Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: 4GAHTf5tEp7CBonexh7fg06O/9fB2pHURJin14gDBvc=
Subject key identifier: C5:2A:6C:E0:C2:CF:62:EA:A7:6B:DB:AE:96:B8:5D:39:37:C0:78:C4
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 0197C982A1C064C51838A7619CDE6DFD5DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 2C
Signing time: Wed 02 Jul 2025 05:01:10 +0000
Manifest this update: Wed 02 Jul 2025 05:01:10 +0000
Manifest next update: Thu 03 Jul 2025 05:01:10 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: W2+HfDmOmyQaJ8Eqnv0N6pyj/tHxKui/XqpidEMgRvE=)
2: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
3: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
4: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
5: PJpQsAx7vQOkruizw9oJjs9yf3o.roa (hash: H3FDg9FnIY3IpKu45RkiuSwDyvB6KzzpVZF3krmK5JQ=)
6: SopY6ZWS_zSvVdJ9S_7T2LdpBOc.roa (hash: R2CNWd8z+13gfjTHMhQx1RDxnIJ67GFa1Df1tprgfYQ=)
7: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:a1:c0:64:c5:18:38:a7:61:9c:de:6d:fd:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jul 2 05:01:10 2025 GMT
Not After : Jul 3 05:01:10 2025 GMT
Subject: CN=c52a6ce0c2cf62eaa76bdbae96b85d3937c078c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:b1:af:5d:52:57:a4:ab:11:87:3a:ae:be:
6a:b0:5a:49:f9:a7:8c:2f:c7:40:92:01:83:33:e9:
3e:3a:8b:3a:98:fb:d7:0a:28:69:38:78:9c:9f:81:
6e:64:f7:e0:0d:8a:e0:79:be:24:72:80:35:56:0c:
a1:f4:c0:48:5f:be:9e:a6:5a:63:5e:7a:a3:af:90:
a5:44:67:50:f4:bc:f8:ef:40:f0:af:d8:98:c9:ce:
a7:e7:1d:db:e1:60:c0:6c:c4:b6:cb:fb:95:ae:04:
12:ae:a5:11:24:1e:e4:85:34:7d:44:c9:8b:b2:2e:
ac:d5:f7:e5:71:5f:90:e9:ca:ee:b3:74:0e:5a:03:
d0:f9:fd:ab:52:77:71:c0:8b:9e:6f:29:39:75:6e:
42:49:58:83:6f:b7:7d:dd:35:59:f3:bb:9a:f3:fb:
ec:40:28:d4:d0:1d:45:93:77:52:98:7a:6c:49:af:
c9:b9:17:56:49:e4:2e:81:22:af:d2:54:75:ad:f4:
0b:93:bb:2f:ae:02:6c:63:fe:f0:be:94:cd:28:c5:
0c:7b:bd:70:0b:df:f6:51:27:e9:8d:51:e3:07:14:
c3:f0:39:4f:67:87:e6:43:ec:13:fa:a4:2d:6b:3c:
cf:15:79:63:cd:e9:14:a7:af:97:bd:1a:b5:50:a9:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:6C:E0:C2:CF:62:EA:A7:6B:DB:AE:96:B8:5D:39:37:C0:78:C4
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:a9:a6:75:c4:1d:eb:35:33:8e:6f:7a:26:b6:e9:0f:db:
b5:65:28:85:5d:c5:e4:68:e6:13:44:b2:c5:19:58:26:82:c7:
71:89:5d:d7:16:ac:a8:59:60:30:a0:f7:62:7f:ae:d2:94:19:
e0:a7:46:5d:7a:26:b1:3d:17:67:cf:ed:1d:12:45:9b:8c:c1:
73:29:c6:ca:60:d4:5e:9e:e1:3a:c2:09:f0:18:50:92:68:07:
60:16:80:a8:b9:79:48:5c:4b:f0:f7:de:60:85:1f:11:0d:96:
ab:bf:4b:07:91:37:fa:d8:82:7d:b4:21:31:1a:13:96:36:4d:
5c:ab:03:48:e8:52:8e:72:05:bb:d8:c9:95:9f:5b:c8:20:ec:
f3:be:2a:25:b9:1e:f7:0e:6e:15:77:33:75:a6:09:dd:aa:dd:
3c:99:45:a9:0d:27:45:a0:d9:1e:32:4a:2c:9d:51:21:3d:c1:
45:66:52:5b:08:09:02:7b:a9:c0:8a:2f:3b:41:79:b6:0f:1d:
2f:b2:79:21:8d:75:c9:ed:49:f3:54:f7:4e:b7:db:b0:a1:94:
db:b2:63:3e:07:f8:e0:cf:57:c6:46:52:d8:35:a9:84:c1:2c:
9b:d9:db:75:59:f6:4e:24:96:b6:c5:1f:2e:c4:43:47:08:43:
f4:49:9f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJgqHAZMUYOKdhnN5t/V2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4
YzQ0NjMwHhcNMjUwNzAyMDUwMTEwWhcNMjUwNzAzMDUwMTEwWjAzMTEwLwYDVQQD
EyhjNTJhNmNlMGMyY2Y2MmVhYTc2YmRiYWU5NmI4NWQzOTM3YzA3OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+axr11SV6SrEYc6rr5qsFpJ+aeM
L8dAkgGDM+k+Oos6mPvXCihpOHicn4FuZPfgDYrgeb4kcoA1Vgyh9MBIX76eplpj
Xnqjr5ClRGdQ9Lz470Dwr9iYyc6n5x3b4WDAbMS2y/uVrgQSrqURJB7khTR9RMmL
si6s1fflcV+Q6crus3QOWgPQ+f2rUndxwIuebyk5dW5CSViDb7d93TVZ87ua8/vs
QCjU0B1Fk3dSmHpsSa/JuRdWSeQugSKv0lR1rfQLk7svrgJsY/7wvpTNKMUMe71w
C9/2USfpjVHjBxTD8DlPZ4fmQ+wT+qQtazzPFXljzekUp6+XvRq1UKlVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUqbODCz2Lqp2vbrpa4XTk3wHjEMB8GA1UdIwQY
MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct
NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4
LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDippnXE
Hes1M45veia26Q/btWUohV3F5GjmE0SyxRlYJoLHcYld1xasqFlgMKD3Yn+u0pQZ
4KdGXXomsT0XZ8/tHRJFm4zBcynGymDUXp7hOsIJ8BhQkmgHYBaAqLl5SFxL8Pfe
YIUfEQ2Wq79LB5E3+tiCfbQhMRoTljZNXKsDSOhSjnIFu9jJlZ9byCDs874qJbke
9w5uFXczdaYJ3ardPJlFqQ0nRaDZHjJKLJ1RIT3BRWZSWwgJAnupwIovO0F5tg8d
L7J5IY11ye1J81T3TrfbsKGU27JjPgf44M9XxkZS2DWphMEsm9nbdVn2TiSWtsUf
LsRDRwhD9EmfMA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:32 2025 by rpki-client