Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: 3Mii3twhcrajEukS6JxuNyWNNXmPZibUuLArDM9xFOQ=
Subject key identifier: D8:69:E0:C0:40:AD:92:C4:68:EE:38:3F:5D:31:5B:4F:68:05:C4:0C
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 0199C7581706E04AA0A829D2BFEA72ED4B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 0EAC
Signing time: Thu 09 Oct 2025 05:01:02 +0000
Manifest this update: Thu 09 Oct 2025 05:01:02 +0000
Manifest next update: Fri 10 Oct 2025 05:01:02 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: en9Q8b+TpDMz/+MS9aG648V2B1yhFuFfnQbBTCsTFKw=)
2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:58:17:06:e0:4a:a0:a8:29:d2:bf:ea:72:ed:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Oct 9 05:01:02 2025 GMT
Not After : Oct 10 05:01:02 2025 GMT
Subject: CN=d869e0c040ad92c468ee383f5d315b4f6805c40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:d4:13:fc:68:5c:91:d2:cb:ce:ba:a1:a6:
13:a1:40:11:2e:3f:01:02:49:35:7b:2e:65:bf:ae:
18:7b:6f:7c:ea:3f:31:00:3e:da:c9:ec:94:4a:b2:
49:76:14:47:a3:0c:55:cb:99:07:52:39:43:06:54:
77:e5:2f:8e:09:75:23:ba:a7:cc:30:b4:cd:6b:8e:
3f:b1:f7:9d:f9:89:9a:9f:9f:7b:19:8c:9f:67:3f:
95:78:b0:81:18:99:e7:e5:8b:92:40:ae:36:0b:b4:
09:13:60:5b:45:24:20:d7:97:98:99:f8:e7:4f:4e:
3c:bd:88:6e:91:19:47:58:77:6a:e7:37:1b:84:66:
01:a8:ac:7a:ce:07:bc:81:1b:aa:1a:37:60:44:ff:
a7:6b:5f:35:2d:71:95:54:96:20:62:ab:2d:f1:fe:
52:3f:4c:65:ea:35:1f:01:ea:4f:02:8e:e1:78:39:
70:24:91:29:2a:4f:60:48:c7:24:c9:84:2b:44:cf:
78:ca:4d:e0:ce:a9:7e:69:29:da:9e:7f:14:a4:7e:
94:74:42:91:2c:f7:2c:b4:f0:58:ff:9a:45:23:82:
ca:9f:a0:4e:4f:b7:fc:bc:25:4e:34:90:6c:4e:97:
bb:ea:85:2b:69:f2:3e:b9:4b:4c:3d:a7:10:20:5f:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:E0:C0:40:AD:92:C4:68:EE:38:3F:5D:31:5B:4F:68:05:C4:0C
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:98:d5:73:bd:d3:4b:50:78:56:c6:06:91:51:53:ac:d7:
15:b5:73:2a:61:11:d9:63:d2:42:70:2d:b7:36:57:f1:b1:8e:
a6:df:0b:5c:fe:03:6f:7c:08:18:83:83:86:e8:64:78:4b:f5:
09:7f:97:bf:e9:d6:f1:95:eb:05:bc:fb:b1:2a:95:3a:dc:a3:
11:49:1a:bb:c0:fc:38:87:61:72:c1:ca:58:f0:ec:52:38:61:
e4:02:13:69:a6:9a:c9:63:08:28:9d:bf:5f:ef:d5:1a:ce:ce:
bd:c4:68:7d:44:81:72:cb:b5:58:f2:c1:64:e2:90:75:b8:25:
76:df:ef:33:df:e9:19:35:1a:60:52:f4:da:18:8e:b3:12:58:
e3:5e:48:97:a6:bf:f7:21:39:12:2c:1c:9b:b4:3b:40:aa:36:
ec:43:c4:94:89:0d:fa:91:40:15:ed:f0:72:0d:56:b1:5f:6c:
9a:9e:72:9c:64:ea:6b:b9:05:8e:a2:d2:58:18:f7:1b:9f:b2:
9a:5c:ff:f4:4a:d8:70:a1:45:e3:15:11:19:d1:60:bf:92:2f:
08:36:00:ab:45:2e:cb:ad:7a:95:b0:00:cb:44:8e:32:ca:a0:
26:d0:ef:f7:25:d8:00:ed:66:8c:4b:27:42:a0:cb:ac:5c:a9:
ac:8f:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:17:12 2025 by rpki-client