Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: x3/XA6vdYv21oB6Qpi1O+j9+bwBRYftQiH7UeXdxbIA=
Subject key identifier: C0:15:01:38:A9:FA:07:81:36:18:B4:F6:F5:43:5C:26:5B:61:00:2F
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0198D5158E8D1D661ED3E4389B842136D252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: QKo7DMDpzf7jAoCvzM3ClahvV4TojvVCSO3SISCgLHc=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8e:8d:1d:66:1e:d3:e4:38:9b:84:21:36:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=c0150138a9fa07813618b4f6f5435c265b61002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:f5:68:fb:f0:da:a3:ad:98:82:41:d8:12:
79:14:42:79:f0:86:07:c6:c8:2a:64:20:a7:6b:38:
cc:a0:d2:6d:fc:59:75:c2:07:14:65:8e:c0:ed:0f:
8e:1f:3a:ed:ce:37:59:19:80:73:d0:40:30:d6:54:
f0:45:c9:0a:d2:3e:b8:4d:8d:07:d8:00:8a:74:52:
4d:1b:b1:4f:95:31:33:17:1e:f6:73:e8:7c:8c:73:
25:f1:78:28:67:43:5c:fd:c4:a1:3f:f5:51:46:9d:
53:6d:df:81:83:3c:e8:a7:55:2a:20:89:ad:bf:e7:
16:f4:b3:c6:25:ff:99:d8:58:29:e7:5b:35:2f:db:
52:85:25:fc:03:af:42:9a:99:e4:56:f6:f2:7b:b3:
0a:3e:01:90:ef:62:95:c6:fb:c2:ed:76:72:46:8d:
38:d2:c7:22:57:25:a9:52:db:4b:50:d7:30:26:aa:
69:bf:2b:8b:36:ee:c4:7c:0d:89:10:4f:92:97:a8:
1d:3b:9d:97:55:79:10:66:cc:17:fc:a2:55:37:73:
0b:23:f0:12:7c:38:4e:8d:1b:9f:b5:cf:d8:71:35:
b8:e9:8e:86:2b:6e:54:e9:77:13:7c:74:74:3a:42:
59:ee:43:85:45:0a:40:cc:2c:42:28:e2:a4:25:c1:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:01:38:A9:FA:07:81:36:18:B4:F6:F5:43:5C:26:5B:61:00:2F
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:6f:ca:c8:f2:5b:03:9a:f5:3e:da:50:d1:6a:3e:a7:10:
f7:ad:78:15:98:1a:61:5c:33:b8:ad:e5:7b:39:8f:d8:cc:9d:
3d:47:29:13:d1:8b:54:5f:3e:20:35:95:0b:d9:c6:0b:7d:ef:
5c:42:7c:f0:cc:7c:3a:9b:22:88:ff:7a:21:82:25:c0:c0:19:
2d:4f:58:02:39:8f:a4:4b:ce:4a:64:f1:39:43:25:70:6e:20:
f1:41:91:1c:b2:1c:b2:36:c9:24:12:16:13:bb:d0:f6:11:68:
e0:8c:65:f0:a6:72:e2:7e:55:47:29:aa:d9:44:33:dd:c3:d0:
f1:52:42:a7:4d:da:00:e3:7c:87:8e:97:8a:0e:38:4a:71:34:
19:58:0d:9d:9f:a8:e4:c5:66:5e:9b:f3:b4:a9:12:43:9d:33:
81:60:f9:c1:0f:12:14:d3:88:0b:c9:96:40:3a:4b:d9:6b:fe:
53:a8:7f:e9:07:a2:1b:6b:11:71:68:86:38:10:e5:5c:37:12:
70:d4:08:4f:da:c6:89:fc:37:11:96:1a:c3:00:79:81:e1:c9:
fb:37:94:bc:55:ee:95:b1:8a:82:86:24:a2:40:a9:6a:d2:9f:
c3:1b:db:df:42:0e:e9:4a:db:f3:1c:9b:38:25:55:75:f5:b9:
18:a8:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:10 2025 by rpki-client