Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: LSEsam/WynFuGig/Z/HMwYCs1V69L2QJeAy+lUcywfs=
Subject key identifier: 8A:8C:11:F7:B5:9F:78:C9:7C:B2:C5:55:74:82:95:15:B5:4E:FF:50
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 0197B77CAFEA081DFF98012518CF2788CA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 21
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: 2cDlM0FV1MA3E8bXg6AhLqP1u58.roa (hash: ClDXDYveZPg59ygW9p5PREHRlwUfrSh09CoG00gqrAE=)
2: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: 0l2Ih8mqGqxWtmCeMAgOV2kDRIKWvAz8kXDgPNjLfGk=)
3: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
4: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
5: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
6: SopY6ZWS_zSvVdJ9S_7T2LdpBOc.roa (hash: R2CNWd8z+13gfjTHMhQx1RDxnIJ67GFa1Df1tprgfYQ=)
7: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:af:ea:08:1d:ff:98:01:25:18:cf:27:88:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=8a8c11f7b59f78c97cb2c55574829515b54eff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:f9:b2:3b:64:dc:eb:77:b9:6e:6e:07:dc:
9d:ce:3b:a5:c0:b7:b6:ef:c2:8f:30:4a:40:3a:ca:
c0:f2:84:78:59:42:8e:d5:a7:03:5c:c5:46:92:2f:
52:ac:34:66:12:0d:ae:84:d0:36:0d:2f:f6:4e:db:
22:ee:54:fb:5f:1e:3b:0d:8d:1f:a0:c4:cc:4d:0d:
f1:22:5d:ca:7b:b5:4f:a3:3a:a6:a2:c3:be:8d:50:
8f:be:d6:87:7d:1f:b2:c9:c4:40:90:7d:74:44:fd:
cc:03:6e:3b:13:e9:6e:e0:75:3e:fa:06:ec:d6:8e:
60:5b:cc:c8:80:c7:70:db:1c:a6:b9:b4:ca:9e:1f:
12:cc:da:a8:ed:fd:e5:94:1f:94:b9:dc:15:29:a4:
47:1f:0e:34:58:07:fb:ec:bd:c9:06:bb:83:b0:e7:
e1:ec:42:9c:bd:18:cb:06:25:ff:4a:86:86:c1:25:
04:77:88:91:ee:da:58:c6:29:7d:68:93:fc:c5:6b:
4a:1a:a8:82:68:95:53:f7:19:45:8d:4c:da:60:e6:
3e:dd:9e:a9:5e:63:b6:15:8f:a3:0b:4a:18:f9:ad:
55:bb:26:38:ee:33:b5:b7:56:0f:41:ba:1d:e3:cc:
74:4a:5b:a4:74:f2:7b:33:74:4a:8a:93:bd:f6:e6:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:11:F7:B5:9F:78:C9:7C:B2:C5:55:74:82:95:15:B5:4E:FF:50
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:d7:8b:ac:62:8e:0a:b3:0f:b3:3e:02:7e:03:93:b9:1d:
84:6e:17:20:e4:b5:75:39:06:c3:24:07:48:b2:91:2a:b1:30:
bd:59:66:01:d0:24:a0:7b:18:10:b5:a1:2f:00:7b:d4:b3:a5:
8e:89:32:3b:d1:4e:eb:58:14:f4:2d:b4:c6:8f:da:dc:86:a1:
c0:dd:76:cc:2c:a7:66:54:15:f8:f4:b5:22:78:25:3b:20:85:
cd:03:44:09:15:7b:5d:69:55:f6:e4:c2:9c:63:d4:c0:d1:8f:
88:78:71:7f:ab:a3:55:d8:57:a8:0f:91:86:38:a1:fd:3a:07:
ea:a6:0f:a6:93:18:2b:5e:d9:48:36:13:36:37:65:3e:e6:24:
1c:3a:36:2d:ca:bc:47:d7:4d:a8:b7:07:fd:07:64:a6:45:17:
53:ef:97:7a:61:1c:b6:74:ee:b4:a1:55:9b:6c:49:a4:0f:9d:
5a:e6:cc:8e:94:29:5c:9c:2f:f3:df:40:66:68:0e:c1:5f:85:
69:c8:1e:51:b5:ea:42:9e:d5:3f:7f:ef:cb:e1:00:01:49:7d:
f5:ef:84:7a:53:e7:48:95:ee:ed:40:d7:79:7e:03:72:a0:65:
e8:fd:9e:3e:8a:5d:7f:f6:2e:d4:36:93:83:5b:12:e0:62:aa:
c9:35:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:15 2025 by rpki-client