Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: JOqNR4yNHBubf7axbsJGSsx5uEstgMtgYwqeqaztV/A=
Subject key identifier: ED:A0:DC:F8:89:46:F6:A0:76:38:57:FB:97:96:C4:B9:DA:C8:0F:4E
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 0198D65FF518038C75BACF77A8692A1FF87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0A44
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: 2JmoTqX5gqvf1ocDrLvN8af4S1o2vPtFSHOtdXVKues=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f5:18:03:8c:75:ba:cf:77:a8:69:2a:1f:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=eda0dcf88946f6a0763857fb9796c4b9dac80f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:18:81:13:23:e2:cd:e7:c3:d7:7e:a0:2c:
2d:94:85:8b:19:d1:cb:6a:81:14:d1:ac:40:33:9c:
79:64:31:31:83:91:40:3d:61:f7:88:9a:1b:72:ee:
7b:78:06:89:3b:f1:31:76:5a:86:8e:e3:20:a0:36:
ba:1f:1f:be:97:a7:f5:58:88:97:6a:b8:33:81:9b:
c0:79:b7:fd:d9:85:e8:6e:fc:94:71:62:1d:2b:b4:
7d:41:d7:e2:ac:1a:2a:15:93:3b:4a:30:3f:a0:70:
c2:e1:4a:57:a8:ee:b9:88:6a:ad:ba:05:8e:37:b9:
60:ed:0d:b4:c3:bc:09:c1:a8:7c:6b:b1:c7:f6:8a:
28:fd:d3:08:f0:7a:cb:d2:6a:d5:a7:77:84:ec:a0:
ff:bd:a1:93:12:78:f4:f9:1c:bf:b2:af:fb:c7:a9:
0b:1a:ce:18:52:65:39:af:ae:3a:5e:7a:fc:b6:74:
82:a7:f4:8d:35:ff:30:6a:14:80:62:11:18:b1:6f:
7b:c8:95:be:f3:1b:44:ac:b0:a8:37:77:e9:08:f2:
29:57:70:e0:a2:72:9e:18:93:e2:cf:3e:ac:dc:29:
99:8c:56:cc:a0:0b:73:ef:ba:37:f2:22:0b:50:d9:
f5:32:a0:ee:f3:dc:e6:84:d4:ab:40:04:5c:dd:5d:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:DC:F8:89:46:F6:A0:76:38:57:FB:97:96:C4:B9:DA:C8:0F:4E
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:73:04:ca:36:f5:32:21:c6:38:32:97:a0:dc:48:46:6c:
23:d1:7d:c4:6c:39:ca:96:a4:49:0a:d0:94:b5:72:2a:06:48:
a3:eb:59:f2:06:12:0f:2e:61:b3:3a:ec:40:35:ed:a9:9c:ab:
e5:4f:41:38:84:aa:52:0c:3a:e7:f5:fd:d1:a4:df:e9:fe:b4:
f2:1d:9f:80:a8:a4:6f:2c:6f:5c:dc:81:0f:63:af:60:0f:47:
95:a2:c3:07:98:fe:0d:fb:f4:77:c3:93:91:d9:7a:54:9b:c3:
3a:9c:7a:a4:03:dc:a1:b9:97:96:97:e8:ad:81:3f:5a:8e:f6:
9f:b3:1b:5b:07:3c:5a:94:c7:16:a2:71:3c:a7:6a:4a:a0:bc:
10:0c:27:5a:9e:e9:b7:52:5e:8a:c3:c1:77:a5:03:d9:a9:cf:
ae:1e:c0:9b:47:68:c0:bf:dd:b1:08:f5:f1:aa:fd:45:07:d8:
06:7a:b7:6a:e9:89:fb:02:f0:d8:b1:00:96:9d:03:d2:95:75:
ca:6a:05:d6:2d:b1:c7:86:2d:f9:49:17:9a:f1:1b:74:d3:68:
5f:67:e5:8d:df:18:9b:a5:0b:d6:55:5c:7e:c3:f7:d7:f5:97:
f6:2a:29:61:1c:31:a7:55:14:66:05:0e:5f:ca:b1:9f:78:35:
03:f5:9e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/UYA4x1us93qGkqH/h+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YmRhMThmZWZiMDBlN2U5YzU0NzMzMDE5Yzc2MmJiMmVi
M2EzM2MwHhcNMjUwODIzMTAwMTA5WhcNMjUwODI0MTAwMTA5WjAzMTEwLwYDVQQD
EyhlZGEwZGNmODg5NDZmNmEwNzYzODU3ZmI5Nzk2YzRiOWRhYzgwZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurgYgRMj4s3nw9d+oCwtlIWLGdHL
aoEU0axAM5x5ZDExg5FAPWH3iJobcu57eAaJO/ExdlqGjuMgoDa6Hx++l6f1WIiX
argzgZvAebf92YXobvyUcWIdK7R9QdfirBoqFZM7SjA/oHDC4UpXqO65iGqtugWO
N7lg7Q20w7wJwah8a7HH9ooo/dMI8HrL0mrVp3eE7KD/vaGTEnj0+Ry/sq/7x6kL
Gs4YUmU5r646Xnr8tnSCp/SNNf8wahSAYhEYsW97yJW+8xtErLCoN3fpCPIpV3Dg
onKeGJPizz6s3CmZjFbMoAtz77o38iILUNn1MqDu89zmhNSrQARc3V2fwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2g3PiJRvagdjhX+5eWxLnayA9OMB8GA1UdIwQY
MBaAFKm9oY/vsA5+nFRzMBnHYrsus6M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wNDIzMzktZDAzYy00NjM2LTllYzkt
MTYzMjIyYTcxOWI1LzEvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wNDIzMzktZDAzYy00NjM2LTllYzktMTYzMjIyYTcxOWI1
LzEvcWIyaGotLXdEbjZjVkhNd0djZGl1eTZ6b3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcU1zBMo2
9TIhxjgyl6DcSEZsI9F9xGw5ypakSQrQlLVyKgZIo+tZ8gYSDy5hszrsQDXtqZyr
5U9BOISqUgw65/X90aTf6f608h2fgKikbyxvXNyBD2OvYA9HlaLDB5j+Dfv0d8OT
kdl6VJvDOpx6pAPcobmXlpforYE/Wo72n7MbWwc8WpTHFqJxPKdqSqC8EAwnWp7p
t1JeisPBd6UD2anPrh7Am0dowL/dsQj18ar9RQfYBnq3aumJ+wLw2LEAlp0D0pV1
ymoF1i2xx4Yt+UkXmvEbdNNoX2fljd8Ym6UL1lVcfsP31/WX9iopYRwxp1UUZgUO
X8qxn3g1A/WeRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:46 2025 by rpki-client