Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: LrkMbPNrFUUDAfm8Gac3yR7BBRNBg6mHDjBDHXUQoCg=
Subject key identifier: 9A:C7:33:03:9E:50:B2:6B:B9:5E:5C:54:D7:36:D8:A2:1F:FD:08:61
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 0197B70E6EC813F9420C776094840D627AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 0436
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: gSEZrol91UxCJZrxyQDdyroiRAcVTC10LxZXgzUN5zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:c8:13:f9:42:0c:77:60:94:84:0d:62:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=9ac733039e50b26bb95e5c54d736d8a21ffd0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:7e:03:fd:f1:9e:ff:00:44:5f:78:fd:80:
2f:85:42:49:f6:8c:8d:3f:42:df:bb:93:5e:bb:6a:
da:71:75:c4:7f:f9:b2:36:61:69:d9:c7:92:37:4b:
a9:80:fe:90:65:f0:f4:83:5f:70:b6:e9:34:de:a7:
c3:13:4a:a1:09:a6:a7:01:05:74:a8:56:91:8f:42:
78:e9:5c:9c:3c:dd:35:18:31:c7:03:45:1a:18:f4:
3c:16:9c:a8:57:0e:15:db:3b:c3:7f:30:98:a8:03:
e4:dd:1e:64:03:b1:cc:73:b1:8c:36:f7:fa:8d:de:
48:a9:94:c6:72:ed:93:42:f4:5d:ea:06:90:83:b9:
99:7e:34:0a:93:70:93:f9:1e:bd:05:96:5f:11:e4:
5d:de:c1:9e:89:f6:21:84:61:16:d1:5f:e1:bb:6c:
d1:fe:8b:83:5c:3f:32:1d:98:c1:4c:e0:e3:40:d0:
1f:01:8a:76:7d:8a:88:27:1a:c6:b7:3d:06:b9:b2:
9f:0d:62:9a:d5:69:1f:98:58:19:e7:09:09:06:4c:
72:5f:cf:36:44:3b:59:3a:5a:25:82:41:b9:7f:8e:
24:1a:dc:c1:20:c9:9b:cc:92:c1:34:20:07:22:b9:
de:bd:df:94:1c:77:4e:51:2d:1c:39:fd:28:56:dd:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:33:03:9E:50:B2:6B:B9:5E:5C:54:D7:36:D8:A2:1F:FD:08:61
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:67:0b:c0:43:11:4b:52:65:32:6d:ca:98:8f:1e:2b:31:
b8:e1:10:d9:f9:4b:f1:02:1e:1f:ab:a6:31:2f:4e:71:00:91:
5e:00:e2:b9:8f:40:f3:11:f9:1c:c2:dc:7f:22:a7:6f:a8:40:
62:2d:f7:a5:e3:9a:f8:da:26:ea:73:a0:2a:68:d3:23:07:6f:
0a:5d:55:6a:44:4a:ff:8f:58:9a:98:2a:09:06:8c:18:9c:29:
21:62:57:ce:ae:30:6f:48:82:fe:fd:5f:8b:b0:9a:c4:46:63:
99:cf:35:67:14:fe:59:65:0d:52:06:a9:c5:a4:ca:4c:85:91:
4a:d6:3e:56:cb:12:69:68:cb:04:29:a9:c3:36:2c:9e:54:8b:
8a:3d:16:c2:7f:0b:ea:40:47:a5:30:13:a9:49:f5:cd:47:5e:
c3:a6:ae:08:bd:53:a0:c8:0d:66:e0:5d:5d:3d:3e:25:06:d9:
d7:31:28:9e:fb:8d:ef:2d:bf:c6:63:54:d2:05:ae:c2:b9:58:
37:c5:31:b5:a0:d8:52:c9:0f:7e:98:6c:2a:33:9d:9b:68:1c:
06:a5:e1:9d:31:84:6b:86:a4:64:db:21:8e:e5:03:f1:0b:6d:
c8:86:f0:27:b9:b5:0d:21:a5:f4:72:c5:7a:57:13:e4:93:c3:
d6:e1:6d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dm7IE/lCDHdglIQNYnrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MWZlMmVmZGRhYTAwYWM1ZTQ3ZDFjMmQ1NGIwNGI5NjEw
N2E5NDUwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
Eyg5YWM3MzMwMzllNTBiMjZiYjk1ZTVjNTRkNzM2ZDhhMjFmZmQwODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbt+A/3xnv8ARF94/YAvhUJJ9oyN
P0Lfu5Neu2racXXEf/myNmFp2ceSN0upgP6QZfD0g19wtuk03qfDE0qhCaanAQV0
qFaRj0J46VycPN01GDHHA0UaGPQ8FpyoVw4V2zvDfzCYqAPk3R5kA7HMc7GMNvf6
jd5IqZTGcu2TQvRd6gaQg7mZfjQKk3CT+R69BZZfEeRd3sGeifYhhGEW0V/hu2zR
/ouDXD8yHZjBTODjQNAfAYp2fYqIJxrGtz0GubKfDWKa1WkfmFgZ5wkJBkxyX882
RDtZOlolgkG5f44kGtzBIMmbzJLBNCAHIrnevd+UHHdOUS0cOf0oVt1YvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrHMwOeULJruV5cVNc22KIf/QhhMB8GA1UdIwQY
MBaAFEgf4u/dqgCsXkfRwtVLBLlhB6lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3Yzkt
YWMwOTIxNDA5NjdlLzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3YzktYWMwOTIxNDA5Njdl
LzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC5nC8BD
EUtSZTJtypiPHisxuOEQ2flL8QIeH6umMS9OcQCRXgDiuY9A8xH5HMLcfyKnb6hA
Yi33peOa+Nom6nOgKmjTIwdvCl1VakRK/49YmpgqCQaMGJwpIWJXzq4wb0iC/v1f
i7CaxEZjmc81ZxT+WWUNUgapxaTKTIWRStY+VssSaWjLBCmpwzYsnlSLij0Wwn8L
6kBHpTATqUn1zUdew6auCL1ToMgNZuBdXT0+JQbZ1zEonvuN7y2/xmNU0gWuwrlY
N8UxtaDYUskPfphsKjOdm2gcBqXhnTGEa4akZNshjuUD8QttyIbwJ7m1DSGl9HLF
elcT5JPD1uFtMw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:14 2025 by rpki-client