Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: wT6s6r6HxRew3wrsYL6jlNJx68ZsZ/DdZfx+7wDubjI=
Subject key identifier: A4:3A:7E:B8:A2:86:32:3D:EC:54:65:D7:EF:7A:D8:3B:D8:57:CF:63
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 01968E82F3DADD5387A82E44F33CB6D26B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 114C
Signing time: Fri 02 May 2025 01:01:08 +0000
Manifest this update: Fri 02 May 2025 01:01:08 +0000
Manifest next update: Sat 03 May 2025 01:01:08 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: a/pG4E2UBh0TVInYCJIXXjwJ4EngHCoApxh3edrDveU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:f3:da:dd:53:87:a8:2e:44:f3:3c:b6:d2:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: May 2 01:01:08 2025 GMT
Not After : May 3 01:01:08 2025 GMT
Subject: CN=a43a7eb8a286323dec5465d7ef7ad83bd857cf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:73:66:09:75:5d:22:72:6c:43:38:fb:2c:
0c:5e:2f:f9:15:17:46:e7:0f:1b:23:67:b3:13:19:
c2:6b:78:ec:b8:1f:c0:d1:34:22:ef:a7:1d:11:2f:
84:ca:d1:f2:15:cc:94:91:22:02:38:d3:aa:14:06:
75:4d:37:92:43:b1:e5:aa:e1:d8:42:50:52:97:41:
cb:47:d0:db:71:3f:71:e0:83:a5:c0:52:a0:6a:f7:
3f:9c:38:a3:fe:2f:7e:14:6c:41:ba:b4:2c:86:92:
22:63:2a:63:3c:dd:80:eb:59:59:4f:03:3e:2a:f4:
0a:ec:07:54:63:14:6e:f1:47:3f:47:57:ee:a7:6b:
91:90:16:ae:28:63:96:5d:3c:6d:8e:74:63:e9:26:
37:23:94:07:43:20:6e:ae:29:59:f3:06:ae:0e:5b:
33:cd:bc:16:5a:21:36:c8:4c:31:cd:84:4f:f1:a7:
66:b9:86:12:c5:22:0b:c3:52:20:7f:01:2f:5a:2c:
03:f9:d1:16:9c:72:82:f5:fd:54:d1:21:fb:1d:ff:
c7:1e:f8:b5:a0:0f:4c:99:72:c0:40:08:53:b4:a4:
cb:81:33:d8:43:26:81:e3:aa:35:bc:4e:5c:94:ae:
2a:ed:b3:20:ff:2b:90:ef:2b:85:7e:ae:93:50:a5:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:7E:B8:A2:86:32:3D:EC:54:65:D7:EF:7A:D8:3B:D8:57:CF:63
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:86:eb:3d:71:28:58:7c:15:ea:cd:f4:cf:cf:96:63:84:4c:
86:e5:28:4a:d6:9e:2e:7d:b7:ba:b5:6f:59:29:23:72:ff:cd:
ba:ff:85:2f:b7:6f:83:90:19:e4:4a:82:cf:08:ae:01:eb:b6:
9a:6e:7a:b0:61:78:08:dc:08:b2:89:7d:8a:14:d1:e3:a4:c3:
27:b9:0b:d5:b4:fe:81:da:e5:37:c0:c4:c7:0b:44:ca:ea:c9:
88:c7:47:58:0b:1d:e3:6b:c0:a7:5b:5e:6d:0f:ac:9b:a3:de:
60:51:15:88:e8:88:a7:8e:c2:35:7e:45:8f:67:06:9d:96:10:
0a:cb:65:a2:a6:fb:dd:98:d5:9c:da:0d:78:ec:1b:81:8d:0d:
95:ff:40:49:7b:6f:0e:72:8b:b5:9c:96:96:b0:ed:f0:18:c9:
31:b1:ef:5c:6e:d9:e0:c7:de:73:e1:af:bf:06:e3:9c:5a:3a:
94:3f:22:7f:3e:9f:7a:43:fe:c2:9d:2a:58:f5:b7:b6:c4:26:
57:6f:9a:24:c4:a6:ce:1a:79:63:e8:35:c7:70:29:e0:73:b3:
ae:04:00:a5:0d:36:9e:2f:60:08:ff:31:c8:3b:0f:3e:d9:81:
76:4b:72:06:f8:1e:c8:b3:24:61:f0:65:f4:15:33:b3:56:50:
52:df:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:22:50 2025 by rpki-client