Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: vYuL6n7fCYqkv3mIGDYVCbjRg8KopQJA8dav8wJ3wjw=
Subject key identifier: C0:29:2E:FF:F6:02:90:0F:FB:74:9E:F1:26:3D:86:A0:D9:E7:17:40
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 019921B0B4C267B18F35B54F781677081D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:00:52 +0000
Manifest this update: Sun 07 Sep 2025 01:00:52 +0000
Manifest next update: Mon 08 Sep 2025 01:00:52 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: vtpmaqU/uNQSAvv/I8nOz76+ONDdVhar7JIFUckxtd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b4:c2:67:b1:8f:35:b5:4f:78:16:77:08:1d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Sep 7 01:00:52 2025 GMT
Not After : Sep 8 01:00:52 2025 GMT
Subject: CN=c0292efff602900ffb749ef1263d86a0d9e71740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:07:bd:6d:b5:77:94:33:1a:a3:a6:f6:c7:
81:fe:35:f3:73:e9:f5:7e:69:51:d4:e4:57:ce:bc:
7d:d7:73:8c:6f:0d:04:eb:a8:41:71:d5:30:bf:e2:
33:41:36:ce:e8:8b:3e:58:dd:11:d4:2e:35:8e:eb:
7a:f3:46:42:e7:37:93:eb:26:0a:fa:33:5c:c1:80:
c0:9c:c3:67:92:ad:38:cc:bc:7a:04:2d:f8:86:2f:
65:45:c3:35:ba:8f:44:fb:6b:95:ad:a6:f2:93:4e:
8e:eb:75:46:5f:84:ed:e9:5c:54:4b:f5:12:49:3b:
7d:d3:c0:b0:fc:2b:5f:09:b1:75:a7:0c:a3:6f:4c:
f1:15:ea:1f:e6:d8:bc:18:11:0b:44:a3:c7:7c:1e:
e6:91:f0:0b:1f:ea:51:0b:02:ba:4a:b7:1c:48:44:
55:86:b5:9f:cb:7b:3c:31:17:04:85:72:e0:07:f6:
97:c1:db:9f:a5:e8:6f:32:b3:3d:f3:87:80:82:e7:
d1:8c:74:61:30:1d:59:fa:fa:3a:5f:ed:68:b4:22:
12:9c:9d:8e:a4:a0:76:be:dc:07:08:ef:5c:3c:40:
73:c2:05:ff:39:c4:51:2e:25:bb:58:d6:bd:16:c1:
02:76:23:fb:5a:8c:38:c8:1a:87:aa:ee:04:e6:b4:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:2E:FF:F6:02:90:0F:FB:74:9E:F1:26:3D:86:A0:D9:E7:17:40
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:0f:6b:fe:4a:5c:e1:c2:fd:fa:56:06:ed:3b:42:d6:12:
dd:93:2f:f9:e1:f0:89:bc:40:94:3b:07:84:8f:d3:8d:39:5e:
aa:3d:dd:42:ba:3b:c0:54:f1:c5:b4:0d:05:a6:8f:de:87:ab:
6e:5f:77:f7:4b:25:ff:bd:b5:e5:d6:24:b8:6d:8b:fc:a9:93:
2e:0a:78:bc:2a:55:27:b8:35:c5:d3:48:d3:3f:ee:d0:46:75:
4d:75:11:ec:65:e9:e5:60:a1:e9:62:b8:f1:ed:36:7d:8e:d4:
f6:d5:41:5c:d8:5c:fd:36:d3:92:d2:70:79:4b:89:f7:83:34:
9a:28:45:fd:6b:7a:a7:c1:8c:32:36:5b:89:c7:e3:72:e8:05:
0d:d4:c2:09:e8:c3:67:49:d4:c7:4a:90:d8:0c:fc:4d:c5:bf:
e3:46:57:88:bc:2b:58:d0:df:ff:5c:34:b4:d6:d1:be:22:68:
1e:4a:aa:38:fd:ea:3c:ee:3e:c4:cf:14:59:c5:fc:35:de:ee:
5c:ce:d6:94:8b:37:9a:6a:57:85:a9:73:ab:94:a2:c6:0f:af:
bf:bd:1a:e7:2c:e4:2f:56:b9:a5:ae:c4:a5:ff:ef:85:f1:96:
bf:6d:73:ee:f1:5d:bc:18:78:95:79:e0:df:59:fe:24:29:e0:
26:70:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:59 2025 by rpki-client