Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: +hHTugbT9BWApPP/f63BTih1tqAffW7b67bBNXsf8J4=
Subject key identifier: 4B:94:BC:08:E2:5E:F8:EA:B8:8F:BE:4C:BE:29:06:E2:AD:60:62:FC
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019847770FBEA9BA5D44C8C07608958C11B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 09FA
Signing time: Sat 26 Jul 2025 16:00:41 +0000
Manifest this update: Sat 26 Jul 2025 16:00:41 +0000
Manifest next update: Sun 27 Jul 2025 16:00:41 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: E+EXMoastMumFsFrzydG133w16ztikv/8aUUoY+sPCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:0f:be:a9:ba:5d:44:c8:c0:76:08:95:8c:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jul 26 16:00:41 2025 GMT
Not After : Jul 27 16:00:41 2025 GMT
Subject: CN=4b94bc08e25ef8eab88fbe4cbe2906e2ad6062fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:23:af:e6:9d:9e:04:a4:97:f6:2d:a5:19:
10:c1:c2:84:41:3e:ab:ab:38:84:c0:da:32:c2:51:
8f:71:f1:a6:f0:d6:80:a5:8e:cb:69:79:af:97:ef:
9b:32:17:f8:05:54:83:43:83:47:d8:94:e2:20:71:
cc:bd:bf:ec:6d:f3:8e:4a:1f:01:5d:3d:b3:4e:e6:
a7:c2:a7:52:7d:25:66:93:28:08:21:5b:5d:30:dd:
d7:f5:3d:38:d2:23:13:f6:99:8f:6b:0a:29:02:af:
66:ea:4b:c6:13:2b:41:84:eb:b4:ab:6b:fd:0b:d9:
91:14:51:cd:c2:6b:67:a3:ad:18:c6:f2:20:1b:fc:
cc:94:08:80:cf:e4:3c:18:2e:fe:46:9d:87:64:95:
58:03:ba:38:09:20:67:1c:0f:7b:dd:9a:6a:00:02:
fc:06:37:8b:7f:34:91:2c:32:5c:de:55:bc:a9:c7:
af:91:c3:53:84:fd:de:7f:5a:2c:fc:5a:57:31:83:
03:e2:06:19:b2:e5:8f:a6:d8:b6:b3:5f:e6:79:2f:
97:c7:ab:c6:73:02:69:ce:85:9e:04:df:55:56:d0:
3e:20:1e:97:fa:99:1b:d8:8f:fd:34:0f:44:ab:0b:
7d:3f:b7:da:63:26:45:0c:5d:2e:0a:24:e8:c6:38:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:BC:08:E2:5E:F8:EA:B8:8F:BE:4C:BE:29:06:E2:AD:60:62:FC
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:93:d9:e8:73:4d:e4:55:b7:ea:c1:08:bc:c5:3e:09:aa:64:
8e:09:d5:8c:97:07:f7:4d:f4:60:d3:f7:04:59:fb:f4:8c:fb:
da:b2:b4:27:61:d4:d6:b0:1e:5d:b9:05:2c:ea:8f:f0:c8:2f:
a7:a8:53:35:6b:f8:1f:e5:be:f4:9d:0b:7c:f6:59:f7:15:07:
4d:fc:62:89:35:4d:f8:40:e9:a1:b1:0d:fe:00:0f:5e:12:6f:
00:f5:4f:9f:1c:43:4a:c0:65:43:78:c4:8c:90:c8:80:e2:70:
15:fa:47:71:1b:1a:b7:99:14:3c:1c:46:88:5a:e7:e3:30:97:
26:06:f4:91:0f:a1:6c:d4:b5:34:ab:49:14:53:57:87:4c:37:
a6:40:ae:e2:89:42:6a:25:8b:44:56:94:09:a6:6b:d6:10:f0:
a1:fd:bc:54:b6:bc:3d:e2:00:dc:d4:3e:91:ee:ab:15:68:4e:
d3:c9:94:b4:f4:b2:c7:2c:13:35:6e:0a:08:71:9e:84:69:33:
2d:e2:bf:c3:dd:51:0b:66:fa:ac:6d:a0:fd:60:ee:80:fb:d7:
b7:db:55:34:32:8c:c9:c4:7e:82:e0:6a:24:f9:11:68:0e:53:
3f:1f:2b:0e:7f:eb:0e:ea:41:a0:ac:bf:84:23:3f:51:b1:a5:
cd:65:66:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdw++qbpdRMjAdgiVjBG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YmRhMThmZWZiMDBlN2U5YzU0NzMzMDE5Yzc2MmJiMmVi
M2EzM2MwHhcNMjUwNzI2MTYwMDQxWhcNMjUwNzI3MTYwMDQxWjAzMTEwLwYDVQQD
Eyg0Yjk0YmMwOGUyNWVmOGVhYjg4ZmJlNGNiZTI5MDZlMmFkNjA2MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTAjr+adngSkl/YtpRkQwcKEQT6r
qziEwNoywlGPcfGm8NaApY7LaXmvl++bMhf4BVSDQ4NH2JTiIHHMvb/sbfOOSh8B
XT2zTuanwqdSfSVmkygIIVtdMN3X9T040iMT9pmPawopAq9m6kvGEytBhOu0q2v9
C9mRFFHNwmtno60YxvIgG/zMlAiAz+Q8GC7+Rp2HZJVYA7o4CSBnHA973ZpqAAL8
BjeLfzSRLDJc3lW8qcevkcNThP3ef1os/FpXMYMD4gYZsuWPpti2s1/meS+Xx6vG
cwJpzoWeBN9VVtA+IB6X+pkb2I/9NA9Eqwt9P7faYyZFDF0uCiToxjgyiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuUvAjiXvjquI++TL4pBuKtYGL8MB8GA1UdIwQY
MBaAFKm9oY/vsA5+nFRzMBnHYrsus6M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wNDIzMzktZDAzYy00NjM2LTllYzkt
MTYzMjIyYTcxOWI1LzEvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wNDIzMzktZDAzYy00NjM2LTllYzktMTYzMjIyYTcxOWI1
LzEvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5PZ6HNN
5FW36sEIvMU+CapkjgnVjJcH9030YNP3BFn79Iz72rK0J2HU1rAeXbkFLOqP8Mgv
p6hTNWv4H+W+9J0LfPZZ9xUHTfxiiTVN+EDpobEN/gAPXhJvAPVPnxxDSsBlQ3jE
jJDIgOJwFfpHcRsat5kUPBxGiFrn4zCXJgb0kQ+hbNS1NKtJFFNXh0w3pkCu4olC
aiWLRFaUCaZr1hDwof28VLa8PeIA3NQ+ke6rFWhO08mUtPSyxywTNW4KCHGehGkz
LeK/w91RC2b6rG2g/WDugPvXt9tVNDKMycR+guBqJPkRaA5TPx8rDn/rDupBoKy/
hCM/UbGlzWVmIA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:00 2025 by rpki-client