Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: 8qPkZG5FLTLD1LDQnvl46yQ5ri1Z8wIHo7EroILsRW8=
Subject key identifier: 56:DD:15:45:6A:56:74:59:1F:A2:C0:50:5C:39:76:54:37:48:FA:AE
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 01987CE5138042F0822EBB0B958D009B01E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 124C
Signing time: Wed 06 Aug 2025 01:00:44 +0000
Manifest this update: Wed 06 Aug 2025 01:00:44 +0000
Manifest next update: Thu 07 Aug 2025 01:00:44 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: A5NPHx1Fs56cep0vVebNWkcRxnyXgWElBnphe1GwSYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:13:80:42:f0:82:2e:bb:0b:95:8d:00:9b:01:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Aug 6 01:00:44 2025 GMT
Not After : Aug 7 01:00:44 2025 GMT
Subject: CN=56dd15456a5674591fa2c0505c3976543748faae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:07:7b:81:ad:14:bb:50:8a:a5:b8:9c:0b:
ef:82:c1:6c:7b:8a:07:7e:2c:68:06:7b:d9:a1:51:
ab:b4:b0:ec:19:7e:e4:78:49:d6:6e:22:74:0c:74:
32:29:ea:9e:8d:ca:30:7b:10:4c:2c:9d:a1:34:c7:
10:db:ca:d1:b8:a1:55:74:ec:74:7c:1a:54:28:91:
98:dc:6d:62:66:5f:63:45:6c:7d:e9:19:50:ed:0d:
98:90:a6:3c:40:b0:eb:27:87:64:f2:8a:ef:e3:db:
7b:56:b2:3b:a3:ee:64:89:74:26:6d:45:d1:ea:d1:
9d:5e:ff:80:3d:c4:23:3e:a4:d5:97:ff:e5:03:63:
74:f2:d1:f0:d4:01:d1:81:96:3e:a8:ea:2d:00:9b:
01:10:80:a5:c6:31:8c:6c:e0:42:9b:bd:a4:f1:2c:
3d:84:8d:10:79:7b:09:6c:7a:aa:96:e7:e5:f5:de:
60:f9:9f:ec:25:d8:e4:c6:ea:bc:ac:e1:b9:cc:83:
62:4a:2b:08:03:4b:86:45:96:f0:9d:d8:cd:b6:02:
57:81:cb:67:2a:46:e5:20:ea:fc:b5:23:e6:8e:05:
4f:14:98:80:4f:90:de:90:eb:dd:bc:98:50:bd:3c:
a2:86:12:a1:65:d4:f6:18:c6:44:bf:f6:96:ab:2f:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:15:45:6A:56:74:59:1F:A2:C0:50:5C:39:76:54:37:48:FA:AE
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:03:ac:03:a5:78:57:bc:22:bf:c7:e6:6c:9a:c5:03:0e:
3b:47:63:f6:b8:a1:44:3c:f5:ff:1d:4b:36:48:bd:ce:4c:6f:
f7:6d:17:98:26:99:79:00:66:83:e5:75:05:3f:0d:6f:6d:ba:
ea:1c:9e:96:02:24:5a:aa:1b:95:df:f9:af:62:22:0a:84:b6:
c2:e7:ba:aa:8c:5c:18:94:7b:09:d1:09:7d:b2:bd:8b:10:f9:
90:82:40:ad:60:83:a0:ba:ca:32:cf:78:c5:79:95:9b:e0:1b:
54:c0:cd:06:26:46:74:71:19:59:5b:64:af:f5:34:2e:3b:6e:
fb:fa:1e:7a:6f:0d:58:98:57:39:52:e9:3f:42:1a:88:20:61:
57:f1:15:a4:8f:12:b8:75:08:fa:a0:d2:aa:e1:dc:f6:ec:f2:
eb:df:ac:5d:ac:d9:0e:57:81:cd:53:d1:7b:59:58:04:40:f9:
38:ce:e8:db:19:16:dc:2b:16:4d:90:ad:8d:7e:61:0c:c0:26:
f7:3f:af:ef:e4:e7:b0:40:7d:5f:4d:a8:16:75:5e:1c:10:f5:
10:ce:5a:6d:d3:74:50:7d:bb:0f:a7:3b:05:21:26:59:df:ba:
6f:32:99:90:e3:43:6c:78:20:42:92:5c:dd:62:18:fd:b9:79:
15:d0:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:50 2025 by rpki-client