Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: 0SX732Wh9qSCaeYS6MEWRTd2lZAkbg3ihi2UVjQvvMU=
Subject key identifier: 63:C3:C4:77:7B:2F:24:8E:B3:05:52:F8:CF:FE:03:31:D7:87:46:BF
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0198A0F159DB0A9A3E6B65694744AE034AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1636
Signing time: Wed 13 Aug 2025 01:00:28 +0000
Manifest this update: Wed 13 Aug 2025 01:00:28 +0000
Manifest next update: Thu 14 Aug 2025 01:00:28 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: 1SOKjQyJuV1ElU33apXQuFbub/1S+MlrgnCngzUnXRg=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:59:db:0a:9a:3e:6b:65:69:47:44:ae:03:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Aug 13 01:00:28 2025 GMT
Not After : Aug 14 01:00:28 2025 GMT
Subject: CN=63c3c4777b2f248eb30552f8cffe0331d78746bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3d:e9:a3:72:12:b8:23:05:30:6c:bd:ae:06:
11:cb:bf:33:4c:a3:13:66:91:f5:02:8f:4f:a1:55:
30:a4:2b:06:a5:56:c3:7d:59:92:a7:85:63:71:30:
fd:64:89:40:c3:46:78:c0:c5:f6:b9:83:a0:9c:be:
96:bf:7d:c6:73:f3:b9:55:7c:e5:42:06:47:c8:61:
f3:3f:19:12:2a:84:3f:c6:a7:07:4e:fe:23:ac:99:
ff:cf:f7:d9:45:78:9c:2e:bc:99:a9:98:4d:d8:38:
72:e2:20:c2:70:06:fb:f2:59:bc:3f:74:ce:83:37:
2d:56:22:01:32:71:c8:9c:34:1f:bd:40:7d:4d:ac:
07:ec:6a:34:55:b8:a2:0e:f3:a8:9e:7a:81:db:7d:
d1:da:0a:72:86:e1:ad:11:7d:f2:f1:ea:05:9b:ca:
1b:88:73:a5:73:87:91:c9:65:13:14:91:3e:2b:5b:
d3:17:22:07:1f:3b:50:64:bd:a4:71:b2:c1:5b:07:
44:a5:ca:79:76:e4:60:df:0e:35:c7:db:cb:75:2e:
bd:ab:69:72:a9:e1:81:be:72:31:d8:e8:a9:f2:cd:
35:bc:5f:e8:5b:26:8e:6f:27:32:98:4f:9e:4b:15:
e7:ca:a6:5a:7e:2a:4d:ff:37:fd:c0:93:4a:0a:ef:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:C4:77:7B:2F:24:8E:B3:05:52:F8:CF:FE:03:31:D7:87:46:BF
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:25:a1:49:8e:c8:78:a8:0d:4e:99:52:19:e5:51:89:33:6a:
60:5c:ab:e4:2c:6f:ea:87:66:2a:74:17:9b:fa:9d:6a:70:8e:
0a:1e:69:a0:9a:6f:52:4b:53:47:b9:60:7c:db:20:5d:d1:8b:
e2:8c:07:40:ea:0b:80:42:c2:cb:09:db:dd:2e:b5:e9:7e:e3:
4d:44:c1:fe:16:a8:25:bc:e6:26:52:94:e7:51:2c:cc:21:e2:
ee:b8:1a:57:94:79:38:f8:b3:f2:70:a9:39:2e:5e:69:88:0b:
7d:c0:f5:55:43:ea:3c:78:3d:ac:20:86:07:ed:61:af:0d:20:
ba:ec:a3:b4:f8:08:47:b7:d4:c3:25:12:4b:f4:4b:fa:2e:f5:
d2:4a:e8:4d:74:47:33:8c:d6:82:6f:5d:3a:31:f8:06:30:7c:
f3:7c:1e:1c:78:f2:1f:f9:7c:da:d1:46:ce:7c:ad:44:67:87:
25:77:12:5f:3a:f9:47:9b:80:c3:b5:57:b8:d0:a7:40:ba:10:
d1:e5:db:51:ee:7c:fd:23:9f:7d:93:36:3d:e1:4a:bb:b3:40:
74:58:14:8a:7b:3a:19:63:7c:32:3e:04:47:24:af:86:02:94:
1c:df:1a:f3:fe:6c:a1:78:66:95:5e:1c:32:5b:a5:12:aa:2a:
54:2b:9f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8VnbCpo+a2VpR0SuA0r3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi
NGYxNmEwHhcNMjUwODEzMDEwMDI4WhcNMjUwODE0MDEwMDI4WjAzMTEwLwYDVQQD
Eyg2M2MzYzQ3NzdiMmYyNDhlYjMwNTUyZjhjZmZlMDMzMWQ3ODc0NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D3po3ISuCMFMGy9rgYRy78zTKMT
ZpH1Ao9PoVUwpCsGpVbDfVmSp4VjcTD9ZIlAw0Z4wMX2uYOgnL6Wv33Gc/O5VXzl
QgZHyGHzPxkSKoQ/xqcHTv4jrJn/z/fZRXicLryZqZhN2Dhy4iDCcAb78lm8P3TO
gzctViIBMnHInDQfvUB9TawH7Go0VbiiDvOonnqB233R2gpyhuGtEX3y8eoFm8ob
iHOlc4eRyWUTFJE+K1vTFyIHHztQZL2kcbLBWwdEpcp5duRg3w41x9vLdS69q2ly
qeGBvnIx2Oip8s01vF/oWyaObycymE+eSxXnyqZafipN/zf9wJNKCu/oPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPDxHd7LySOswVS+M/+AzHXh0a/MB8GA1UdIwQY
MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt
ZGJkOTFiMTExODQ0LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0
LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSWhSY7I
eKgNTplSGeVRiTNqYFyr5Cxv6odmKnQXm/qdanCOCh5poJpvUktTR7lgfNsgXdGL
4owHQOoLgELCywnb3S616X7jTUTB/haoJbzmJlKU51EszCHi7rgaV5R5OPiz8nCp
OS5eaYgLfcD1VUPqPHg9rCCGB+1hrw0guuyjtPgIR7fUwyUSS/RL+i710kroTXRH
M4zWgm9dOjH4BjB883weHHjyH/l82tFGznytRGeHJXcSXzr5R5uAw7VXuNCnQLoQ
0eXbUe58/SOffZM2PeFKu7NAdFgUins6GWN8Mj4ERySvhgKUHN8a8/5soXhmlV4c
MlulEqoqVCufAQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:40 2025 by rpki-client