Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: iPUG0O5nvbbYlcE7wW61y2IVk66Rx7nQP9ak3Bs3dMo=
Subject key identifier: D1:71:C2:FB:0D:41:9B:2A:D2:AD:8B:03:21:75:45:5E:11:B2:83:47
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 019848C09B2A5D826A104803A823B4A6BE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 1231
Signing time: Sat 26 Jul 2025 22:00:38 +0000
Manifest this update: Sat 26 Jul 2025 22:00:38 +0000
Manifest next update: Sun 27 Jul 2025 22:00:38 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: ypmTD5hk0u8LdjB58avNH1x7iOknomTvir+vcL6ymJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:9b:2a:5d:82:6a:10:48:03:a8:23:b4:a6:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Jul 26 22:00:38 2025 GMT
Not After : Jul 27 22:00:38 2025 GMT
Subject: CN=d171c2fb0d419b2ad2ad8b032175455e11b28347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:74:83:9d:7d:f0:a4:a4:22:39:07:b3:bd:
8f:2b:35:86:27:10:79:f1:3d:e5:13:a3:03:8f:d7:
ac:8b:c2:f9:9a:4e:79:41:0a:4a:c0:44:f9:2a:f4:
96:7f:59:2a:1e:36:29:68:f5:2e:fa:e2:11:22:d2:
13:d3:30:55:c8:39:c8:c6:d3:be:84:12:af:91:8b:
b0:76:1f:e2:14:76:8a:66:d3:98:6f:88:f0:f0:4b:
80:e2:98:1e:ec:54:23:05:07:9d:ad:02:18:d6:30:
6e:81:69:32:35:9a:a7:ff:d0:eb:ef:20:a2:10:d6:
1b:e6:6d:76:12:60:87:ee:7b:52:1d:e8:c0:2f:1d:
33:6f:96:bf:1e:e3:c2:98:1a:11:a1:7e:47:8c:65:
03:15:30:bd:21:43:34:65:f3:c0:da:6e:b2:95:f3:
f8:e9:bc:7a:d6:2e:50:bc:5f:d8:1a:57:ee:bf:be:
de:f5:da:ac:33:7d:fe:6c:e0:f5:ea:52:72:73:2f:
38:49:c0:a4:0d:1b:a3:2f:60:33:94:87:05:e8:b1:
e1:b9:8c:32:b4:b3:11:ea:7b:69:2b:9e:4e:e8:ef:
44:6f:fb:21:0e:81:55:b2:4f:40:f9:cf:4b:d0:7b:
4b:99:07:6a:74:85:e7:f2:f8:bc:3e:a1:61:68:96:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:C2:FB:0D:41:9B:2A:D2:AD:8B:03:21:75:45:5E:11:B2:83:47
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b0:e5:ca:3f:57:5f:cd:05:b4:e4:26:eb:93:6e:7e:42:0e:
04:5b:16:5d:ce:2f:29:8d:f4:26:21:ae:ef:fc:b9:7c:6c:8b:
2b:59:87:8f:7d:40:f3:e0:92:9d:c3:71:10:af:28:33:97:8f:
9e:89:13:b8:63:e0:b7:a8:3f:dc:9f:f2:43:65:a4:dc:73:54:
0a:d4:48:13:38:fb:dc:20:8e:8c:9b:97:25:54:7a:b7:52:44:
a6:62:5b:ff:03:f5:08:55:a6:56:34:be:12:92:c2:86:70:bc:
51:e4:fc:c6:c6:62:87:5b:dd:b3:71:c0:cd:14:14:c0:53:3d:
cc:2b:9e:c7:9e:f8:a4:1e:b0:1a:dc:a8:26:b8:04:65:2d:be:
92:0b:5f:11:98:e7:72:a5:37:d0:73:72:af:d6:d0:0d:10:4b:
10:46:79:ef:07:eb:f0:b6:11:de:af:95:41:dc:fb:7e:44:44:
a4:74:34:76:09:32:a7:eb:f4:b5:3d:78:ef:6d:b1:00:50:6c:
e2:9d:f3:78:e2:b9:27:d8:9b:e4:80:25:6d:21:91:68:6f:b1:
f6:37:6c:19:1f:6e:b5:75:83:82:bb:b0:92:0b:8c:99:97:f6:
bb:a9:e1:74:a5:35:40:03:43:50:63:d9:57:0a:af:34:83:38:
b5:10:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:55 2025 by rpki-client