
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: TLtPt03GEJYMreq0zZ/J8HwG8RtwpqhYph4/9EvxpzI=
Subject key identifier: 87:13:B7:43:8D:54:BA:03:FF:B3:15:66:80:94:2B:AE:2D:F7:2B:1E
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 0199FF22D890369310EFD307E9B232165CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 1314
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: 7Ur6DDhqvfPKVax6oKRbXV4ZVhedOhouuMPvwsv0d3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d8:90:36:93:10:ef:d3:07:e9:b2:32:16:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=8713b7438d54ba03ffb3156680942bae2df72b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:f4:a0:0f:f5:1c:61:f5:64:cb:40:52:ae:
db:f2:92:e7:a8:74:31:6c:a4:50:05:65:98:1c:e9:
11:23:c1:82:8d:d1:fb:92:58:78:9c:49:b0:0c:a3:
f2:76:54:c8:cd:c1:0e:08:06:83:6b:53:ef:1f:bc:
d4:36:f1:19:38:fe:d2:31:cf:ec:68:94:13:43:9c:
ad:dd:c1:d6:f7:a9:90:f3:e5:5e:fe:72:90:24:61:
08:88:16:42:76:d2:77:a1:db:74:6f:20:01:c0:a9:
1a:86:c9:44:4c:8d:79:e0:88:bd:6e:bf:cf:d7:d3:
7b:ee:73:23:5d:4b:98:5e:42:e7:83:e4:27:45:66:
98:ae:28:e5:8b:30:2e:a6:be:2d:fa:64:81:94:e3:
b2:40:e9:e3:09:41:1e:11:07:c1:b3:ee:6b:0f:6d:
a5:cc:c9:52:33:67:2e:6e:84:8f:e5:b5:6a:bf:dc:
7c:b7:0e:4a:a9:29:74:a5:b1:d1:6c:95:1d:a0:3e:
78:cf:ab:ca:9d:d0:20:09:77:24:4c:e8:5f:06:f4:
fd:cc:eb:ca:e3:6e:29:7a:9c:eb:32:26:51:8a:2a:
da:2e:c4:65:84:4c:87:73:f0:2d:33:6e:1c:2e:8e:
81:b3:a6:aa:87:1c:da:41:cc:85:54:0a:d2:68:4f:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:B7:43:8D:54:BA:03:FF:B3:15:66:80:94:2B:AE:2D:F7:2B:1E
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d0:9c:a2:61:c3:72:bf:e0:82:85:9f:62:55:84:7e:93:55:
30:e1:01:2d:87:ed:26:87:2f:bb:d1:1e:ff:fb:f7:f3:cc:1a:
72:96:d8:cb:1c:79:1b:e9:be:9e:96:fa:96:a7:e9:a7:7b:55:
9e:07:f9:7e:ed:01:9f:a9:2b:17:50:96:84:7c:ec:44:06:d5:
70:4b:15:cb:44:47:a1:a5:ac:d8:78:be:fe:d8:04:ea:72:2c:
ad:ab:d8:02:53:8a:f8:b9:1e:ac:c2:56:1f:6a:75:c4:2b:40:
83:63:c3:37:b3:c7:47:23:8d:13:4b:02:d8:e7:14:1a:17:15:
5a:0b:41:9c:e0:88:c0:e2:33:ad:c7:3b:cc:ad:90:d7:d9:8f:
e1:8e:98:93:d4:bf:a4:5f:17:0a:90:d0:20:9d:19:28:c2:cb:
3c:76:39:79:da:d0:6c:df:f4:9b:a0:f2:b7:aa:7d:c9:8f:cb:
51:a5:67:8a:de:f5:83:aa:f8:54:3b:98:d0:b1:a6:f1:e1:d6:
1b:e0:6a:db:7a:5d:fd:0d:45:44:8b:70:f0:95:0d:24:22:b6:
eb:4d:2b:00:91:07:97:f2:65:17:8d:21:a8:47:c6:87:ed:7e:
b3:71:e7:4e:c8:91:c5:ff:e6:24:b2:2f:20:5a:ab:83:21:a2:
f7:12:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:21 2025 by rpki-client