Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: weJcGy8iG8Txko/pb+KGffkkh38WNipNhMptK6aK3Jk=
Subject key identifier: 2F:F5:BF:97:DF:99:80:AD:06:4C:54:A8:04:3C:CC:A1:EC:7D:14:3C
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 0198602467F97FEFEB69B937C417B43BAED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 0DF2
Signing time: Thu 31 Jul 2025 11:00:55 +0000
Manifest this update: Thu 31 Jul 2025 11:00:55 +0000
Manifest next update: Fri 01 Aug 2025 11:00:55 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: mMC7litdqwluGCjBxdpWuqX0Ikhtp2AkDCS2Cm3s1x8=)
2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:24:67:f9:7f:ef:eb:69:b9:37:c4:17:b4:3b:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jul 31 11:00:55 2025 GMT
Not After : Aug 1 11:00:55 2025 GMT
Subject: CN=2ff5bf97df9980ad064c54a8043ccca1ec7d143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:78:28:d0:1c:c3:dd:24:a0:57:50:d8:86:
48:f6:e4:99:0f:e7:f6:4c:83:d2:17:40:c8:a2:6c:
56:23:18:88:ab:5f:7b:1d:74:aa:1b:3c:1f:8d:12:
12:98:ef:f8:e3:9c:b7:86:d5:27:6e:73:a0:b5:b6:
0b:94:e0:9a:48:86:d4:3b:3d:1c:c5:64:d5:77:5e:
64:84:ac:ad:2f:dc:37:e7:56:90:e2:a4:0a:fb:3b:
78:e4:58:1a:57:d4:98:42:78:0b:b8:19:78:e4:c6:
1f:31:41:ec:00:55:a5:3b:58:de:25:28:1e:16:cb:
f0:44:7c:ea:46:ae:a8:2a:d8:ee:5e:8e:7a:09:f2:
d5:3d:4c:de:4a:58:86:25:8f:7f:f4:bf:3a:a9:ba:
46:ad:9d:09:3f:f3:42:8e:ca:fa:fa:26:d6:b9:88:
c8:93:3f:b0:0e:eb:bc:e4:92:29:c9:a4:83:ea:af:
18:91:e4:5f:08:b5:ba:02:05:b6:45:cf:74:c8:b8:
e3:cc:53:81:90:e2:b5:18:3b:00:b0:c8:a6:cb:cf:
a1:49:b2:6a:2a:d9:2c:e0:80:51:d6:e4:4a:13:fe:
f3:8c:aa:0f:9e:cd:3a:8d:34:2e:63:bd:cb:96:34:
e2:a6:87:58:80:74:43:29:8d:a1:0a:b4:be:0e:64:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:BF:97:DF:99:80:AD:06:4C:54:A8:04:3C:CC:A1:EC:7D:14:3C
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:1e:44:7d:46:19:d7:13:cf:74:c9:aa:bd:8c:b6:49:3b:
44:fc:27:6f:67:ff:78:36:43:eb:4d:a6:fd:dd:63:7d:93:b8:
bf:48:d1:82:e6:2f:1b:f4:23:e9:1f:16:31:8a:10:8e:11:25:
41:b1:1c:e7:05:63:70:df:e1:c5:25:fa:33:e1:84:13:b2:1e:
40:8b:d3:27:6d:4e:75:7b:8a:7b:b2:25:3a:4c:cd:ea:e8:9b:
f4:89:2b:aa:4e:c8:fd:7f:64:b1:c5:33:cd:d4:4e:8f:e9:ae:
c7:ce:e9:fb:bd:19:bb:8e:15:04:c2:38:17:41:bf:53:b2:16:
ae:7f:16:54:28:bc:11:ea:27:32:eb:6a:2b:de:98:d5:fa:f7:
a0:37:cb:55:12:4b:65:7b:5a:76:bd:4d:a0:6e:9b:66:10:ec:
29:ab:d1:3e:f3:66:cf:c7:e5:35:11:57:f9:c0:2d:a5:01:3e:
39:ab:37:ac:86:6e:83:a3:f1:e8:ea:c7:1b:63:0d:ea:3b:39:
de:d8:37:48:c7:aa:1f:5d:0a:12:4c:e6:c3:bc:72:83:4a:03:
6e:8b:1a:6f:f2:48:6b:ef:49:73:83:37:bd:14:0d:90:74:ac:
33:f6:01:8b:a7:d7:7c:ca:4a:33:74:61:64:97:b9:91:21:2e:
c1:d3:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:09:22 2025 by rpki-client