Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: 5F8nFvXPbvB+jP2YOLDzrmIZYuKfokkm1cduiJX5F9o=
Subject key identifier: B8:7F:FB:BF:19:B9:CB:89:C0:C6:7C:DA:14:29:77:40:B3:24:85:6D
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 019A4D06B5C93E7CBCD1923D7C1466EC77A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:16 +0000
Manifest this update: Tue 04 Nov 2025 04:01:16 +0000
Manifest next update: Wed 05 Nov 2025 04:01:16 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: 31Vf1ya8CU1J/cvMCs1w2TnzH3xws7GBP1MfRwT08Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:b5:c9:3e:7c:bc:d1:92:3d:7c:14:66:ec:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Nov 4 04:01:16 2025 GMT
Not After : Nov 5 04:01:16 2025 GMT
Subject: CN=b87ffbbf19b9cb89c0c67cda14297740b324856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:db:b8:8b:be:16:54:d1:00:e6:0b:e4:a7:
81:02:ef:e4:81:2e:c7:0f:50:41:8c:80:22:40:4a:
8e:12:d8:e5:97:07:fb:26:a2:01:9c:e7:df:bb:95:
d6:b9:4b:cf:54:5d:69:72:44:4a:0d:94:1c:7c:ca:
94:fa:7a:e1:be:ae:64:c1:42:37:b2:33:dc:3e:91:
1c:7a:44:3e:98:2e:76:54:c9:c2:2a:ec:3c:3d:26:
aa:97:02:5f:a9:4e:8c:dc:bc:62:1a:88:bc:7e:a1:
ec:2c:02:46:0c:84:aa:d7:ab:4d:30:70:51:2e:45:
a4:c6:13:ff:32:df:30:0d:f2:d3:e3:6a:9a:80:54:
9b:d7:85:cb:66:b9:4c:91:08:ff:cf:38:3e:b7:77:
3a:b4:9b:a2:c5:b2:07:a7:82:a6:e5:8d:3f:92:be:
47:98:c8:c2:00:62:d5:6a:24:3e:d5:5f:68:cd:e1:
83:6c:9a:5b:35:64:4b:4b:7a:84:e9:2e:7b:e2:15:
7d:72:e2:b4:cc:ab:0b:56:c5:e5:07:d2:80:29:e6:
c3:b8:fe:59:8a:66:5a:f8:ca:6e:f7:36:2a:cc:05:
3c:de:51:1b:ee:9c:3e:7e:5c:70:28:35:05:43:ad:
11:ef:7e:93:43:f4:4a:6f:01:ba:cd:40:c3:f4:68:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:FB:BF:19:B9:CB:89:C0:C6:7C:DA:14:29:77:40:B3:24:85:6D
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:87:8a:99:d6:a0:e4:ec:84:1a:fd:ea:32:16:c5:ba:47:
44:73:37:4d:03:4d:e2:3c:06:cb:a4:7b:18:5a:0b:de:40:d3:
de:61:84:9e:eb:c7:7e:5a:5f:e8:a1:d2:c7:33:ce:f7:b5:e5:
89:a1:ad:35:e8:ba:4f:fb:a5:bc:1e:1c:c5:1c:b0:92:f3:f7:
a8:49:06:3b:18:6d:f6:96:af:68:52:06:d4:61:46:31:10:cf:
c9:70:a8:8b:7b:63:32:34:d5:9b:78:26:97:57:79:16:71:7f:
36:39:cd:f5:1c:2a:ef:37:8c:43:70:47:f4:61:8f:5d:1b:27:
ae:15:7b:e5:5d:93:03:88:65:99:c1:76:21:92:fa:cd:97:26:
af:34:62:9e:71:49:5c:d8:4c:fb:6a:e3:f6:05:87:4c:18:ce:
73:8b:2b:2a:07:45:5b:7f:cb:13:0d:bb:6d:75:03:3d:d3:1a:
9d:e0:a9:eb:17:5b:80:85:d6:71:f4:64:ed:a1:c5:73:f5:59:
74:b9:d3:2c:52:18:39:a1:b6:77:f4:00:97:9a:b3:9b:69:83:
d0:80:15:dc:25:e7:62:30:1a:fd:d5:61:43:e0:6a:93:68:64:
79:b8:0a:a1:f6:dd:88:7b:16:e7:44:50:c1:e0:8b:fd:8b:ce:
8e:6b:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client