Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: PDzSd1R03wq8Npt/TdIpXVXUQJx/7iN9PjC0lMQr4ec=
Subject key identifier: 84:9E:6C:EF:74:FF:3A:E9:4E:1A:AD:8F:F6:13:13:23:93:22:76:DB
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 0196C1CB3E39946B1B9EB0C85D606BEEDE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 03B7
Signing time: Mon 12 May 2025 00:00:44 +0000
Manifest this update: Mon 12 May 2025 00:00:44 +0000
Manifest next update: Tue 13 May 2025 00:00:44 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: foRq953IJUPtX1YUD5NvkOMf1gcjBgl+VS/gb5zIvxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:3e:39:94:6b:1b:9e:b0:c8:5d:60:6b:ee:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: May 12 00:00:44 2025 GMT
Not After : May 13 00:00:44 2025 GMT
Subject: CN=849e6cef74ff3ae94e1aad8ff6131323932276db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:6a:db:24:53:62:3a:d6:39:8b:bd:da:ce:
57:37:ec:4a:7d:de:be:86:e2:2f:e4:3f:3d:47:0f:
47:ad:cd:f2:eb:2f:f2:76:50:e9:cb:68:9a:fb:a5:
73:6a:a4:41:f2:fc:1b:21:74:aa:1a:37:81:a1:5e:
98:26:9c:ff:7e:24:64:26:60:43:e6:4c:66:25:9d:
0b:fa:9c:5f:08:27:dd:69:2e:eb:98:6a:39:0c:88:
4d:94:e4:cf:f2:a3:12:c1:3a:4d:95:8c:67:c3:dc:
1d:9e:1b:fe:99:cf:5d:74:bf:b5:80:2c:47:31:46:
90:55:35:b9:a8:56:72:9f:32:6b:9a:1d:b4:72:a8:
31:f1:f8:bc:ad:c6:ab:18:10:2c:c2:6a:ff:d9:12:
d4:4d:fb:8a:75:5d:20:5f:29:1e:c2:7e:85:1e:05:
c8:5e:a8:6e:23:68:1f:0b:93:85:59:94:de:2c:5b:
8e:82:78:7b:cc:30:3b:f3:aa:84:4c:c2:9f:8e:48:
e5:1f:f4:fe:11:5a:1a:e2:35:4b:c2:01:83:7d:11:
09:61:af:4b:bc:cf:ad:78:f1:3b:59:08:a5:13:e9:
74:22:f2:3a:32:8a:0b:63:a7:6c:65:21:1c:b2:42:
04:75:d2:c4:81:6c:15:cc:10:23:2f:0f:5e:ea:bc:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:6C:EF:74:FF:3A:E9:4E:1A:AD:8F:F6:13:13:23:93:22:76:DB
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:2f:eb:9f:4e:db:cd:53:67:d8:43:a7:f1:ec:39:6e:cf:
b1:81:09:dc:1c:f3:b8:ac:ae:b8:ab:b3:bc:ad:7d:e1:73:0a:
4c:83:82:1c:78:38:b2:6d:f3:6b:be:a3:af:c4:0e:35:47:72:
40:56:78:3d:4c:6f:24:1f:0f:2d:c1:79:03:a3:71:79:e4:2d:
f2:6f:8f:69:33:7b:ae:0d:68:a1:6e:27:c1:09:13:e3:6f:7c:
10:ab:ec:8d:1c:4e:c7:07:2c:98:55:cd:eb:50:26:a4:7e:ea:
64:6c:43:77:6e:5d:03:55:0b:a9:b0:b4:03:d9:7e:67:f2:87:
9d:cf:25:0c:6b:13:c6:a4:ce:39:25:a0:b9:ad:9c:c6:a4:1a:
15:a0:c8:e0:e4:7d:2a:6a:b2:99:3c:3a:aa:21:44:b2:59:19:
fe:c0:0a:35:84:31:a6:ea:df:0a:ff:c9:1d:c4:9c:60:a8:25:
eb:dc:04:40:15:9a:b2:38:6c:b5:b3:a0:a3:73:ba:0e:af:97:
77:ce:f2:b0:07:ab:ec:5b:2b:56:3d:84:82:b2:95:1d:dc:c9:
a4:0d:2a:76:b7:42:b4:3e:a2:55:07:7a:d0:97:1d:56:0c:d0:
06:d5:6d:e0:4a:16:13:06:4a:4f:53:19:9b:0e:ca:9b:51:7d:
b0:bf:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:19:43 2025 by rpki-client