Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: vSiMwyy7nIBsmX+lkTvzvdQRVWinio2J+qD2mBFfoog=
Subject key identifier: E2:D8:66:56:CE:B0:A9:6A:F0:05:B4:B2:8B:F7:5F:A7:67:77:25:B6
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019A4D05D5AC01F4AED848C27FB813B1F742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0B06
Signing time: Tue 04 Nov 2025 04:00:19 +0000
Manifest this update: Tue 04 Nov 2025 04:00:19 +0000
Manifest next update: Wed 05 Nov 2025 04:00:19 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: 24XDcB55ASyKB9xwMgSsC477LNfwK3+ZYqLCRyZmrtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:d5:ac:01:f4:ae:d8:48:c2:7f:b8:13:b1:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Nov 4 04:00:19 2025 GMT
Not After : Nov 5 04:00:19 2025 GMT
Subject: CN=e2d86656ceb0a96af005b4b28bf75fa7677725b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:3b:60:2a:96:25:d8:23:0b:c1:22:8b:e4:
92:f3:51:35:e1:dc:eb:fb:8a:83:c5:c0:69:ac:fc:
51:51:19:0d:98:45:69:68:f8:ca:b5:95:12:0e:2e:
c0:bb:b2:8c:13:65:48:9f:f0:d1:7c:3e:7d:79:09:
78:db:8a:5c:80:0f:6e:f4:1c:13:70:45:10:57:1d:
70:51:03:86:e3:7e:19:7f:0b:20:49:2b:50:43:6c:
43:dc:27:d0:28:9b:15:95:b3:18:38:73:5b:53:88:
a2:79:dc:f2:05:d9:15:cc:75:3e:c6:38:af:fb:17:
33:b1:5c:a0:ba:4f:0d:9c:9a:10:59:d5:05:ab:0b:
72:c7:ba:cb:f0:42:ff:04:8d:4e:ab:fa:74:6b:d2:
0e:b1:d4:b3:93:6c:09:cc:a3:ed:62:0d:c4:78:26:
71:1c:30:9f:08:14:32:ac:fe:bd:54:c3:2e:cd:3b:
52:34:97:69:0e:14:b0:d9:4a:30:0c:e1:05:b0:60:
33:d7:f8:3b:89:2e:1e:b6:2f:06:8d:c2:20:6e:38:
06:56:5c:b4:68:50:09:99:7a:1a:82:13:45:fa:cd:
86:6a:d9:15:d4:61:e7:0f:d7:51:2f:57:ba:f0:be:
96:fa:df:7d:96:b1:9e:28:70:54:34:c5:ef:44:fb:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:66:56:CE:B0:A9:6A:F0:05:B4:B2:8B:F7:5F:A7:67:77:25:B6
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:a8:4e:b0:8f:fe:60:c7:99:23:1d:fc:28:fc:d2:30:1b:
c2:31:12:8a:55:12:5f:59:d8:9e:3f:2b:b6:45:f3:35:9d:2a:
8f:72:1a:8f:3e:6c:ac:dc:e0:d7:a0:1e:7f:f2:0e:95:c9:bc:
61:2f:33:43:7c:4a:cc:83:d7:33:17:61:42:d9:22:43:2b:7e:
f3:60:20:ff:5b:62:81:21:6c:31:de:8c:30:2e:97:d4:73:61:
42:7c:c8:52:4d:53:5b:e8:78:fa:8c:1b:60:9d:6b:9a:1b:74:
ff:5b:f5:9f:8d:a3:3d:7e:8d:28:4b:96:8f:bf:de:57:98:38:
52:9a:81:71:c1:85:9a:fb:8f:2b:4f:16:81:26:90:a1:84:50:
62:3b:8e:c8:85:8a:9a:69:dc:19:85:a0:61:d2:1c:1a:60:7f:
13:5b:ec:fb:77:ff:9a:97:c2:9f:a4:cc:f4:f1:04:24:6d:a1:
5b:09:37:10:7e:9f:bc:6f:87:a8:7f:ab:2d:b8:50:69:7d:d2:
7a:96:0c:62:0a:18:45:77:65:45:0d:a6:ce:4c:ab:57:cd:ef:
ed:33:e1:18:23:e3:2b:96:97:fc:bf:05:0a:10:cb:05:03:e4:
00:e1:ea:6e:7a:7e:a7:40:3e:de:f8:3d:3f:fc:9b:5d:6e:8b:
76:7e:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:43 2025 by rpki-client