Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: xhdexIJSUScX+g8suxKYkbLUdwxOLl9MmwjdN5BGnlc=
Subject key identifier: E6:A6:6A:33:28:CD:D0:D8:90:74:F4:04:54:AC:C6:49:0D:77:88:18
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 0197B7EA961A50FADA45040F51D49B3A356C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 11E6
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: 9yXBJ0VZByab6SPFet0a9dGSTY/c34aYouAYXxgv5dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:96:1a:50:fa:da:45:04:0f:51:d4:9b:3a:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=e6a66a3328cdd0d89074f40454acc6490d778818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:c8:c8:a3:bd:0a:3b:8c:98:1d:dc:c8:3a:
41:a9:71:01:e4:8e:e7:ab:ef:e9:94:a2:d3:cc:14:
c2:a4:ca:9b:17:8c:a1:12:e4:06:1c:12:a2:52:54:
05:2b:fc:a7:2f:e2:16:92:8b:1d:31:b7:42:04:12:
c5:b0:87:76:67:62:75:c8:d6:6f:9c:81:68:b4:5e:
a9:aa:de:1d:d7:77:25:a5:d4:04:cf:f4:ba:c8:82:
21:14:bc:e1:9c:b3:6d:81:07:bb:b9:50:e4:18:85:
8d:1f:e3:a3:eb:15:c0:d5:f0:0f:48:8f:4b:8d:03:
59:00:ec:3e:72:08:f1:5a:c3:52:41:be:f2:22:35:
03:ee:92:69:19:e7:ec:bc:0b:c6:bb:5d:26:6f:a6:
f9:64:30:89:d5:9e:a3:be:58:9e:62:45:8a:7a:02:
b0:f4:46:47:2a:c7:20:fb:f3:2b:b9:c0:9c:a5:9c:
ef:62:8d:1e:f6:f3:22:de:d6:96:e1:7e:38:bd:0c:
02:1e:f4:67:a1:36:bd:15:ac:5e:23:99:01:2f:54:
67:36:18:26:8f:12:d2:f5:7b:b4:eb:9e:07:bc:24:
6a:f9:82:e9:a7:e8:95:23:10:50:8d:66:98:e9:bb:
35:37:eb:fe:c4:92:c5:a6:4a:07:77:f6:00:f6:d5:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:6A:33:28:CD:D0:D8:90:74:F4:04:54:AC:C6:49:0D:77:88:18
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:33:37:33:96:b7:c2:5b:d4:c2:4e:5d:57:b0:5d:f9:95:
90:5f:b4:e9:dc:d6:74:86:18:3e:0a:09:03:0a:84:cc:2c:5a:
2b:a6:c5:8f:73:44:e0:33:f5:7a:2c:73:c6:2e:96:f5:db:45:
d0:b9:80:f2:59:23:b7:d1:7c:5f:93:9e:c3:63:9b:c4:e7:51:
be:13:f8:cd:42:25:7f:c4:ae:28:bf:52:66:6d:a6:fd:89:e1:
d4:e5:5b:ec:47:d7:10:a7:80:a9:f6:29:03:bf:35:b8:0e:36:
9f:ed:16:8a:ed:41:53:ff:96:7d:dd:5c:ed:56:e6:c0:2e:96:
09:c3:75:33:62:8d:47:04:c5:ad:3f:d2:22:a7:a5:36:10:35:
e3:2b:95:c0:0c:25:24:14:89:3c:1f:8b:d9:b3:65:cf:47:29:
e8:3d:34:63:23:9a:1d:98:44:c7:f2:d1:ba:e0:42:b1:2f:75:
0c:f4:c0:21:00:90:b4:b7:e4:49:96:55:bc:0d:42:7e:8b:05:
88:61:e0:7b:36:b0:30:00:0d:e1:5b:f2:c9:13:7e:e8:a4:17:
7a:f6:75:a7:a2:9b:a3:df:ba:b3:69:29:11:f5:71:0b:3a:9f:
b5:fe:b9:6b:ea:03:48:63:4a:14:3e:b6:66:38:99:02:13:b0:
45:04:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:45 2025 by rpki-client