Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: P8EjUfliHBzsGfDewK4ZH8AzDOkK4HmExv7zIvJX/m0=
Subject key identifier: B0:47:77:D3:F7:03:DD:BF:A3:56:69:1D:A4:BE:67:63:D7:7C:23:88
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 0199FDD96B71D5887A1B962A123C1C03C68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 03D5
Signing time: Sun 19 Oct 2025 19:01:48 +0000
Manifest this update: Sun 19 Oct 2025 19:01:48 +0000
Manifest next update: Mon 20 Oct 2025 19:01:48 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: 8yrVwOIuq5CHGbn5Zc6k2zoFAhsXm3ZmkZ6x2GnB9Rs=)
2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:6b:71:d5:88:7a:1b:96:2a:12:3c:1c:03:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Oct 19 19:01:48 2025 GMT
Not After : Oct 20 19:01:48 2025 GMT
Subject: CN=b04777d3f703ddbfa356691da4be6763d77c2388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:54:89:90:f6:ea:7d:c1:35:4a:35:1f:c3:
cb:c0:f9:a2:39:08:84:4f:e1:9f:14:12:73:4b:2e:
18:a5:29:d7:9c:aa:ac:24:58:33:81:c3:33:93:77:
86:3b:e8:75:8d:14:33:9e:dd:cc:1c:ea:37:a7:1c:
ad:ab:be:33:e1:0e:50:20:d3:e9:a7:85:8f:3b:14:
02:3b:87:1c:7f:6c:68:2d:57:f5:c5:6e:7c:bb:da:
04:8e:fa:8f:88:e4:01:8a:48:83:97:11:62:04:26:
df:d9:70:b5:15:73:2a:c4:0a:71:4c:14:b8:46:36:
b8:bb:11:9e:30:bd:47:24:bc:e7:59:90:ed:8d:ec:
2b:b8:29:f1:3f:03:1c:cc:5c:76:25:9f:ad:34:d5:
b7:91:79:b8:75:8c:88:f2:b7:08:29:8c:d7:d3:7e:
3d:9b:fd:82:6c:b2:ba:6f:6c:fa:d3:57:88:a5:b3:
ac:9f:10:5b:8e:37:e9:bc:72:f2:17:1a:fd:87:5a:
6b:03:f2:e7:86:31:2f:9f:2b:46:5b:3d:ec:e5:dc:
1d:5c:22:c3:81:37:8d:fc:0c:15:b1:28:56:54:11:
7c:ef:8b:9e:60:85:8c:26:af:29:4a:02:0d:1d:20:
c1:70:c6:df:57:76:49:cc:30:1f:58:f8:50:56:1d:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:77:D3:F7:03:DD:BF:A3:56:69:1D:A4:BE:67:63:D7:7C:23:88
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b9:6b:1e:c1:04:9c:a8:e5:1f:4f:6e:35:92:a3:0e:50:60:
c1:5a:d5:d6:97:ba:dc:19:d1:c5:b6:ff:fa:09:78:c0:a0:3b:
14:91:b2:d0:d0:e9:65:e5:2e:f8:41:61:03:2d:a0:45:99:2f:
29:02:db:ac:1d:be:c2:ea:4c:55:b5:97:4c:b7:01:4e:4f:6d:
99:4e:cb:11:8c:4e:4f:ba:3f:4e:ba:de:cd:db:fa:25:b2:99:
33:fa:df:36:9d:af:9c:75:e8:7b:cb:3d:47:fb:b6:10:19:eb:
fb:a4:99:03:a6:97:65:ce:3b:9c:69:26:83:c6:ff:a2:7b:64:
8b:98:1e:b3:0f:6f:85:e7:48:77:99:69:37:7a:a6:0f:43:d7:
be:e9:c1:b8:c5:0f:00:5f:fd:86:2a:52:01:30:95:fc:94:b7:
2b:dc:75:ca:8d:c3:79:16:1b:d8:9c:cc:d3:bf:a9:45:49:51:
b1:80:89:01:8f:8f:fe:d0:df:cd:be:de:64:c6:7d:19:4a:84:
16:3b:6f:54:43:ab:d7:a3:55:46:1f:d0:b7:ab:85:67:26:29:
dd:94:51:f7:47:6d:63:74:12:e6:e0:48:09:57:c1:2e:fd:f1:
e7:34:3d:95:64:e1:40:90:31:37:15:1f:62:c4:9d:eb:25:15:
fe:df:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:10 2025 by rpki-client