Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: MFsqufb2vpMSQ7c5mzm4JTsMNxc8eL/R5mKawO5bkBA=
Subject key identifier: 4F:2B:8C:91:F9:27:A6:A3:4C:AE:00:E3:26:E3:51:2D:F4:C7:B7:2C
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 01965537C48577DAD85F24E6095E4F67D7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:40 +0000
Manifest this update: Sun 20 Apr 2025 22:00:40 +0000
Manifest next update: Mon 21 Apr 2025 22:00:40 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: bClBM/F1L9oFnkEc99TCwL3tsQyPrypuHMjqNWQCwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:c4:85:77:da:d8:5f:24:e6:09:5e:4f:67:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Apr 20 22:00:40 2025 GMT
Not After : Apr 21 22:00:40 2025 GMT
Subject: CN=4f2b8c91f927a6a34cae00e326e3512df4c7b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:c8:95:6e:87:8a:1d:ff:54:67:84:49:95:
0d:03:ae:3c:fe:14:1f:6c:a1:44:70:20:aa:4e:10:
74:c8:38:82:8e:d6:89:02:64:9e:d9:33:9a:c0:2a:
32:43:ec:2d:91:3c:d3:19:c0:8a:89:61:34:4b:82:
d9:9c:dd:aa:0d:93:56:91:a2:ef:02:e2:07:11:ee:
40:23:46:a6:8e:69:c5:85:7c:3e:16:f5:50:dc:28:
3c:85:23:4d:22:64:f6:e7:41:d8:b2:6f:f8:4c:38:
bc:18:9b:61:42:a6:23:ed:47:0d:d2:0d:e3:f9:7f:
90:0a:ad:15:02:c3:ef:a4:af:70:e2:62:4b:eb:35:
0a:ca:fe:b1:72:76:2a:f2:ed:a8:ea:8e:40:93:58:
7d:60:7c:3c:6f:11:cc:8a:44:af:23:a9:c3:1b:ed:
01:e4:e9:ca:f4:b3:6d:a5:1b:19:8b:64:47:50:b9:
57:64:8f:b5:24:37:b4:e1:43:6b:aa:79:bf:87:c2:
c9:05:c1:af:ca:64:20:c3:18:d0:36:a9:02:e3:88:
96:e9:b9:f9:7f:de:3b:39:2e:d3:a6:4d:83:d2:7a:
f9:08:60:7b:65:9b:b0:93:de:b3:e5:89:40:39:cb:
e6:77:6f:6a:b1:ec:3d:31:0b:bf:d9:af:31:09:88:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:8C:91:F9:27:A6:A3:4C:AE:00:E3:26:E3:51:2D:F4:C7:B7:2C
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d5:82:eb:66:f6:6c:31:20:de:2a:76:4e:fa:fc:24:59:6a:
a4:cf:2d:fa:7d:4c:db:b5:96:93:e3:dc:af:79:74:e1:f3:17:
30:fb:88:47:09:93:8e:ac:a6:0d:24:7e:91:b0:6b:97:8f:e6:
39:8b:89:ed:ea:90:4d:28:e6:ba:c2:92:d3:5e:a4:25:e7:a5:
03:dc:fd:d5:4b:1e:54:7f:84:bc:2e:13:fc:5a:68:60:41:12:
0c:49:e4:4c:3b:4f:c4:35:63:6a:ce:6b:ce:b5:4f:92:ac:21:
21:7c:1d:46:89:9b:e1:c2:3f:53:a7:9b:b1:e6:f6:81:ca:e9:
4f:8c:29:8c:b8:bc:ba:f0:b8:ea:9d:eb:ab:13:70:8c:fc:a9:
7b:8f:fe:e2:c6:fc:b4:34:5d:e6:eb:c5:75:f3:84:6b:ff:04:
8a:24:43:de:c4:63:14:75:8a:0b:91:e0:dd:05:25:07:fd:6a:
7a:f9:db:dc:8b:f7:af:4b:8b:93:cb:48:e8:d0:a9:50:cf:0a:
6c:9e:34:95:36:4d:42:e6:2f:f0:8a:a4:3e:2c:e8:87:54:29:
4d:cf:b3:fb:97:fe:bf:d2:f1:38:12:e7:35:30:08:7a:bd:77:
c4:99:b1:7a:01:ad:b0:e0:f1:41:14:5c:23:ba:f5:91:b9:ab:
ca:46:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:40 2025 by rpki-client