Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: V9mIH5jXDerNyqzokEp7I23Tiq/ugn9fy5L1wAA9js0=
Subject key identifier: 42:79:83:3A:E4:71:5E:43:1E:D7:8C:36:71:DA:17:E2:4A:8A:50:E3
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019A725C7DBCA8414746ACCB8CEB4C16CB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 0190
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 06I5R5bPP8KwR2atDnGqxmGArH0.roa (hash: x3UPjaLz3m8eZvpyoX89Z8A1cSTNBY61IoY1p3tS41o=)
2: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: RJTiHGn4Ip7YK/8Nss0UUmMgC/jsHyebAMbJ+4mbwDk=)
3: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=)
4: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=)
5: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=)
6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=)
7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:bc:a8:41:47:46:ac:cb:8c:eb:4c:16:cb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=4279833ae4715e431ed78c3671da17e24a8a50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:0a:d8:48:df:38:77:e0:96:ed:64:f8:e8:
7f:26:3f:a1:f3:58:af:f5:4e:d8:92:2c:4b:89:ce:
1d:68:27:cb:a6:46:50:43:a2:48:cd:06:c1:54:db:
77:b8:3c:da:2f:9e:c7:e1:cf:a7:1f:6f:a8:95:83:
39:95:88:b8:5b:f0:3e:76:08:40:6f:1a:5f:86:69:
91:77:c0:72:a7:eb:61:ea:35:db:2c:b1:e6:cc:19:
90:3c:2d:be:a9:9b:ba:ee:9a:ed:05:21:f2:e0:22:
91:34:50:e6:e1:d1:66:af:a9:59:0f:24:61:ec:23:
c1:b9:51:5a:24:6d:d1:43:e8:d0:b5:78:40:32:57:
a1:62:19:f2:23:6d:c5:b7:18:90:35:50:fa:97:11:
59:13:55:31:b2:24:17:5b:05:a1:cc:48:bc:da:13:
50:97:74:af:7d:e6:8d:7f:1d:e4:86:5d:d1:3d:c9:
e1:81:40:12:3e:20:93:a5:92:fd:e4:91:33:28:73:
b2:81:28:35:7f:da:dc:72:7a:99:4f:90:57:29:75:
a9:e8:c8:62:07:af:99:70:a0:de:ee:ed:b7:2e:27:
8e:b9:ca:20:d4:96:89:81:b6:e8:f2:dc:92:57:f8:
db:9a:2d:52:aa:9e:8f:cd:c5:38:bd:39:2c:14:ca:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:83:3A:E4:71:5E:43:1E:D7:8C:36:71:DA:17:E2:4A:8A:50:E3
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:62:04:46:e6:b1:69:dc:93:f5:d3:ae:2e:6a:bb:bc:70:
9b:f4:7e:15:ed:89:0c:ce:a0:f8:94:87:df:69:8a:7e:ba:41:
d6:84:ab:5f:71:d6:b3:37:9a:00:ce:87:97:5b:0b:b5:dc:48:
dd:c5:d6:9b:b4:b8:30:90:5a:b5:2d:45:c5:ef:29:12:37:e4:
66:a1:44:a2:c1:8c:a3:c7:49:27:80:fa:ef:d7:49:9d:62:61:
09:a7:af:a1:a8:ba:9b:d2:d0:79:c8:e3:18:06:f5:d5:71:1c:
de:31:83:47:02:98:3d:29:ea:f8:e0:70:05:be:d0:cd:c0:37:
b7:0d:a9:29:96:a6:8d:05:23:9e:a0:88:23:97:c1:eb:b2:69:
58:87:4e:44:cf:b8:ed:5d:23:78:1e:d5:b6:73:e6:d6:33:b5:
af:fd:83:fd:44:ce:4c:cd:56:25:a8:0e:32:55:f2:4a:63:c0:
0f:db:1e:fa:fd:4d:3d:d1:54:a3:8c:19:ac:d7:7d:71:d5:dc:
0b:60:f3:26:4d:8b:ee:2d:00:c5:fb:17:36:a2:c9:17:98:7d:
4c:01:6b:7e:37:1f:66:2d:ee:a8:59:aa:6d:3b:bb:25:ae:98:
71:a6:ee:de:5c:b3:9d:c2:4f:dc:b4:0b:bf:7c:4d:78:e1:4d:
8b:a4:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client