Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: Ext2rMe4/nds1Son9nd1Jq7hTCaQYBDmJHHmTaonKHo=
Subject key identifier: 76:F8:9F:6D:5F:9A:F2:40:B3:D3:02:D3:CF:38:A7:32:B6:4E:1E:60
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 019922554A9D2C6617C5387FAD0BE7AA78E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 04:00:38 +0000
Manifest this update: Sun 07 Sep 2025 04:00:38 +0000
Manifest next update: Mon 08 Sep 2025 04:00:38 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: nmnTtdYeb546/ven4Tv9PR4uBL1IIKaiclTPdaWPuvw=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4a:9d:2c:66:17:c5:38:7f:ad:0b:e7:aa:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Sep 7 04:00:38 2025 GMT
Not After : Sep 8 04:00:38 2025 GMT
Subject: CN=76f89f6d5f9af240b3d302d3cf38a732b64e1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:77:c6:7a:cd:0f:ee:dd:c6:88:68:20:df:
ac:35:94:62:0e:4b:3c:79:04:b2:b7:47:28:fe:10:
96:1f:d8:4b:c8:a4:43:d5:6d:8b:35:c6:8b:d4:f1:
41:08:e1:4d:f9:db:d2:ec:66:ac:ed:54:70:e4:97:
dd:48:bd:93:3a:94:a6:b6:a1:e8:9d:ed:27:65:69:
6b:b8:03:28:ab:18:61:26:e3:8f:35:31:6f:8d:12:
0e:0a:7f:0c:44:2a:92:bb:08:6a:4c:e1:64:ba:ce:
45:f3:77:18:59:05:aa:c8:67:5a:45:06:66:8d:aa:
99:47:19:e4:f7:1f:69:41:6b:3d:18:4f:ae:e7:cc:
cb:74:a4:a7:7f:86:7d:6e:02:93:88:35:d5:73:24:
ea:73:24:85:e6:8e:68:a9:2a:f9:b1:60:1c:ed:b6:
18:b6:b6:9e:28:8d:a2:9b:fa:f3:da:b6:c4:b6:ef:
eb:f9:ce:cc:aa:51:35:44:08:89:73:c6:d7:a6:66:
a1:d0:0f:3a:fc:b9:b1:b9:d0:5c:24:08:4e:6b:26:
3d:c8:87:37:0f:54:f8:3d:b3:f7:ea:60:50:39:d4:
c9:88:60:1d:a0:8f:0d:85:c9:b5:7d:10:af:09:cb:
34:4e:6a:30:96:db:d2:28:ce:d1:45:8a:8c:25:bf:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:9F:6D:5F:9A:F2:40:B3:D3:02:D3:CF:38:A7:32:B6:4E:1E:60
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:4b:b1:2e:d3:aa:ee:66:5f:36:3e:4e:eb:6d:0a:17:66:
a6:6d:e1:44:45:ff:11:68:29:76:f4:89:3a:96:40:83:a6:8d:
af:99:77:35:2e:5a:11:2b:30:4a:29:ec:af:c3:13:95:42:42:
97:13:d2:5d:c2:95:b2:1f:67:6a:b1:40:c2:6a:8f:3e:30:83:
92:a9:e6:45:a9:d0:0f:3a:65:99:6a:7e:9e:3d:20:97:15:79:
53:bf:94:be:43:8a:c1:da:59:5f:8a:e7:b3:b0:d3:d8:6c:50:
28:86:b7:94:f8:8b:15:db:f0:78:86:6c:12:d1:9b:21:0c:bc:
0f:47:e7:41:d9:fb:41:75:24:20:79:52:5a:ba:b1:4e:bc:fa:
86:2c:b5:f0:e2:0c:a2:f4:55:13:b5:d4:51:c1:11:8b:08:1e:
be:82:09:fe:22:37:7a:b7:1c:8a:5b:0e:1b:42:aa:c8:4e:8d:
82:95:00:28:15:88:ef:93:75:3e:1a:91:b1:51:f6:ea:81:33:
3a:4d:9d:a0:05:b5:e5:b5:52:6a:18:f1:74:43:2b:53:b7:1d:
53:bd:12:0c:69:49:c8:2d:05:a7:c6:16:a0:53:27:02:e0:4e:
4b:f2:07:55:44:c4:5d:a8:ea:3c:d7:ab:86:65:0b:de:76:41:
05:ed:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:33 2025 by rpki-client