3:c2:8b:d1:9d:9d:d9:fe:
cc:4c:af:18:12:05:15:01:c3:41:d5:62:a1:7c:af:0d:ff:32:
d7:26:1f:20:68:d1:99:9e:02:90:0c:75:b1:4d:0a:9d:a1:9d:
ce:c8:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client