Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: 4XZFdDkFbOdxfEGWDVnWYx95QfL8WnKSeqlyaE96DHs=
Subject key identifier: 8F:BA:23:28:DC:53:83:83:80:A6:22:95:13:F1:FD:B8:AE:5F:0B:DE
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 0198D5BBD3ABBD5B2E0641C80B67F2D07BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 127A
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: FgupkmmslbAXbXoKCK5c5nPr4PEFZaTFYDMOkZqNbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d3:ab:bd:5b:2e:06:41:c8:0b:67:f2:d0:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=8fba2328dc53838380a6229513f1fdb8ae5f0bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:88:1b:26:60:d8:3c:a3:f1:c6:75:a1:11:
eb:e5:3a:49:39:be:37:66:18:08:f8:22:74:aa:a5:
c7:97:4d:54:29:38:2b:00:2c:24:40:be:9f:cc:f9:
39:21:12:58:ff:b7:d2:bb:a7:79:64:30:80:2d:13:
83:51:29:fb:69:52:9b:2d:2e:67:cf:be:c9:a1:4f:
fc:84:a9:69:bc:c3:25:e4:11:20:5f:a5:75:10:8c:
7b:43:d9:44:fe:bd:87:4e:d7:4f:bc:5d:7e:7d:a5:
51:e9:8f:2e:db:13:83:60:ed:f8:48:fb:fc:ce:41:
f6:69:61:bc:53:74:4a:8f:53:88:a9:af:21:93:67:
11:c7:93:64:7f:7d:28:37:fb:33:63:5a:f4:27:fc:
16:76:11:09:54:d3:97:fb:29:08:f2:f4:3d:0e:17:
de:52:e7:74:b5:19:cd:57:e0:a3:94:2b:82:a9:e6:
99:cf:65:dc:eb:c0:c9:0c:26:11:75:21:c4:72:51:
f8:90:d8:7d:f0:13:f3:f8:49:65:f6:73:8b:6b:00:
c3:f3:fc:ef:be:0b:0a:7e:8e:b0:fc:db:9f:90:29:
24:94:8d:1b:3d:a5:06:a4:87:c1:61:a4:0d:23:b9:
9e:de:e0:66:68:93:bb:4e:f7:2e:8a:54:0c:41:10:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:23:28:DC:53:83:83:80:A6:22:95:13:F1:FD:B8:AE:5F:0B:DE
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:f3:28:8b:0c:9d:8f:ce:ac:b5:e4:51:f5:cf:58:3a:0b:
f9:a4:c1:95:d9:79:dd:cc:be:b5:af:d1:e8:8d:d0:8d:29:e5:
a2:d1:10:52:a6:dc:b0:61:5c:b8:b7:7f:30:fe:6b:3f:27:f9:
98:d6:d9:be:e4:6e:5a:c6:cf:78:5c:8a:16:db:f8:48:6d:b7:
d8:c1:d1:3e:8a:0b:1d:00:0f:61:4e:da:8d:3c:3e:72:59:1c:
dd:55:03:16:62:e9:cf:be:fd:60:e5:70:e2:f3:a8:66:35:d1:
4d:a7:ed:b2:f0:38:32:4a:dd:12:6f:ef:70:3a:69:86:2a:b3:
b2:aa:04:24:d0:60:4a:53:4f:09:c9:09:cb:ca:5d:1d:d3:1d:
58:31:b7:26:bc:cb:4b:e2:64:89:34:6d:4c:cd:15:83:12:ff:
fe:f9:28:98:66:5c:14:95:d8:03:b2:3f:4c:80:6a:9f:81:8b:
62:55:4c:24:39:a2:94:31:3e:61:36:84:2c:8b:eb:c5:0b:88:
16:0a:15:42:50:71:66:1f:ef:63:40:53:87:06:91:5a:dc:1a:
ad:e1:5d:8f:1f:93:31:e0:d9:13:40:e1:98:9d:2e:55:07:b8:
f3:eb:7f:3c:b7:80:66:51:80:9f:fc:67:10:ce:69:90:2f:85:
18:6a:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:26 2025 by rpki-client