Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: 2VaHfwnIlW1hoef0h8kWALn58rZUHkURriYMbXgPcNY=
Subject key identifier: 3E:5A:2B:92:9D:99:E6:7D:17:52:17:91:CE:0C:5F:65:84:0C:67:27
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 01976F2C4E88B0E80FF3FB1FBA579941DBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:03 +0000
Manifest this update: Sat 14 Jun 2025 16:01:03 +0000
Manifest next update: Sun 15 Jun 2025 16:01:03 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: widFbs6pMcPI2Nt9nnZJhmBmNibrmy2feHAChFt2Hls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:4e:88:b0:e8:0f:f3:fb:1f:ba:57:99:41:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Jun 14 16:01:03 2025 GMT
Not After : Jun 15 16:01:03 2025 GMT
Subject: CN=3e5a2b929d99e67d17521791ce0c5f65840c6727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:66:04:1b:29:31:41:43:1d:9c:7a:fa:3b:
bc:b4:a4:69:6e:11:11:4f:2d:87:1e:a9:c1:29:2c:
c2:1f:29:13:6e:e8:28:9b:99:75:4f:2b:92:d6:ad:
1b:23:95:4d:8a:66:7a:28:59:f7:d5:0e:18:5d:8c:
3c:e9:42:c5:d7:41:a4:e0:02:83:21:7f:f8:70:d0:
4a:02:11:f7:e6:40:96:b4:03:eb:3b:c9:d5:53:15:
9b:e3:85:b6:b6:3a:de:75:fb:7b:f1:4f:26:e5:9f:
85:56:e8:19:00:a0:54:bb:f0:95:79:51:e5:41:a1:
9b:d0:59:bf:27:26:ce:dc:4b:27:2e:fa:62:81:18:
01:51:c5:58:02:bd:f3:b0:06:aa:a9:ea:ba:78:6c:
48:92:e2:f5:20:7f:40:11:10:85:8e:65:0f:7d:80:
e9:8a:7c:ad:05:59:7e:fc:b4:1b:ac:70:44:c6:c2:
42:c8:aa:b5:a2:d5:6b:58:4e:85:0a:e6:ac:30:46:
cf:ad:cc:2e:16:44:eb:70:a5:0b:83:65:dd:60:5b:
59:27:89:3d:05:70:34:af:c5:8c:f4:87:db:78:7a:
09:e6:d9:60:18:b0:43:62:b5:ba:9c:7e:b7:38:5c:
52:b6:07:e1:25:e4:33:dd:28:24:8a:5b:b6:d2:6e:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:2B:92:9D:99:E6:7D:17:52:17:91:CE:0C:5F:65:84:0C:67:27
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:31:48:30:d7:b4:56:af:fa:62:6d:e3:52:8e:13:ea:0b:7f:
82:b3:b8:b9:65:9e:db:44:2c:c4:17:c7:a1:a7:bd:7e:bf:59:
ba:93:e5:47:4d:01:4c:01:c6:d2:fe:c7:54:c8:55:be:6b:42:
0d:f6:3b:01:af:ea:6c:d9:89:c3:e9:26:2e:15:ef:a8:be:88:
2f:8e:7a:14:5c:20:4e:a4:90:5b:a0:9d:5d:6d:78:4a:e6:c2:
8d:a6:66:e8:d1:d6:b9:b2:97:4a:ff:8b:78:cc:4f:11:fb:c1:
0c:c1:b5:a3:40:c7:f4:e6:e0:81:e8:46:2e:ba:79:9b:3c:06:
a2:dc:fb:fe:86:70:7d:32:60:9c:3a:66:b4:fd:8d:47:e9:20:
21:66:af:ac:db:47:70:e7:3d:d7:49:cc:35:82:09:c8:43:c4:
bb:cf:d0:9c:56:5c:df:6e:3f:93:a1:53:a9:c8:9a:63:b2:55:
40:bb:66:6e:91:20:87:3e:e1:b1:52:94:26:7a:09:63:e7:f2:
ff:17:92:82:22:20:bd:a2:b4:e7:da:8b:0c:86:de:6a:05:4f:
59:9b:55:3b:88:77:99:c6:96:26:06:a1:9f:7d:44:ae:2f:63:
f8:bf:12:69:29:8b:e4:16:d0:b2:6f:22:ad:00:c3:da:21:5e:
33:f5:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:29 2025 by rpki-client