Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: GrxrzD69aclFlj4opwDs6qVbj5crkQzj9EFB+s8wvI4=
Subject key identifier: FA:9C:1A:EE:68:2B:A8:55:50:7B:D2:BA:4F:DF:28:E4:F0:EE:08:EC
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 0198D705F7614B81013A8ABFE1AD91637192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: BB
Signing time: Sat 23 Aug 2025 13:02:29 +0000
Manifest this update: Sat 23 Aug 2025 13:02:29 +0000
Manifest next update: Sun 24 Aug 2025 13:02:29 +0000
Files and hashes: 1: 06I5R5bPP8KwR2atDnGqxmGArH0.roa (hash: x3UPjaLz3m8eZvpyoX89Z8A1cSTNBY61IoY1p3tS41o=)
2: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: vXndWUcOqY/IcboNBgMrHWj4lnAlKiXWL/hk7DeQwY4=)
3: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
4: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
5: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f7:61:4b:81:01:3a:8a:bf:e1:ad:91:63:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Aug 23 13:02:29 2025 GMT
Not After : Aug 24 13:02:29 2025 GMT
Subject: CN=fa9c1aee682ba855507bd2ba4fdf28e4f0ee08ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:7e:bf:b2:d5:a6:4e:36:60:2e:9c:fd:70:
78:a0:e9:89:e4:72:d0:e5:02:c8:84:a7:9c:26:5d:
13:71:7c:c8:d8:4f:fe:95:c8:77:26:90:6e:f7:f4:
e5:39:04:18:9a:c6:5a:0a:9d:96:0a:d9:b4:1a:4a:
0e:8b:db:3a:d0:dc:86:b1:b0:49:86:f8:5c:48:d0:
2c:16:40:3a:f4:57:d3:dd:b8:53:03:92:c4:ef:51:
f5:c9:ef:e9:4f:7e:fe:30:b2:d1:9e:3d:fa:7d:8d:
4a:aa:34:ba:3f:1e:00:18:3d:ac:a8:f1:09:79:23:
86:af:84:b0:a4:ab:f3:0c:20:73:0b:84:e8:a2:bb:
ed:ca:eb:7b:48:17:73:8b:92:45:c3:03:94:4d:27:
ca:9f:a9:d9:76:62:69:8d:9e:b2:83:fc:95:b8:e1:
3f:8a:8e:37:0e:8e:ee:df:0d:aa:32:ae:d6:bd:80:
34:1d:a4:5a:29:2d:43:75:60:32:70:d0:1c:a4:8b:
41:2c:23:a9:1a:66:25:59:a2:93:04:c2:93:4a:dd:
cb:4b:06:0d:ea:76:13:64:f7:08:7c:70:e1:42:12:
58:07:5e:5d:3b:24:f3:ad:65:42:ac:d2:22:e0:50:
fc:ee:58:19:88:e5:36:ee:6a:52:9b:54:86:1e:31:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:1A:EE:68:2B:A8:55:50:7B:D2:BA:4F:DF:28:E4:F0:EE:08:EC
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:69:ae:8c:f3:a1:9a:d2:b1:98:9b:01:ef:58:de:45:43:43:
ed:fb:03:48:3d:0b:09:90:01:1e:94:5d:cc:6a:d6:03:5e:df:
40:d4:54:3c:1f:37:4b:d0:83:ca:37:4d:bf:8d:45:44:0f:f7:
c0:a8:54:e3:8d:bc:ef:aa:07:e2:fc:81:d1:cf:93:74:91:fb:
44:f9:88:0a:a1:17:ac:4a:67:1b:8e:cf:39:26:9d:15:24:02:
bf:01:bc:b9:03:12:ca:8c:e2:f5:cd:5d:16:34:18:d6:1b:5a:
38:4c:d7:89:cb:9c:ad:e8:d3:2a:e6:1a:d7:66:4c:0b:e6:95:
aa:e1:a9:60:38:14:84:69:8c:98:77:a6:35:84:d9:0f:02:64:
17:19:0a:2d:7e:8f:a3:5f:36:cc:20:25:ac:fd:c3:71:0e:2b:
54:64:b5:a9:a1:4e:c3:29:cc:26:c4:d1:31:33:a8:b0:d6:96:
95:36:9b:d9:2e:42:dc:0c:ba:b1:d9:a0:cf:dc:a7:32:3d:2e:
d2:58:e3:68:42:a3:3a:fe:df:99:e0:50:71:25:a6:09:a4:b3:
0d:28:95:3c:f1:dc:db:4c:35:c0:81:58:05:90:df:d6:a5:38:
1e:53:b9:4d:6c:aa:d8:00:b7:4d:e5:b2:6a:41:a4:33:b6:f4:
d4:fd:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:31 2025 by rpki-client