Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: xGupzToNh28/mQccXOemRH/bawLsKIj0KDdQGeN/yaA=
Subject key identifier: A2:DD:A4:CE:8B:29:34:F1:AD:99:96:11:0C:76:A4:81:F3:BF:AF:4D
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 0199FBEBFCB3C5F7B560A7C9F859274D7B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: St2Mn8uMRnPeWkC5A63A9CvCBJyZTZaWPclR90lFyOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fc:b3:c5:f7:b5:60:a7:c9:f8:59:27:4d:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=a2dda4ce8b2934f1ad9996110c76a481f3bfaf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:90:4a:59:3a:7e:e7:ea:d2:4c:17:4f:2c:
f6:cd:67:c6:86:72:ad:3b:28:4f:40:b3:88:62:da:
b6:6c:fc:eb:aa:7d:45:10:5d:7e:9f:3e:f9:c8:da:
b8:fd:f3:6a:11:bd:f4:39:ac:f6:83:67:3d:ba:8c:
1d:bd:57:8d:a2:12:9c:2b:0d:02:cd:b7:30:64:bd:
45:77:af:c7:a4:9d:f7:c5:e5:cf:7e:84:b6:ef:bd:
ea:f5:6e:e5:55:5b:3d:4b:88:db:30:b6:ae:89:b3:
a8:cd:4f:43:d3:45:a8:68:3f:82:6a:7a:1e:ce:05:
4b:09:58:4f:af:c7:a9:94:df:6a:58:9c:f1:51:7c:
bf:2b:75:e0:08:47:5e:bc:85:86:25:21:3b:37:da:
39:ef:26:58:e5:2f:45:5e:a3:c8:f0:ab:52:86:4f:
cb:de:44:61:ed:dc:78:77:36:44:a6:3d:e4:18:d4:
40:fe:7c:63:3a:31:9f:46:4c:a0:07:09:1a:99:9c:
39:28:4a:13:ad:d3:13:6b:35:e7:26:7e:cf:99:b3:
ec:22:b7:8a:74:3f:f9:ef:7d:82:91:c4:a0:2b:27:
bb:d9:7f:07:02:0a:01:fb:d8:db:f1:c2:d5:99:6a:
6f:32:19:8b:7d:7d:17:9d:88:6a:ae:4d:5c:45:c6:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:A4:CE:8B:29:34:F1:AD:99:96:11:0C:76:A4:81:F3:BF:AF:4D
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:f3:3d:d6:2b:4b:f8:71:d7:67:f6:46:e6:cd:ae:21:f4:
3f:8b:5d:a2:17:d3:d6:46:d8:57:f4:7e:02:cc:30:32:d0:b4:
b0:0f:b7:7b:54:2e:40:ee:ed:d2:e1:7e:9c:f3:2a:18:7d:b3:
8a:de:30:ce:78:e7:27:c6:4f:68:1a:e2:15:e6:bb:13:2b:cb:
fb:bd:6e:24:f8:2e:b8:eb:c5:8f:a6:dc:29:2c:98:23:8d:77:
20:b4:5d:d5:a8:f5:00:27:ff:60:42:c0:0c:c4:b2:5b:c2:92:
02:39:fa:9e:5f:19:47:78:c7:15:54:31:5f:33:66:30:51:91:
29:e8:dd:b4:91:12:83:35:de:7c:9d:2d:84:b0:4f:ab:17:17:
4d:53:db:e4:0b:dc:94:47:97:e8:f0:db:de:37:6e:bd:0b:38:
7b:17:87:b9:48:d3:c4:d5:65:16:73:aa:3d:e1:d9:6f:9e:40:
18:9d:12:ae:61:48:f7:9c:c3:65:f9:de:e8:d2:a3:62:7c:40:
10:b3:38:07:fb:7a:40:19:98:1e:c2:a3:86:e3:9e:d1:6c:b6:
b6:94:48:d5:f5:d8:91:20:96:85:8d:58:bc:4e:14:2f:ab:a4:
fd:2e:bf:f2:0f:a2:26:a6:21:7a:c9:9e:86:2d:b6:9a:6d:54:
90:50:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:36 2025 by rpki-client