
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: 6u4C/rZiXBuMNQr2X3VcilCGiDBw0JertCaG1hpQuUk=
Subject key identifier: A0:71:9D:BB:47:11:E8:68:4A:8F:99:81:55:3D:51:7F:2B:1E:F8:BE
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 0196760C8694983D4F7F5823E0265AD57403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:54 +0000
Manifest this update: Sun 27 Apr 2025 07:00:54 +0000
Manifest next update: Mon 28 Apr 2025 07:00:54 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: 9g9w8NX6K+8FMghtOyhBZN46ynNU+eckQ8LPC++IYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:86:94:98:3d:4f:7f:58:23:e0:26:5a:d5:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Apr 27 07:00:54 2025 GMT
Not After : Apr 28 07:00:54 2025 GMT
Subject: CN=a0719dbb4711e8684a8f9981553d517f2b1ef8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:a4:48:0d:36:a0:29:cd:48:de:db:65:57:
fb:40:f4:d3:b5:15:87:b5:c6:ce:dd:5f:e1:35:e5:
f4:d2:b8:f5:5e:a3:48:ee:58:b0:a9:d2:c3:3c:2a:
cb:a6:df:3f:82:50:16:a3:5d:0b:46:1b:95:c4:82:
66:c3:ce:99:7c:5f:79:f6:33:8b:0c:b1:97:ac:6e:
bf:3d:26:38:d7:1f:35:b5:01:69:f3:69:d7:9e:82:
59:f3:56:8f:23:d1:9f:88:8b:2a:0b:23:de:f4:e4:
17:1b:3b:79:32:39:a8:a7:d1:b0:9d:a4:48:25:0a:
10:8c:a1:bd:96:63:0e:ba:31:35:9d:4a:7e:75:aa:
c0:29:cb:1e:03:7c:d7:25:55:99:3c:e0:8b:24:1b:
cf:6d:c3:bb:04:46:2f:21:dc:7e:30:84:28:eb:49:
a5:91:59:ea:55:01:c1:4f:5c:d5:5b:50:1c:3b:6d:
b2:ba:b4:a9:41:74:b2:dc:51:49:b4:c8:2e:bd:aa:
2c:13:68:2b:3b:b3:3b:ab:27:cb:87:d5:c2:16:d9:
ea:46:f5:59:cf:ff:b1:43:3a:4e:ed:ad:71:d1:1e:
80:f9:f5:3d:91:5e:e7:67:db:22:13:81:30:3e:d3:
03:f7:e6:98:48:12:2b:83:05:7c:cf:93:27:78:81:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:9D:BB:47:11:E8:68:4A:8F:99:81:55:3D:51:7F:2B:1E:F8:BE
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4d:31:75:4e:29:c1:2b:0a:fd:49:bc:60:16:8d:04:bd:66:
af:40:91:0e:45:1b:41:76:d2:38:f1:9a:4d:82:cb:75:79:9b:
0a:7c:53:aa:ca:78:26:87:2c:41:f5:d9:39:f2:df:50:b6:75:
8d:20:3d:af:ec:2d:52:ea:0f:ee:06:7d:e9:6b:bb:55:d5:3f:
12:e0:ba:96:64:67:3c:66:8d:e3:1e:c2:76:66:53:1f:84:47:
cc:1a:48:22:c9:5e:a5:ac:50:12:14:d8:0c:df:31:b6:b4:b8:
df:c0:0b:b0:6a:e2:6f:9d:ae:57:b1:bb:f8:ef:f6:a7:63:f4:
00:fa:18:11:16:d5:00:13:19:d7:04:38:1c:3e:82:a8:87:bf:
5f:6a:89:26:b3:9e:2d:ec:c5:ab:e9:d3:a0:ab:d6:2a:fb:41:
38:7e:0e:34:77:c2:80:98:c5:c4:8a:66:6b:00:c3:d1:17:a7:
d3:8d:71:a2:bb:4a:93:73:45:45:e5:46:24:3c:3c:dd:be:6b:
7d:91:34:d5:15:5d:e1:42:ab:03:5b:dc:c7:98:bb:24:b4:8a:
57:24:00:27:75:96:e3:c7:49:90:23:b8:3f:83:72:11:3d:3b:
15:8d:01:94:7c:d7:4c:7a:8f:4f:5a:d1:87:78:bb:1f:ee:5c:
5f:89:66:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DIaUmD1Pf1gj4CZa1XQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMWQ3NmU4ODJiZjQxMDQ5YjVhZDkzZDI1YTFkZGNiYTE5
MjI3ZWUwHhcNMjUwNDI3MDcwMDU0WhcNMjUwNDI4MDcwMDU0WjAzMTEwLwYDVQQD
EyhhMDcxOWRiYjQ3MTFlODY4NGE4Zjk5ODE1NTNkNTE3ZjJiMWVmOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTykSA02oCnNSN7bZVf7QPTTtRWH
tcbO3V/hNeX00rj1XqNI7liwqdLDPCrLpt8/glAWo10LRhuVxIJmw86ZfF959jOL
DLGXrG6/PSY41x81tQFp82nXnoJZ81aPI9GfiIsqCyPe9OQXGzt5Mjmop9GwnaRI
JQoQjKG9lmMOujE1nUp+darAKcseA3zXJVWZPOCLJBvPbcO7BEYvIdx+MIQo60ml
kVnqVQHBT1zVW1AcO22yurSpQXSy3FFJtMguvaosE2grO7M7qyfLh9XCFtnqRvVZ
z/+xQzpO7a1x0R6A+fU9kV7nZ9siE4EwPtMD9+aYSBIrgwV8z5MneIFG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBxnbtHEehoSo+ZgVU9UX8rHvi+MB8GA1UdIwQY
MBaAFG8dduiCv0EEm1rZPSWh3cuhkifuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5Nzkt
YjE4ZjVmNjI2MmFlLzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MTc5ODItZTBiZi00ZTkwLWE5NzktYjE4ZjVmNjI2MmFl
LzEvYngxMjZJS19RUVNiV3RrOUphSGR5NkdTSi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE0xdU4p
wSsK/Um8YBaNBL1mr0CRDkUbQXbSOPGaTYLLdXmbCnxTqsp4JocsQfXZOfLfULZ1
jSA9r+wtUuoP7gZ96Wu7VdU/EuC6lmRnPGaN4x7CdmZTH4RHzBpIIslepaxQEhTY
DN8xtrS438ALsGrib52uV7G7+O/2p2P0APoYERbVABMZ1wQ4HD6CqIe/X2qJJrOe
LezFq+nToKvWKvtBOH4ONHfCgJjFxIpmawDD0Ren041xortKk3NFReVGJDw83b5r
fZE01RVd4UKrA1vcx5i7JLSKVyQAJ3WW48dJkCO4P4NyET07FY0BlHzXTHqPT1rR
h3i7H+5cX4lmXA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:20 2025 by rpki-client