
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: C+1SffCTSas01YYSdHUrB+MqMep4s0IPFMaqnr+MBX4=
Subject key identifier: 78:4C:25:29:06:7F:F0:3F:CB:24:A4:0E:D1:D4:E9:2B:A4:BE:58:60
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 0197B88EB4CC5F5C8ABAF6CC197B20729D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 09B0
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: Zx5Hj/kTX2oxBlGudwILZU5QkUFAoNxdl2lcxHG6l00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b4:cc:5f:5c:8a:ba:f6:cc:19:7b:20:72:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=784c2529067ff03fcb24a40ed1d4e92ba4be5860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:c7:ff:c6:ff:83:35:52:f2:03:bc:f0:e8:
db:86:01:82:5b:af:19:2b:0b:37:e3:42:39:22:20:
2a:23:4b:a2:8e:3f:0b:81:b2:ac:4e:6e:56:58:f7:
94:33:79:07:1b:bb:c3:1f:2f:40:27:46:b8:c3:b7:
33:75:d2:1a:47:6e:a9:8f:99:b9:0e:65:e4:36:66:
e6:10:43:e9:c5:bc:8d:fe:38:cf:39:35:55:fb:cd:
63:be:8f:16:77:be:90:a8:b0:8a:14:2e:f0:1a:30:
b5:81:5d:75:cb:91:97:c3:f6:10:9c:06:10:ee:56:
b5:05:4e:ac:97:94:3c:16:34:6f:fe:6f:21:15:33:
d5:46:21:59:c6:06:80:d5:78:92:ec:dc:00:44:8f:
92:e9:0e:aa:6b:94:05:8a:dd:e6:e8:d2:44:a2:31:
77:26:ae:c1:33:23:da:e5:d0:ff:c2:e1:08:9a:17:
1d:4a:8d:d6:06:c7:69:16:dd:b3:1a:df:30:ff:81:
ac:16:56:9d:81:6c:d7:96:84:11:3a:5e:ee:d2:5b:
fb:76:d5:97:f0:5c:92:3d:15:97:bd:07:b5:a3:4d:
7b:48:52:d2:d8:95:2b:fe:c2:3a:77:9b:42:e2:27:
db:ad:36:b8:78:a6:42:ea:fe:4e:fd:1f:d6:65:92:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:25:29:06:7F:F0:3F:CB:24:A4:0E:D1:D4:E9:2B:A4:BE:58:60
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bf:13:be:6d:4a:2c:6e:6f:6d:07:05:d0:c0:d0:80:c1:45:
64:e8:c9:fc:ac:52:9e:2f:33:3d:9b:ad:bc:02:ec:a1:dc:70:
9d:d1:21:6b:1e:30:a7:39:93:d0:f9:86:63:92:95:25:fa:5f:
9d:18:38:fd:be:05:95:0a:a5:f3:7b:47:93:90:83:23:5f:ee:
d2:7c:cb:da:12:4b:85:43:76:e3:a2:49:3f:55:48:08:01:1c:
73:e3:a3:fa:94:9f:81:6e:ea:31:7a:8d:55:95:7f:b2:20:77:
b5:bd:72:2a:47:2d:fb:3f:eb:91:8b:96:85:7b:d5:42:4f:d5:
1e:d4:44:ab:62:c1:fd:3f:4d:c4:74:00:24:65:02:45:8e:7d:
87:87:ed:55:82:25:6b:e5:15:70:22:0d:57:ae:c8:4f:a4:e5:
86:5c:b3:dc:94:29:9c:9a:ab:3f:8f:fd:dc:d6:4e:4e:91:48:
64:51:c8:9a:b0:54:57:50:10:70:ad:f1:ff:97:61:f4:2e:e0:
d7:09:39:08:33:d1:5e:ba:29:38:b6:1a:04:2c:cf:15:4e:6c:
68:08:d4:9a:c7:bc:d5:13:fc:3b:1b:76:1e:ad:1d:c9:5e:b7:
d9:82:37:61:e6:70:7c:26:38:b6:90:26:b9:0e:98:8a:9d:8f:
c7:81:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:33 2025 by rpki-client