Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: mr16KsThlki+xRXg1gtVY1VoF1pMYksCyIDE9ED7jxo=
Subject key identifier: D8:CC:54:BB:D7:34:45:FD:0A:C9:EE:BE:53:8F:F8:F8:72:1F:5B:FD
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0199FCFD3F2B2D4E56EF0701385BDF4AC801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: FIqw0c0T9oFtJzdnyhpgeqQW33CwhAQRLd01uQLpzgM=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
3: x3_1xiv-NQfFznfpCLWxiJi7a90.roa (hash: Cqgk6ziv4FZVRmKg6qsSirIsfpT7hD739QyYsLmilF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3f:2b:2d:4e:56:ef:07:01:38:5b:df:4a:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=d8cc54bbd73445fd0ac9eebe538ff8f8721f5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:15:35:1e:6e:2f:59:b7:36:b8:b9:72:55:
9a:2b:14:21:21:cf:66:39:d0:d8:c9:f0:df:fb:7d:
9e:cb:cc:7d:c8:65:d0:6c:9c:e9:b8:ee:5b:c5:a9:
e0:86:5c:e8:e3:f8:8c:b7:75:e8:f7:0d:80:1f:f7:
88:7f:89:a6:33:f9:58:ea:a3:55:c0:34:96:d3:a4:
4a:06:8a:7b:48:7d:97:69:8b:94:56:1c:aa:69:62:
97:ed:1e:9d:26:31:b8:a1:a2:4d:97:ff:af:fb:fa:
f4:6e:45:62:92:3e:44:ce:71:78:5c:78:6b:d7:a4:
a2:cf:0a:09:48:92:ea:4c:ae:9a:86:e6:41:01:8b:
70:18:8e:2c:e2:df:57:3c:d9:2c:c4:54:84:8f:e1:
06:b3:d1:d5:c7:1c:ab:98:dd:61:6b:2f:28:62:e0:
79:f7:cd:0e:75:6b:40:f9:55:8f:f1:38:84:cc:ca:
42:7a:31:d7:0d:11:77:e4:a3:0e:a4:09:be:79:1f:
ae:f4:4b:0f:44:f0:be:40:0d:a8:84:1b:80:ed:a6:
df:86:e6:c6:65:5e:aa:78:9d:f9:26:e4:66:0b:79:
67:8e:89:00:09:35:90:46:ee:32:f6:72:a4:98:39:
ca:d8:c8:46:0e:12:a5:21:0e:a9:c2:73:f1:33:98:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:54:BB:D7:34:45:FD:0A:C9:EE:BE:53:8F:F8:F8:72:1F:5B:FD
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:81:25:1a:eb:20:e4:71:88:b3:6c:0b:bd:5e:7d:b5:bd:f8:
82:46:31:6c:20:91:c2:2a:34:45:18:63:89:0e:08:01:5d:a2:
13:02:cc:2c:0a:ff:d8:7e:ef:a1:87:83:2a:16:3b:42:da:29:
7e:c6:56:59:d0:df:c4:13:d9:9a:b9:09:b2:2d:de:7a:0e:15:
be:0c:eb:41:ab:46:b2:17:dd:cf:c9:10:4c:a4:bd:8e:78:52:
9d:b7:1f:eb:cd:b8:40:b6:88:e6:85:f7:a0:d4:f6:84:00:d9:
23:92:70:02:5a:ca:7d:97:35:6f:f6:69:87:4a:8d:c1:44:5d:
1b:2f:aa:2e:8d:8f:df:0a:21:29:d3:8c:20:f2:41:7f:20:79:
34:13:e0:64:f0:70:bb:49:9e:75:4f:48:b8:78:40:b6:05:89:
69:f6:c6:6f:8d:93:7a:5d:ec:08:58:74:c8:0e:6b:3f:31:c2:
cb:05:c4:25:cb:75:f7:06:09:19:f5:83:d7:24:b9:62:2f:1e:
10:b2:fe:b2:37:2b:fc:9a:db:7d:71:d5:ba:1e:08:30:c0:87:
37:a0:f1:95:e5:11:93:e7:d2:81:5b:c6:59:b0:d1:4b:86:98:
d9:b5:30:10:84:13:2f:c0:88:06:72:dd:a2:b3:83:3a:0b:d5:
02:a3:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:04 2025 by rpki-client