Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: m4x8e2hogmywCfO5i2h/Q5P/AdsK8qQ8reqy1kNJ6vM=
Subject key identifier: D1:CA:70:60:BF:F9:70:29:57:33:E7:B2:2B:CA:93:FA:65:E8:A3:83
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 0199FC8FB1403D1ADB6CE4083FF44E073F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 0153
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: 06I5R5bPP8KwR2atDnGqxmGArH0.roa (hash: x3UPjaLz3m8eZvpyoX89Z8A1cSTNBY61IoY1p3tS41o=)
2: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: H2sWM8ZtHd820UQ2fLzy8JuPDf69KoJ9JC8mY4qxtLY=)
3: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
4: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
5: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b1:40:3d:1a:db:6c:e4:08:3f:f4:4e:07:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=d1ca7060bff970295733e7b22bca93fa65e8a383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:13:12:83:25:50:61:98:a7:ce:97:81:24:
66:91:10:ec:40:b8:e1:10:ae:fa:4e:38:73:f0:91:
f0:93:32:e8:d5:f4:a6:7c:ec:f0:2b:30:e2:b6:f2:
d8:d9:f5:32:a5:e7:6b:36:9c:8c:a1:a7:ae:ec:98:
6b:04:12:63:10:99:fb:77:29:c6:b0:14:08:3d:34:
7b:7b:40:11:e8:a8:ea:07:88:ef:91:8b:f0:a2:ac:
cb:b3:90:58:59:a9:28:5a:62:19:94:2e:bc:a9:a6:
68:d5:1b:02:c5:f4:b3:75:89:f4:06:44:29:52:d9:
d0:a4:66:63:9a:ba:19:24:a2:b2:ca:4f:11:b2:17:
01:1f:3e:56:c9:cf:ba:0a:a6:7b:e0:2a:75:45:47:
77:b0:78:17:ac:5e:07:6b:13:21:21:c5:87:c1:4f:
6e:6a:05:c0:df:43:38:51:6c:f3:57:cd:78:7c:b1:
36:d8:e5:91:3d:f5:e5:30:0e:fb:b0:a8:eb:ee:5e:
e2:25:ff:e3:b5:5c:b9:2d:f5:1d:c3:f9:3c:a4:85:
ad:39:e5:e8:d0:89:8d:39:dd:e9:61:e6:48:3f:1b:
55:08:c4:e3:74:82:04:b3:22:81:4d:d6:f5:da:81:
e2:1d:c8:9c:fc:ee:bf:2d:54:3c:cf:7b:ac:f8:bd:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:70:60:BF:F9:70:29:57:33:E7:B2:2B:CA:93:FA:65:E8:A3:83
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:17:03:6e:b0:af:f2:4a:81:8d:dc:c5:2d:9f:c8:a3:47:
d7:3a:1c:90:35:e3:7d:f7:df:6e:06:a7:5a:1f:35:b9:db:e1:
c7:bf:b2:55:ab:89:c0:41:1d:45:f6:81:e7:b2:98:b5:f1:86:
f0:31:e0:e1:1b:fc:7a:15:2c:0e:a8:74:ed:fd:4c:7b:e0:bd:
63:d1:f1:91:18:63:b4:2f:0a:bf:fc:f5:c8:fc:c2:dc:49:9e:
f9:da:e2:50:78:80:04:ef:b9:31:1d:90:ab:ce:c9:31:dc:58:
bf:5c:34:e1:74:0a:ae:90:f9:d8:91:d0:e4:79:4c:cf:9a:5c:
b1:f7:11:cd:7f:27:87:80:7a:97:01:75:1e:bf:1c:f2:e6:86:
8d:ce:68:be:80:87:bd:30:9e:49:4a:ff:84:d2:2a:0a:36:72:
cd:dd:d7:98:60:76:49:98:b7:07:57:94:1f:42:36:1a:57:2f:
28:1f:ea:22:88:56:19:4c:c5:82:b9:e1:23:0e:c3:9c:7d:0b:
6e:b9:04:77:ac:e8:15:8c:6e:0c:b4:9d:53:79:71:3a:ae:13:
4d:88:86:8a:f0:7a:b9:6e:26:a0:67:31:9a:04:71:d5:df:9e:
46:56:d3:ea:ac:64:80:ee:63:61:cf:70:e3:36:9d:d7:85:25:
10:9c:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:16 2025 by rpki-client