Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: K7L0aVRSkOlRZxwNci2UuPZ9+cp7BbfMVebGm4yDwlk=
Subject key identifier: C1:B1:A6:8B:DF:63:A3:BC:0D:92:4B:04:96:DA:14:A9:E9:EF:87:32
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 0198D698789B9578BEF38C8F2D1FF462576B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 033C
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: QhMsFCmiJQIk4u1ENJqxnuI+QZcFCdciQfB3v1Fb3mc=)
2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:78:9b:95:78:be:f3:8c:8f:2d:1f:f4:62:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=c1b1a68bdf63a3bc0d924b0496da14a9e9ef8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:40:ec:2d:49:49:60:1e:8a:a6:2f:3c:fa:
35:1d:08:89:bb:b0:cc:db:96:51:04:73:99:eb:19:
4b:19:ba:20:43:bd:ad:13:b9:79:af:90:83:31:80:
2c:57:10:e0:79:69:61:5b:ef:e9:d7:c3:ac:5e:2a:
69:70:74:2a:dd:bb:ef:6b:26:4e:1d:57:fb:0e:b5:
08:af:64:74:fb:fd:c8:3f:c5:7d:8e:6f:3d:40:0e:
8d:a9:40:f8:dc:ac:f4:b2:bf:8e:90:2f:7a:69:60:
79:44:0d:f2:8a:fc:c9:7e:9e:1b:49:5c:8a:18:c1:
d5:02:fd:dc:40:48:a2:ff:52:92:bd:dc:03:e2:8a:
c1:6f:ef:66:86:69:ae:8a:e5:e7:9d:70:e1:67:c0:
f3:e1:c9:8c:09:f9:0e:34:0a:0c:ff:14:1e:ce:03:
66:ef:6e:6f:5f:7d:d0:83:5b:8e:80:38:ce:6e:31:
58:a6:b5:13:81:f0:70:f1:4d:0f:75:ff:fd:f0:ec:
02:de:dd:73:de:14:26:6f:90:ae:91:3d:39:00:07:
f4:d7:45:31:76:28:5d:9f:74:ff:24:7e:6e:d4:98:
bc:c7:5b:e7:4c:6d:ac:ae:91:d7:95:47:53:0d:0b:
6c:30:40:79:60:b6:19:21:6e:e4:4f:9b:bc:65:18:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B1:A6:8B:DF:63:A3:BC:0D:92:4B:04:96:DA:14:A9:E9:EF:87:32
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:a1:5f:ba:4f:71:2f:c0:a4:78:14:b6:88:63:37:47:81:
ba:eb:1d:70:31:ca:b0:65:5e:9f:b8:39:c1:3f:bf:d7:a2:42:
2e:15:c3:6a:32:6e:8a:39:84:db:6d:5a:00:21:e6:7b:f8:d6:
f5:e2:f1:4f:d7:20:b3:63:ad:5b:83:f7:3d:d4:c9:f9:78:cc:
d9:67:fd:9e:52:4e:76:4f:ed:8d:fe:2e:cd:e4:a1:26:dc:7c:
a4:17:2b:27:f8:03:7d:e4:0a:ac:a6:a2:f5:d5:25:ff:72:a9:
97:28:b3:97:62:ef:14:69:8a:fe:1a:22:27:44:d9:9d:4e:78:
1b:e5:be:ea:2e:55:2b:d9:41:a8:e3:f1:ba:81:6c:58:f4:82:
ad:8f:1d:02:9f:ad:45:c0:b6:b4:1f:71:29:fe:5b:10:71:79:
38:8e:7c:23:9e:5b:04:cb:91:7b:cb:15:ac:c7:70:a3:4c:7c:
ba:c9:14:8f:81:a7:98:07:72:d7:a4:fe:f2:cc:29:57:55:74:
13:15:c0:21:a2:05:3c:fa:2b:88:f7:b1:c1:75:94:85:44:cf:
e3:ff:a1:64:2a:93:4c:3b:e7:81:cb:b7:88:bf:bb:4b:55:68:
db:0b:eb:45:48:e8:0e:ea:bb:dd:a2:6c:da:fa:4c:8d:d2:66:
36:85:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:59 2025 by rpki-client