Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: kuXFmCIPCwEcR7R3lyXglbGb5el32agT0GeMEhCOB9M=
Subject key identifier: C0:8D:7D:26:CD:6F:D4:B7:6A:5E:5F:06:9D:C8:00:23:ED:BF:D1:47
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 0197B9D8FABE1EF4D9D2F075D8281EF80C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 0976
Signing time: Sun 29 Jun 2025 04:01:34 +0000
Manifest this update: Sun 29 Jun 2025 04:01:34 +0000
Manifest next update: Mon 30 Jun 2025 04:01:34 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: KIvZhQWwuHeFeafqqvqg1Xr47SH+9/AJ/KY8EIFncaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:fa:be:1e:f4:d9:d2:f0:75:d8:28:1e:f8:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jun 29 04:01:34 2025 GMT
Not After : Jun 30 04:01:34 2025 GMT
Subject: CN=c08d7d26cd6fd4b76a5e5f069dc80023edbfd147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:9a:1b:c1:53:4e:b0:21:dd:a0:be:7d:63:
67:7d:d5:00:3c:48:a3:48:72:ef:ae:b3:dd:f1:81:
16:95:95:4e:d2:4f:eb:07:dd:06:36:15:ef:a2:ed:
9d:f6:fd:df:b3:78:a5:47:f9:2c:af:f1:98:e4:e1:
b2:47:bc:7c:ba:02:db:a0:6a:62:56:96:f2:be:b5:
89:56:49:85:9d:41:8a:fc:4e:7f:46:49:55:7b:89:
ae:2c:67:7b:d2:b5:e6:39:4d:fc:b4:48:b8:0b:5d:
f7:67:3d:60:83:12:6d:7c:4e:a5:e6:20:33:d3:71:
7f:a6:14:ec:5c:ef:ea:51:f9:6b:f0:b3:10:47:b4:
d6:d4:85:7c:dc:1b:61:33:46:9d:6f:58:8c:aa:78:
15:67:24:0a:d1:56:da:9f:96:db:3f:31:ca:cb:7d:
92:8e:90:f8:5e:7b:1c:74:23:5a:06:78:80:5f:d0:
c4:34:a7:53:92:0d:09:ac:b1:bd:5e:fb:90:04:83:
11:ef:82:fd:59:83:4a:d9:ec:71:8e:bd:bd:ee:7a:
26:39:ff:db:20:24:57:2f:37:60:86:77:49:5f:d8:
40:08:17:2a:72:74:77:7f:5e:d5:7d:a1:39:61:4f:
f9:75:e8:24:88:83:19:84:d9:be:20:cb:e2:00:94:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:7D:26:CD:6F:D4:B7:6A:5E:5F:06:9D:C8:00:23:ED:BF:D1:47
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:89:a3:ed:97:82:84:66:2b:2b:be:be:22:48:3d:60:32:f9:
90:81:fe:16:cd:16:f8:9b:fb:38:6e:ce:1e:55:7a:20:54:c9:
a0:b3:b6:66:7e:39:02:5e:9a:75:e6:03:f8:f3:b1:c5:c4:13:
39:48:57:a9:6c:c0:a7:5b:43:3a:4e:43:61:e9:98:e4:fa:d5:
87:cc:ed:5a:95:ae:ea:2e:1c:ce:cd:96:40:4f:7a:41:f0:a1:
ba:a7:77:c0:e9:5a:7f:5a:3d:e7:23:ed:d4:e9:61:97:31:e8:
6f:54:68:75:35:c6:34:36:9a:15:2a:01:00:91:e1:8b:93:f7:
32:39:1b:e2:fb:96:a3:82:65:2d:74:37:da:72:22:f9:76:c1:
24:31:dc:a9:a9:d8:35:cf:63:c7:3d:0a:62:56:b1:80:f7:58:
fc:82:24:47:84:47:ae:f2:b5:48:ee:f0:11:1b:55:e6:05:fe:
c8:94:8b:2e:ea:d0:a0:a9:80:98:55:42:b7:ce:0b:19:6a:4d:
af:13:5b:5f:b9:be:37:31:fe:a3:85:4a:98:a4:21:ea:b2:3a:
3a:f7:f8:d5:52:74:99:c5:41:27:db:e5:ca:29:37:de:66:ed:
36:0c:a4:64:58:19:f3:36:93:5a:e0:27:37:0b:8d:e1:41:9d:
b2:a7:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:00 2025 by rpki-client