Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: I9t6qxjckXcWhu3atxV7rtXTN4JNVXLV63Qlgd5sxTs=
Subject key identifier: D8:C0:4F:EB:A0:06:32:10:B6:FE:EF:3C:33:CA:CA:30:E4:32:2F:61
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 0197500EB8173968ACAB18AD332D381AE3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 097A
Signing time: Sun 08 Jun 2025 15:00:31 +0000
Manifest this update: Sun 08 Jun 2025 15:00:31 +0000
Manifest next update: Mon 09 Jun 2025 15:00:31 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: dNVqHbufKde5qRgS2zlBrLbU0fU5ibSc14bxzL5KTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:b8:17:39:68:ac:ab:18:ad:33:2d:38:1a:e3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jun 8 15:00:31 2025 GMT
Not After : Jun 9 15:00:31 2025 GMT
Subject: CN=d8c04feba0063210b6feef3c33caca30e4322f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:fb:00:26:bb:7b:3f:6c:a5:a0:57:20:44:
2f:dd:3b:17:b2:92:33:56:e5:46:34:2f:46:ea:ee:
4f:ae:22:a2:bf:92:42:20:d9:1b:28:ab:3c:0d:b8:
c2:45:e4:ff:52:3d:ff:20:27:ef:8b:43:44:63:ea:
91:ea:7c:8e:3b:4d:32:7b:b7:4f:31:23:6b:67:3d:
37:26:30:ec:0a:ce:84:c1:47:83:e9:95:78:e8:70:
f5:3f:77:65:94:56:3a:74:de:c5:05:43:e9:ff:fb:
68:c7:99:d3:bf:2f:c7:11:1b:77:23:b8:bf:4e:74:
cd:e7:db:09:00:46:cc:06:90:b8:8e:25:bf:cc:be:
5b:37:6d:7e:73:ba:a3:94:09:9a:eb:03:cf:50:69:
43:f8:d9:1f:7e:ba:80:98:27:e1:a7:ad:e7:68:2e:
b2:bf:69:a2:90:33:1c:ae:e7:e6:71:d8:ac:17:84:
6c:ec:72:cf:e3:9b:69:3c:7b:58:6f:70:08:76:9e:
3d:f1:c7:9e:09:aa:81:22:91:d3:38:41:0b:36:a9:
49:73:bb:7a:dd:25:be:da:c1:7b:ac:e0:bc:f0:1b:
9e:08:34:c1:90:1d:28:2a:fd:50:c7:2f:6c:70:6f:
a3:af:bf:37:92:46:84:b7:20:64:45:93:73:ee:dc:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C0:4F:EB:A0:06:32:10:B6:FE:EF:3C:33:CA:CA:30:E4:32:2F:61
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:13:25:d4:7f:36:90:19:d4:f4:7e:ac:7f:2d:7d:3c:8e:
f5:c1:19:f7:14:d1:d9:65:20:9f:74:42:72:06:8b:f4:4e:8f:
68:71:bf:fe:a1:e4:76:b3:a9:a3:2a:60:2e:0f:aa:a7:fd:f6:
d8:4c:42:2d:30:85:b5:16:24:e7:f9:34:81:28:81:6e:97:44:
0f:d2:bb:be:54:74:cb:da:80:c8:bf:ff:3e:9b:fb:31:ac:fc:
1a:7b:97:6c:ce:83:30:d9:91:b7:94:f4:da:b2:eb:c4:30:ea:
24:2c:aa:12:b4:cd:63:6f:f9:81:a0:90:7d:e6:be:96:61:a4:
f1:6c:13:58:67:76:62:d9:5e:fa:e7:c1:e0:2e:11:49:ea:b4:
21:08:27:27:89:1f:9d:45:ea:59:f9:e3:45:33:dd:2a:14:b5:
f5:f2:3f:05:a4:97:ac:e8:c1:db:22:6f:84:7f:c4:1e:ea:f6:
fc:bf:88:7d:48:dd:8c:aa:97:11:22:b1:f3:13:d3:f9:b8:c5:
1a:9f:24:9e:8c:77:d9:68:7e:6c:91:53:da:47:45:f4:f8:2f:
e3:6c:14:d2:e7:b8:4e:f6:15:f6:9e:ec:24:a0:dd:10:37:af:
55:30:13:ea:07:54:70:74:cb:63:61:2d:f6:22:ec:33:f8:de:
98:c3:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:28:37 2025 by rpki-client