Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: XyHsXYwadY+5fFBf8bX80oCDWqpIkRwAsSRfbtnXzBc=
Subject key identifier: F9:4E:32:B7:ED:27:2B:5F:44:DC:FC:BE:F2:5A:4B:77:E3:9E:CD:AA
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019873E2AEEC849D188F7A62FD58822A644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0A11
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: AKljQrdZVSvtkkwx91VBZ2HkBWQk2KG+2kfqxicxCM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ae:ec:84:9d:18:8f:7a:62:fd:58:82:2a:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=f94e32b7ed272b5f44dcfcbef25a4b77e39ecdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:12:d3:95:20:f1:b5:cf:13:fc:c4:0d:ae:
35:69:6c:09:87:58:72:37:c4:70:85:a4:b7:e5:c0:
44:dc:f6:76:73:ab:83:28:69:78:eb:24:37:86:15:
0d:40:0b:9f:44:48:e9:d8:0f:99:83:ab:18:cd:d1:
88:8b:b6:b1:55:f3:de:41:b7:bf:72:50:fa:0a:cc:
34:96:81:30:4d:65:d1:b2:42:30:a9:59:35:6c:00:
30:48:2d:8a:bd:25:c1:45:64:2e:66:97:c5:0d:8f:
78:bb:65:13:65:c4:67:a3:fb:ef:61:20:a5:0c:db:
b0:9a:b9:3d:ac:e7:d9:ea:6a:f7:9b:9c:fc:13:c5:
81:19:f2:48:b8:5f:b0:45:fa:f1:86:8d:69:5b:8a:
73:ae:a6:b0:aa:4e:ef:78:7a:82:5d:3f:4d:9f:64:
25:59:d0:89:06:19:93:2c:13:16:2d:96:61:32:80:
4b:1d:a8:aa:4e:2e:a0:2c:6b:35:0d:bd:b8:28:56:
49:56:b1:3e:e5:19:79:3d:6a:e6:f0:ed:e8:f6:55:
08:61:af:6c:30:83:ff:7d:f3:d7:ff:c2:23:64:c4:
6c:d1:d7:d3:e8:4e:f6:b6:4e:a0:d8:d0:35:42:f1:
b2:13:73:d0:ff:52:fc:bc:45:b0:e6:c2:88:87:13:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4E:32:B7:ED:27:2B:5F:44:DC:FC:BE:F2:5A:4B:77:E3:9E:CD:AA
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:ad:6f:dd:15:02:ea:a1:22:ce:76:45:86:fc:9a:73:ab:
29:1c:27:03:67:b6:71:fb:82:83:75:f1:a7:81:06:d6:d8:b6:
19:33:da:3a:3a:d8:83:77:d1:19:ab:39:4b:9f:1c:4e:00:76:
0a:bc:4e:06:0c:1e:a4:f9:f1:3c:dc:53:96:d0:69:f2:fd:86:
4c:7d:13:0e:28:6f:14:bb:4d:3d:5b:fb:d3:6b:05:2e:3b:0f:
75:bc:71:82:02:ac:1f:61:b1:7b:52:47:ae:01:94:07:8d:9e:
74:63:5d:e8:74:14:74:24:d3:4d:3c:16:87:f8:50:22:ca:0d:
74:e8:48:7d:c2:7e:24:86:56:89:27:c1:a0:30:2d:4c:b0:db:
08:1a:0e:6d:8d:e3:43:74:a0:8e:67:81:01:02:47:eb:fa:48:
7d:a0:40:5e:da:40:6c:d6:39:e7:0a:9e:db:5d:8f:9b:27:94:
4d:95:6a:a2:4a:62:ea:13:b5:d2:cc:40:06:12:40:5c:bd:bb:
d4:1b:b0:60:c9:5d:71:14:47:2f:86:d5:27:ed:b8:5f:1c:53:
29:92:fc:4d:fc:f3:49:1c:f1:07:43:23:93:30:41:a5:1e:23:
f2:1c:3b:90:3f:a8:2d:9b:6e:32:12:a1:9e:ca:39:33:f6:4e:
cf:88:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:06 2025 by rpki-client