Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: AA8gDWpos9Yx8O9QY48cn2JFll9mOC04z8YmlMbbnPY=
Subject key identifier: 7C:7D:44:C4:5A:09:82:36:C6:AE:33:30:8E:F5:CE:04:A2:5C:76:CA
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 01989749E096585321077255098C48EFFF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 9A
Signing time: Mon 11 Aug 2025 04:00:57 +0000
Manifest this update: Mon 11 Aug 2025 04:00:57 +0000
Manifest next update: Tue 12 Aug 2025 04:00:57 +0000
Files and hashes: 1: 06I5R5bPP8KwR2atDnGqxmGArH0.roa (hash: x3UPjaLz3m8eZvpyoX89Z8A1cSTNBY61IoY1p3tS41o=)
2: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: Wvf9c1T0Ata485Ek5PM44COlUYs789WXfrt7GTWAFeQ=)
3: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
4: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
5: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:e0:96:58:53:21:07:72:55:09:8c:48:ef:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Aug 11 04:00:57 2025 GMT
Not After : Aug 12 04:00:57 2025 GMT
Subject: CN=7c7d44c45a098236c6ae33308ef5ce04a25c76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:2b:6b:43:5b:d2:2d:a6:24:0f:55:00:bc:
e7:10:a0:a6:b7:b1:e9:5a:c6:31:73:18:44:e3:98:
ea:77:31:ad:15:27:c9:97:8e:91:07:bf:1c:54:13:
74:37:2d:0f:1c:e5:f5:f6:56:fc:94:5b:63:fb:93:
43:85:ab:3d:32:b6:e6:1c:64:88:3d:56:7b:1f:34:
9c:a5:53:7a:ad:49:65:be:2e:d5:97:ac:04:20:04:
23:21:a8:47:c3:96:2e:4c:b5:a5:75:aa:2e:d0:87:
9f:2c:10:f1:ce:41:73:d2:91:d3:37:a3:e7:0d:78:
df:83:ee:4f:d1:e4:5f:3f:de:78:f4:a8:86:18:0a:
1c:3b:cf:7e:90:ea:e3:43:dd:89:e2:57:38:c9:3b:
d0:49:e1:39:dc:c0:92:75:5c:21:03:e1:d0:cc:fe:
57:bd:cf:21:42:89:4b:3a:36:00:87:49:5d:2c:7f:
eb:d1:49:e9:59:c1:77:52:51:46:db:27:50:c6:c8:
85:7d:2e:81:76:ca:93:1d:39:85:ec:09:c4:4c:4f:
1a:19:19:02:2d:77:f3:2c:a2:b5:28:59:d3:1d:cf:
61:be:0c:b9:ce:86:0c:7a:67:c2:e7:f5:50:9e:a5:
91:b4:3d:cb:60:9b:d7:57:15:2c:ff:f9:b5:fd:ac:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:44:C4:5A:09:82:36:C6:AE:33:30:8E:F5:CE:04:A2:5C:76:CA
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:78:a7:b1:28:96:e5:cc:85:57:60:08:14:b1:62:01:2d:b9:
29:e5:d5:63:79:4e:d6:a6:1c:72:43:d1:cd:5d:37:15:84:70:
35:bb:d3:3a:7a:c2:29:50:a4:ba:c4:12:cb:cf:60:fd:73:f2:
6a:0f:6e:89:78:2d:f8:85:3a:ba:23:91:ed:7a:70:50:5d:4c:
af:11:b1:23:ca:e2:13:4e:ac:35:f6:b0:72:ab:86:5c:a5:bc:
58:51:d4:8f:40:6a:6f:19:bf:be:f9:6a:02:bb:79:4d:5b:72:
4b:5a:bd:8b:fd:5b:35:aa:88:58:f3:d0:ed:3c:3a:36:cf:9a:
93:36:fc:99:62:d1:31:e3:f7:a0:e5:c7:b1:e4:8e:52:5c:83:
30:55:d3:3c:5f:c2:fb:b0:97:76:83:03:41:9b:1d:62:73:76:
3c:df:ae:69:ed:46:90:9a:40:9e:4e:02:1f:69:62:03:45:2d:
0f:83:f8:64:b4:62:18:34:17:37:e0:28:0c:24:9d:16:4b:4a:
f7:90:12:c1:97:fc:39:5d:f6:6f:30:49:a8:0d:4a:27:6b:95:
e0:50:bd:d6:57:4e:8d:7b:df:a2:6d:5e:e1:93:38:c1:53:c3:
48:18:0c:a2:90:9e:d9:d9:8d:e3:df:25:10:b4:d4:85:6a:03:
cd:ba:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:41 2025 by rpki-client