Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: qYhBs1+FwAY8xkx2Uq/zfvoUD0OP/s3NA1n5VHJyM1M=
Subject key identifier: E0:0E:DA:FC:55:0C:56:EE:BF:5A:9B:72:50:CE:16:35:F7:07:9E:F4
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 0196B33415192291F9F4F5FA7105245E2D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 115F
Signing time: Fri 09 May 2025 04:00:56 +0000
Manifest this update: Fri 09 May 2025 04:00:56 +0000
Manifest next update: Sat 10 May 2025 04:00:56 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: npw2LHoUQgeLKmLKxlWaZTLDuNsnjdo+Kp5/DmzNdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:34:15:19:22:91:f9:f4:f5:fa:71:05:24:5e:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: May 9 04:00:56 2025 GMT
Not After : May 10 04:00:56 2025 GMT
Subject: CN=e00edafc550c56eebf5a9b7250ce1635f7079ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:e2:04:99:d7:df:ce:e6:b7:7b:98:2b:a7:
fd:5b:ba:66:2c:88:cb:85:0d:0a:25:13:8c:63:a9:
e8:f0:0e:14:45:7b:d3:32:e7:06:f4:fb:6d:5e:fc:
5b:24:ce:01:ad:bd:c1:fa:48:a8:b8:94:cc:2f:9a:
06:e1:8a:43:e5:fd:7f:e0:f9:ab:34:0f:04:55:5d:
af:89:5d:e2:21:1c:6f:2d:76:bb:f4:a2:00:14:dc:
36:6b:3f:47:5c:a8:e8:eb:e8:2a:b6:de:24:8c:c7:
2d:3b:de:be:ce:6e:97:27:f5:b8:16:1f:06:d2:e6:
a0:b9:9d:ea:01:5f:3f:73:9b:3d:73:44:a5:09:1d:
14:b6:bd:79:3f:b2:ab:77:5d:52:08:18:d4:6c:29:
78:ba:a9:69:cb:71:d6:48:8b:e1:c7:2b:c3:ef:f8:
d6:65:48:02:af:95:34:8a:5a:9a:8c:c6:4a:df:80:
cc:e3:2d:22:41:62:07:91:9f:6a:44:a4:af:6e:86:
57:aa:ff:07:24:15:f2:21:3b:7a:36:e1:77:93:7d:
0c:d9:b5:c3:96:05:b7:58:79:76:73:6b:ea:f1:7e:
68:d0:6a:5e:92:b9:9d:58:e8:be:77:2c:06:da:22:
ad:66:97:7e:5b:94:35:97:f7:a7:1e:5e:0d:de:4a:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:DA:FC:55:0C:56:EE:BF:5A:9B:72:50:CE:16:35:F7:07:9E:F4
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:31:17:be:ef:98:7d:e5:e9:0d:33:9f:e9:6a:82:fc:6e:
df:ad:77:39:5a:8a:1b:e3:7f:5e:c3:dd:2d:62:56:54:5d:ef:
28:3a:17:f6:24:1d:57:31:66:0d:94:9b:84:99:03:08:5a:ed:
40:19:a6:6b:f9:d9:78:1c:9b:a4:d6:97:42:6f:d4:59:41:8c:
79:d1:3e:0b:c7:d6:10:05:2d:8e:dc:c6:25:2b:ae:ec:25:26:
f9:7d:8c:24:aa:6b:e4:89:c9:47:50:e7:9b:0f:76:89:78:5c:
72:25:2e:48:c6:67:10:aa:fc:95:bb:ae:93:e6:1f:60:b2:cb:
a9:2f:8e:9c:22:a9:ee:f1:e0:69:fe:0f:8b:f0:42:07:40:e8:
50:54:43:4d:1d:97:fd:e3:df:2a:ca:40:6c:1f:a8:ae:83:19:
31:9a:82:9e:e9:b3:98:cc:58:46:2b:a5:a5:a0:b2:aa:75:b3:
87:22:79:00:58:88:12:67:cd:7e:44:b8:99:09:fa:ed:ee:54:
1c:8b:3f:9c:2f:fd:6e:f7:da:ec:b0:27:21:02:a3:a7:4a:d1:
8c:9a:7d:25:57:b6:13:86:b9:35:cf:29:9a:ca:3b:f8:7c:d6:
bd:72:59:2f:17:70:65:ae:79:97:97:eb:f6:e5:87:54:24:60:
5f:36:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:12 2025 by rpki-client