Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: BnM2yhpqGBN3HKYTHDnznJ2pzS5KBKCnUbJktLG7Qrc=
Subject key identifier: EB:4C:A3:AE:69:A7:F5:E4:CC:EF:B3:BB:36:92:B9:A5:24:BB:86:D1
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 0196BA48884EA992C3F16612E7173B5B9FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 13:00:37 +0000
Manifest this update: Sat 10 May 2025 13:00:37 +0000
Manifest next update: Sun 11 May 2025 13:00:37 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: v+9U42s/m31fljtFZUn0v1tdimoVb4BWWYOQlhGM6gk=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:88:4e:a9:92:c3:f1:66:12:e7:17:3b:5b:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: May 10 13:00:37 2025 GMT
Not After : May 11 13:00:37 2025 GMT
Subject: CN=eb4ca3ae69a7f5e4ccefb3bb3692b9a524bb86d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:4b:12:8c:b7:c2:e1:67:39:46:8e:ed:27:
cf:85:e6:6a:5c:8b:03:ad:87:8a:9b:5f:a9:78:00:
df:ad:bd:71:19:51:c7:97:9f:42:c2:df:ab:a2:ae:
6e:6d:c9:5e:35:e3:d1:e3:7d:a3:81:dd:e9:b7:69:
3a:60:f3:34:6a:44:78:0e:c5:95:d2:11:58:76:94:
11:f4:2b:82:7e:7a:5f:f7:42:a3:81:8e:2e:6a:ed:
94:4b:56:41:f7:0d:d4:9c:ad:2e:be:b6:dd:88:a8:
36:c4:27:2f:7d:e6:a0:1f:21:40:49:0d:b9:24:eb:
a3:50:81:1b:a9:12:d9:c0:d4:3f:d0:05:79:7e:0f:
59:37:be:90:2e:92:8b:b7:20:87:48:54:c2:a8:16:
fe:8e:a4:ad:a5:ef:9f:e9:64:68:56:f6:46:dc:15:
7e:60:ee:8d:ba:50:f8:bd:f7:93:98:7e:cf:a4:92:
d3:6c:0e:96:d8:90:15:95:37:2e:bc:94:35:d8:4d:
4f:fa:e5:74:10:09:fc:72:8c:67:f4:15:d9:5c:19:
55:99:ce:7d:7b:de:08:03:40:ff:2d:00:88:c4:54:
00:f7:b8:7c:a4:c3:73:01:2e:cb:bc:dd:3a:2e:62:
d4:78:b1:3b:a6:15:18:ef:f5:07:1a:08:2d:05:b8:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:A3:AE:69:A7:F5:E4:CC:EF:B3:BB:36:92:B9:A5:24:BB:86:D1
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:aa:91:ee:47:24:e0:3e:2c:f9:48:75:7e:98:02:b4:6a:
79:7e:36:2e:d6:f1:4c:d1:1a:79:19:15:58:54:ce:14:b9:a3:
a7:70:17:b1:e6:f2:db:0a:31:74:ce:67:64:e7:a6:12:a4:eb:
b8:fa:09:9a:1d:8f:c1:ac:af:0c:8f:4f:0c:9d:e9:37:7b:0f:
28:5c:e5:a6:d2:7a:c1:f0:58:05:3e:92:8a:e7:59:2d:87:a5:
84:96:44:e9:09:cf:da:38:bf:47:91:43:00:d6:19:f5:df:94:
60:70:fb:ca:ec:f9:47:2a:1f:e5:75:e9:d8:ad:95:1c:f9:69:
31:13:45:c2:ff:22:09:6c:69:2c:f1:4c:3f:26:0a:27:36:91:
46:74:77:07:29:0b:07:3c:62:fe:c5:37:63:cc:16:31:c4:9a:
09:0c:c0:e6:75:21:25:6b:22:cf:f8:83:8f:a8:b2:83:d8:3e:
e7:99:d6:3d:8b:80:9b:dd:7e:ce:0a:45:7c:16:27:79:fe:d4:
17:2b:0b:85:1a:f3:14:4d:9a:5a:4a:82:60:8a:61:0c:37:a9:
84:86:07:39:a1:e8:76:35:64:f7:34:14:f3:c7:3a:3d:80:6a:
e0:5a:fd:31:f5:c4:34:b4:39:c9:4e:cd:9a:ba:04:fb:cc:04:
7a:2b:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:43:20 2025 by rpki-client