Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: FFLzVL5DDLFJrmi6lsuF2SrPJ6aJBAUdQrupcsvD0Hg=
Subject key identifier: 2C:A4:5C:0F:11:75:EE:6B:02:09:E0:01:44:F8:E3:BB:DB:B0:6B:BF
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019935010BCD06DC532DCB173C867A972D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0A75
Signing time: Wed 10 Sep 2025 19:01:24 +0000
Manifest this update: Wed 10 Sep 2025 19:01:24 +0000
Manifest next update: Thu 11 Sep 2025 19:01:24 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: zaaMamGAm8fKHxaCGZFy+dS5evOXxZhlm3hbjJVXXKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:0b:cd:06:dc:53:2d:cb:17:3c:86:7a:97:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Sep 10 19:01:24 2025 GMT
Not After : Sep 11 19:01:24 2025 GMT
Subject: CN=2ca45c0f1175ee6b0209e00144f8e3bbdbb06bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c0:7a:f5:f9:07:25:8a:2e:92:51:e4:1c:f8:
9a:f2:09:19:4b:81:5a:df:42:a5:fc:5a:f7:59:d7:
83:ec:ec:98:cf:a8:3e:86:bf:86:79:70:ef:e3:f0:
4e:bd:00:6d:fa:f7:eb:73:dd:67:58:e6:c6:74:4f:
36:1a:cd:36:32:81:3a:ee:21:c8:da:c9:a8:2c:9c:
f6:b2:35:15:01:64:94:ce:a9:5c:c3:70:c1:3d:de:
26:af:7e:e3:23:5d:98:ac:9d:b7:72:af:ff:3a:7f:
64:2c:46:95:69:e6:13:91:5b:90:1f:5b:14:d7:c9:
38:b7:7d:fb:c0:af:14:04:ba:90:ec:e5:b6:c8:fe:
6c:7c:20:e6:23:8d:1f:9f:16:24:cc:4a:ba:14:6a:
81:82:00:ba:f4:4b:57:43:70:7c:94:04:dc:9f:6d:
9f:16:eb:58:b8:b6:0e:65:34:6f:0f:35:ae:67:25:
cc:d6:cc:a5:45:db:69:cc:be:56:ce:16:d2:5a:ab:
a6:a4:93:34:3d:19:b5:fb:60:67:d8:5b:e4:7a:00:
23:62:cd:13:e8:e6:c6:29:d2:21:11:9f:02:b1:d6:
a7:1f:90:8e:b6:36:00:ce:50:a3:3e:e7:a3:82:21:
82:ad:ed:79:66:58:e5:ec:88:d6:86:44:8c:b1:94:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:5C:0F:11:75:EE:6B:02:09:E0:01:44:F8:E3:BB:DB:B0:6B:BF
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:72:e0:0d:08:47:af:7c:d8:ec:a5:63:94:48:7d:4b:ad:78:
35:e1:0c:f2:e2:9d:66:5e:6f:ff:7e:72:03:b4:77:21:e2:4a:
cb:16:42:fc:db:4a:ed:2b:53:d9:f7:34:45:75:32:a4:44:3a:
4c:61:e7:e9:0e:5a:27:17:59:0d:57:8e:24:e3:be:d9:aa:76:
68:53:f2:62:7a:93:4f:79:cd:a8:a7:b4:be:9a:fd:ba:02:45:
9e:d5:13:61:ca:98:e5:fa:f4:c7:f0:33:51:fd:34:c5:29:f9:
de:e0:84:a4:77:09:7b:57:ce:72:3c:00:2e:9e:8f:fe:92:c5:
47:26:db:6d:cf:b5:26:68:60:e8:22:0f:f9:c7:ba:15:e2:16:
b6:c9:15:a0:db:2f:49:01:b7:1a:b9:5c:fb:26:04:38:a0:83:
7b:3e:cf:b8:7d:ff:ea:75:65:68:d7:ea:1a:5e:58:3b:03:b3:
80:8b:41:84:a8:48:6e:1e:fb:2c:e3:ee:6f:ca:c1:13:f7:b5:
bb:68:62:c8:19:da:e6:9f:1a:97:bc:e0:16:83:7c:f2:ff:70:
8d:7c:c5:86:17:57:bb:09:f6:52:b0:54:18:ac:cf:bb:14:05:
2b:8f:d7:5f:39:46:2d:0f:69:0f:34:f6:d9:e9:ce:75:24:97:
a8:7a:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:49:34 2025 by rpki-client