Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: skRtcBNcSOD28ouTO6ODX+HhSbK/sTRpwgFrPQ1B8i8=
Subject key identifier: A0:6A:97:1A:A7:EF:F7:86:34:BB:22:41:2D:9D:19:BE:68:9D:EE:84
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 01974A7B976D416B130FB21515A4D3CAF890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:43 +0000
Manifest this update: Sat 07 Jun 2025 13:01:43 +0000
Manifest next update: Sun 08 Jun 2025 13:01:43 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: W1hSNIS7DdKPolthOvJiFODmqQ4RVIoXms8jHSLHVHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:97:6d:41:6b:13:0f:b2:15:15:a4:d3:ca:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Jun 7 13:01:43 2025 GMT
Not After : Jun 8 13:01:43 2025 GMT
Subject: CN=a06a971aa7eff78634bb22412d9d19be689dee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:38:1c:11:f1:ee:6c:e9:2b:27:30:f2:f8:
1b:af:60:7d:e6:74:3c:8b:d4:0b:c9:f8:69:a1:4a:
e2:b5:78:56:83:1d:b0:be:4f:44:c7:f7:91:7f:73:
1b:a1:6e:04:d1:00:5c:42:c9:df:4b:28:4c:aa:01:
08:13:cf:7c:88:85:6f:d9:c5:f8:c6:c2:6e:f2:9e:
8a:e9:28:44:dc:ac:d6:80:6c:d8:ec:95:bc:9d:6e:
e5:f0:f4:ed:3c:df:c0:45:96:9d:b3:e1:ae:ef:92:
4f:d1:7f:c4:19:af:61:52:10:1d:09:94:89:cc:03:
c7:6c:62:69:1c:d8:ff:1c:bc:a4:62:0c:00:2b:52:
84:46:a3:d4:f9:04:9c:0e:cf:22:a0:ca:47:bb:7f:
4e:6b:f8:23:d0:cb:1e:23:c6:9b:b3:f0:7c:d2:0b:
4d:a3:b5:2a:cb:cb:3e:4b:ca:4e:dd:f3:74:fa:3e:
56:df:86:3c:97:3f:cd:59:97:68:6e:fd:38:c5:78:
84:cf:a1:95:8c:7e:1a:50:56:0f:2a:a9:d1:69:1e:
2a:7c:65:92:2a:9e:c3:bd:49:37:16:0d:5a:dc:00:
da:42:5f:73:14:da:6d:c4:81:51:d7:18:71:d6:19:
ce:78:a2:b1:da:60:1a:e7:3e:19:93:31:36:1d:1a:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:97:1A:A7:EF:F7:86:34:BB:22:41:2D:9D:19:BE:68:9D:EE:84
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:27:30:7b:84:16:cb:b5:d7:e6:98:1d:f4:e0:12:c6:74:
ed:9e:2a:0c:11:d6:bb:6f:5b:c9:f2:38:cf:16:ed:4d:1f:55:
60:7d:1f:84:1d:e7:c3:14:83:bc:20:36:43:65:f2:a7:a1:62:
48:71:6d:45:95:49:fd:06:c0:47:3c:47:38:e7:54:e0:8d:81:
82:8b:54:af:07:61:6f:e7:51:15:b8:0a:c5:e7:cd:01:33:0b:
57:e6:3f:ee:75:56:50:e7:47:2a:a0:41:46:35:b8:c8:06:bf:
63:bb:06:bc:53:60:c9:66:bc:3a:52:84:fa:13:0e:d5:1e:ff:
41:e1:86:a2:e2:8d:d9:54:62:a2:b0:8a:9e:6a:6a:00:f1:52:
15:c9:c6:dc:4c:22:b9:04:2a:36:ff:3f:8b:cc:2d:3e:43:9b:
cb:45:36:99:a5:cf:83:1a:e4:1f:b3:74:bf:ac:81:72:6f:66:
db:f7:5d:c4:b2:8c:3d:1b:a0:d7:e1:20:30:e2:a9:5e:a5:01:
cf:19:ba:f5:8e:f5:d8:53:d6:17:1f:66:00:67:a0:6c:28:28:
8e:09:82:d0:08:42:83:c3:06:3b:e5:d4:24:6e:a3:43:83:2a:
73:e4:f5:8d:c5:32:0b:6c:8f:95:b5:48:cc:af:c4:d1:3c:65:
62:b3:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:18 2025 by rpki-client