Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: IYW3LElcwITyN4cVBXeSXwsr9AJoyK6rdDf9FxrL6Xo=
Subject key identifier: D3:5D:C4:F8:5A:03:17:28:20:6B:0F:E0:CF:DF:0C:43:9A:32:E0:E1
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 01974EFC2C96397667B2E07AA2A17417822B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 10:00:38 +0000
Manifest this update: Sun 08 Jun 2025 10:00:38 +0000
Manifest next update: Mon 09 Jun 2025 10:00:38 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: NBHhca/1cUO33tT/WnzmoQu2c4/+pGePmXABVCMLb7o=)
2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:2c:96:39:76:67:b2:e0:7a:a2:a1:74:17:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jun 8 10:00:38 2025 GMT
Not After : Jun 9 10:00:38 2025 GMT
Subject: CN=d35dc4f85a031728206b0fe0cfdf0c439a32e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:44:a4:20:79:1c:90:19:08:61:a0:ac:4a:10:
8a:29:ae:c0:3d:15:c9:5c:bd:25:dc:71:19:15:ee:
31:97:f8:bf:80:45:9a:c1:9b:f0:fe:2b:8c:55:9d:
f6:fd:4c:e2:1d:c3:30:eb:7b:e3:bf:a5:13:9b:ec:
40:99:c4:d3:fc:81:c8:ec:1d:5e:5c:ac:c4:ba:56:
fd:7e:bb:2c:6e:bf:b8:1e:23:f5:66:c9:c1:51:fd:
44:da:8c:db:e1:67:c7:2d:0a:58:e6:97:f4:a6:8a:
42:72:92:74:52:5c:0b:c0:76:41:de:39:aa:b7:52:
e0:cd:38:e2:0f:f3:3b:d2:70:1b:3a:02:84:5e:68:
1e:96:6a:12:c4:3d:a0:1e:ec:73:a6:e9:3b:ea:fb:
36:7f:78:8d:65:bc:ae:a3:04:b5:bc:8f:b5:5d:e1:
ae:20:c5:89:fd:c4:8b:81:9c:f2:9a:89:df:a6:f2:
59:cc:5b:d7:fc:77:50:f4:2a:49:86:bc:77:35:ed:
1d:25:4b:a1:a3:be:7c:e3:7d:4f:60:0f:8e:9e:cd:
e9:1f:69:04:db:e4:e8:d4:f1:ef:c1:f2:32:33:cf:
eb:e5:f1:39:15:0b:e1:fd:5d:e9:e6:2a:68:0c:26:
ee:da:7e:c0:62:dd:1d:d7:ce:a8:2b:7c:aa:d1:d5:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:C4:F8:5A:03:17:28:20:6B:0F:E0:CF:DF:0C:43:9A:32:E0:E1
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:95:97:b1:0c:ea:e9:86:f2:03:86:7c:36:f6:4b:73:6f:9e:
0a:fd:4b:93:5f:b1:c0:7b:ec:b9:05:ed:6b:28:f3:e9:d3:c6:
c9:5e:a0:72:02:c1:30:fc:f3:97:ef:ae:95:3e:49:8a:77:34:
ec:e4:a8:70:75:01:c7:43:d3:ea:f7:db:99:4d:cc:d8:df:be:
5d:25:93:d9:68:da:6e:74:99:b3:45:83:b5:31:3f:fc:ef:49:
7a:b0:8c:61:6c:d3:1c:c3:ce:8b:3b:64:28:84:f0:9d:85:f9:
fd:38:04:21:8d:79:dc:36:a1:11:4d:eb:39:e4:12:6b:c1:b0:
b5:c8:af:c3:7a:df:72:54:cc:63:18:83:4f:44:b1:8c:c5:02:
a7:e8:91:0b:21:93:e7:bc:fb:b0:80:b5:78:1e:71:cc:e1:2a:
36:2f:69:96:c3:18:86:20:26:13:e5:ca:5d:a5:32:08:f4:de:
12:7c:a0:89:ba:6d:7b:b4:a7:16:29:f1:f7:5b:8f:6b:5e:22:
32:17:f7:47:d1:79:73:fb:96:c9:d4:77:a8:66:0f:f2:54:27:
8d:3c:d3:3d:f6:04:a1:f4:80:7c:d6:98:17:ff:10:31:39:41:
73:a5:30:8b:79:d3:1b:1f:f6:24:e7:22:10:ff:8b:16:28:d9:
4a:c4:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:44 2025 by rpki-client