Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: q2ZWd72M/C1zQzAYcuPgRgdJ7P8jft0ApCvqUr2qcUg=
Subject key identifier: 35:B4:71:F0:34:E6:5C:BE:30:E1:C9:17:4C:BD:41:60:62:8D:A0:19
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 0197B6A07E7EBEB76AF8345A5E401FD3F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: 0fgbgkodhRkoVq0SEbhl+QQTA4kvVlN+KCUlL879ZBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7e:7e:be:b7:6a:f8:34:5a:5e:40:1f:d3:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=35b471f034e65cbe30e1c9174cbd4160628da019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:5a:5e:ea:b8:e0:4c:e0:96:53:71:d4:92:
24:1a:ab:b9:5d:2f:44:59:41:86:15:b4:49:5a:59:
c4:22:09:6c:38:e4:55:d1:7a:22:bc:eb:68:89:b1:
63:85:14:aa:98:e6:5d:81:59:38:fe:9f:8e:7a:6b:
46:79:ea:33:96:d0:9d:f7:49:6c:ff:22:3c:89:af:
7c:e6:a0:0d:49:bb:8a:3b:3a:5d:d9:60:1f:2b:27:
7e:d7:9a:5c:c7:cb:23:7a:de:f7:19:f4:d4:4a:cc:
8d:c2:45:65:99:dc:61:de:39:8d:d2:c0:a2:ec:4f:
0d:0f:04:07:73:a1:3f:b5:4b:a4:c7:20:c7:74:37:
9d:b1:bc:54:fe:08:2b:5c:41:99:0e:da:da:f2:f5:
a0:9a:8d:f5:40:64:98:bc:4b:31:fe:28:05:8a:53:
3b:4a:a5:b2:5e:c2:5f:0b:d2:f9:d4:1e:35:e5:7a:
f4:1d:99:6d:72:0a:40:2b:3f:37:8f:dc:2c:ad:fb:
df:82:f2:e6:9c:13:dc:a8:86:dc:34:c9:53:d1:99:
ca:3a:32:d0:e4:ef:63:18:77:e2:de:2c:77:59:8e:
b3:ae:b9:c8:5f:a1:5c:0b:fa:b5:7e:54:15:17:e7:
95:76:bd:7a:33:07:14:3d:36:af:b8:1e:55:08:2c:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:71:F0:34:E6:5C:BE:30:E1:C9:17:4C:BD:41:60:62:8D:A0:19
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a8:21:bc:85:01:cf:47:78:2f:43:67:fb:17:e7:5c:97:65:
f4:4c:db:82:7d:84:01:0e:3a:8c:07:89:52:14:60:40:4e:01:
72:f3:f2:ab:2f:f1:1f:32:00:04:7f:c2:22:83:48:28:41:69:
d8:d1:93:d5:50:3b:52:3c:dc:f3:89:d2:fc:81:c1:70:28:a5:
a9:30:09:16:b2:2c:cc:e4:da:81:82:02:85:4c:9f:3b:09:b9:
3c:76:30:f4:80:9b:68:f3:ba:d5:2d:13:85:94:65:01:57:47:
87:1b:81:7e:aa:99:cc:25:fe:08:b1:bc:61:58:25:38:ba:fa:
db:ef:39:78:e8:ac:a3:63:af:50:9c:7b:41:d0:b3:95:d3:8f:
5a:7d:38:83:a1:a9:5c:37:de:ba:af:38:a8:d2:66:37:d4:d6:
ce:a1:32:f3:1d:18:c7:53:be:ae:fc:24:b3:be:4e:83:c3:7c:
c9:08:39:ce:ba:e3:2c:fb:8a:67:7d:f8:4f:dc:14:a4:7d:10:
59:66:8f:9c:7a:19:82:ea:3d:88:94:4f:14:da:f9:4f:99:e1:
59:c5:70:94:a9:7e:1e:de:55:b3:c8:74:3d:f9:c3:54:cd:c1:
16:f5:eb:1b:fe:ed:30:8a:7f:bd:a9:1a:a2:bc:9f:3c:91:cb:
18:91:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:04 2025 by rpki-client