Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: YB5qO9vj7GGiqflIboGczUMgXArX8eJ9E95uiVc4/sg=
Subject key identifier: 39:07:EA:23:7F:84:20:77:28:A0:0A:45:82:56:42:70:73:D3:47:89
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 01976FD0FD8C333542511E6B72384FDD9967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 19:00:56 +0000
Manifest this update: Sat 14 Jun 2025 19:00:56 +0000
Manifest next update: Sun 15 Jun 2025 19:00:56 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: jLjEZ47YtPrWIEqXBJanKTkkjQa5GWmvBZWgagLXSvE=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:fd:8c:33:35:42:51:1e:6b:72:38:4f:dd:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jun 14 19:00:56 2025 GMT
Not After : Jun 15 19:00:56 2025 GMT
Subject: CN=3907ea237f84207728a00a458256427073d34789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:ff:3d:14:72:44:b2:80:1e:79:c3:5e:a5:
c4:07:72:0b:14:0c:1c:22:81:38:e0:1a:c8:63:f1:
89:97:a5:49:37:10:8d:9f:9a:55:a9:63:d3:87:f0:
54:96:cd:7b:de:6b:9e:67:87:cb:4d:53:77:77:40:
09:a6:e0:0d:f2:85:78:7d:af:e0:7e:3e:dd:72:94:
ab:f6:ed:aa:4f:d3:fe:c4:53:f1:e5:26:f1:ce:44:
bd:e4:54:56:2f:72:af:2b:e2:0f:50:b3:8c:bc:c3:
9a:34:75:1e:e5:18:15:d4:0f:59:e7:c8:f2:28:1e:
a9:eb:f8:f9:5e:1a:71:c6:c9:bd:b3:9d:2e:81:56:
a5:8c:6b:36:a2:0e:da:82:14:2a:96:48:4a:6f:45:
90:11:d3:6f:fa:d0:3d:11:c4:b7:6e:08:e3:96:7e:
84:4e:ea:02:a0:cf:f8:40:29:4b:86:15:fc:ec:90:
ab:3e:07:df:7f:b0:13:2f:ea:ea:51:6e:47:d6:bf:
bc:e9:8f:5b:a8:d9:ae:70:88:8c:f9:bf:e6:94:69:
82:ae:a9:d3:34:ef:1a:2f:f5:52:0a:e5:cd:86:0b:
fa:8e:8a:6b:77:39:a0:c5:f6:1b:c6:ff:a5:62:86:
79:5a:0d:ad:b9:b5:78:1f:27:61:09:ad:70:ca:b8:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:EA:23:7F:84:20:77:28:A0:0A:45:82:56:42:70:73:D3:47:89
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:11:24:6c:5a:80:f1:2b:e5:20:b6:fd:3c:cf:8a:04:da:
cb:d3:a1:ff:73:da:96:be:34:c7:0e:ce:f9:d4:51:2c:e0:02:
b7:91:f2:9b:7e:f0:8f:be:fa:83:05:7d:9c:7c:fc:28:bf:52:
84:ce:45:80:63:8e:2e:e7:c7:f7:3f:2f:1c:27:91:e0:b3:87:
69:8d:02:e8:21:ff:f6:c6:ce:c9:33:42:bb:bd:e7:37:7c:67:
a9:10:a8:62:49:f1:1b:b4:e2:94:ef:98:ec:31:30:fc:d5:47:
4e:1d:a5:15:f8:5d:2f:6c:66:48:9a:f4:d3:c7:14:15:fc:19:
3f:8d:69:ae:c5:05:18:df:f7:c2:24:76:e5:54:dc:c2:fa:1e:
0f:2f:38:6b:4f:10:3a:64:dd:7b:26:be:d7:0c:56:fe:dd:15:
f6:ca:d2:c2:00:41:c4:e6:1e:6e:dc:69:4b:05:6b:bf:a8:00:
dc:e7:eb:60:71:df:f3:b8:89:19:b5:57:14:5c:e3:64:3c:e7:
21:ef:d4:6d:72:0a:4a:bb:1c:5a:e7:a7:b5:13:68:77:ca:c3:
78:43:48:2b:b6:f3:64:84:88:7f:ae:cb:15:08:88:d6:5c:ec:
6e:79:5c:9a:97:8e:da:ea:54:48:60:e5:bd:49:7c:4e:4e:4e:
78:f6:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:39 2025 by rpki-client