Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: j/Q3Lyb851W0khFstb0dHuaTe4ppwEAbnXLvFrocfMo=
Subject key identifier: AC:09:35:F6:EB:B8:BC:70:C5:66:E5:27:D9:24:D6:AF:1D:BC:75:E7
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 019A50070B353F646BB23EDD536E15A4090E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 18:00:30 +0000
Manifest this update: Tue 04 Nov 2025 18:00:30 +0000
Manifest next update: Wed 05 Nov 2025 18:00:30 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: hPcEZcacoHyDkNVQSuJueMnfYKu9R8oXRp1z6hYCXfQ=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
3: x3_1xiv-NQfFznfpCLWxiJi7a90.roa (hash: Cqgk6ziv4FZVRmKg6qsSirIsfpT7hD739QyYsLmilF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:0b:35:3f:64:6b:b2:3e:dd:53:6e:15:a4:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Nov 4 18:00:30 2025 GMT
Not After : Nov 5 18:00:30 2025 GMT
Subject: CN=ac0935f6ebb8bc70c566e527d924d6af1dbc75e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:08:f3:69:92:30:73:7a:62:b9:98:57:ed:
cd:16:ef:cd:d5:76:d1:c4:de:08:e4:bd:74:38:6c:
b2:f2:02:3e:54:f0:fd:c0:5f:ab:2d:d1:45:1c:b8:
94:37:bd:7e:43:5d:29:fe:41:29:d7:6d:71:00:47:
f4:b3:05:4b:86:db:fa:b3:62:0f:5c:e5:a9:61:c6:
df:87:08:dc:c9:fd:48:0f:7c:b7:5a:47:6d:be:ba:
19:6c:5a:31:19:4e:bc:11:bf:9b:c4:01:a7:2b:35:
05:53:6e:a3:15:25:91:ac:80:71:1e:a1:62:dc:5d:
40:14:9a:b7:c6:a3:32:cf:98:a4:60:30:ab:25:f5:
f7:8a:0f:0f:a0:b5:5b:89:fd:be:d2:c4:cd:25:e7:
a6:72:fd:2a:38:24:2a:ba:c9:4a:88:a8:30:f7:b1:
5b:be:01:2a:64:52:4d:65:2e:b6:14:c3:5c:01:67:
57:7e:45:8d:08:6f:9e:99:24:43:75:14:53:8f:92:
6a:b1:83:72:16:2a:4e:8a:06:94:e0:82:21:46:f8:
1f:38:0e:05:de:40:9a:bd:97:1a:eb:16:90:f3:b2:
5e:96:16:96:8b:ac:aa:bb:9a:43:a6:0a:26:11:76:
4b:b4:cc:77:90:83:4d:22:4e:c3:74:e1:f4:00:8d:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:35:F6:EB:B8:BC:70:C5:66:E5:27:D9:24:D6:AF:1D:BC:75:E7
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:56:24:b7:7e:43:42:72:f5:98:cf:28:fe:dd:d5:33:c1:
5c:15:bf:08:d3:2a:f8:69:ec:e9:a9:f1:cb:eb:31:69:a9:88:
e3:1f:89:2d:78:67:24:c7:cb:1d:fb:ec:36:81:99:f8:07:6a:
9b:18:28:c6:1f:f8:16:8d:4d:02:ff:bb:77:95:83:97:14:87:
bf:ac:77:d2:26:38:09:6c:0a:c9:4b:90:35:f6:cf:0f:ec:8c:
1f:3a:43:50:4c:06:f3:fc:d3:65:3f:2e:be:e7:4e:b0:e5:ff:
ec:d0:62:8f:df:30:8b:1d:24:c1:92:d3:4a:3f:bc:25:4c:3a:
43:ab:6c:59:7b:65:15:35:18:78:18:87:91:1d:a3:cd:a7:51:
2d:c8:61:31:df:ef:4e:b9:af:67:0f:da:ee:90:c2:37:e4:5b:
d1:f0:55:b7:11:57:09:51:0e:4a:ed:c4:bd:40:0e:fd:88:5e:
6e:0f:6e:27:a1:28:49:45:63:9d:76:3e:0c:8d:69:b8:ba:c4:
97:85:eb:20:cc:8b:9c:4a:51:f2:ad:1f:fe:49:4e:c4:86:9d:
ba:f8:51:58:77:d2:8d:5b:1d:74:33:21:d2:63:76:6f:ee:3d:
f3:a7:ef:03:f0:a9:5f:f3:da:80:7d:b6:50:bc:f0:2c:4d:dd:
cf:a9:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:16 2025 by rpki-client