Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: wOOn0weMUszm3CRv8Ke5KZT4WEvfRttiSFPTe6lzVoc=
Subject key identifier: 5E:4F:26:17:9B:CF:DD:D2:30:75:79:FD:BD:7A:E1:F1:34:CB:76:B3
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 0199FBEC07506CEEEEE083B75F7097A2092A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 040A
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: 1ExbAy9xLdupbmQJgi86rEGEI7fEDLuVjjFDEMv5WXU=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:07:50:6c:ee:ee:e0:83:b7:5f:70:97:a2:09:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=5e4f26179bcfddd2307579fdbd7ae1f134cb76b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:71:22:2e:28:45:f9:a9:34:04:ed:ec:03:
6d:06:22:44:d0:7f:1e:3c:8d:6a:77:a9:20:91:79:
8d:5b:57:01:04:5c:bd:ee:03:ca:e2:d7:f9:d4:59:
c9:80:e8:a3:b3:5a:8d:6b:a8:9a:39:2c:95:14:d3:
68:2a:a6:c4:1e:cc:67:e9:39:1e:e1:95:75:15:e0:
0c:1c:a0:e0:cb:91:bb:ff:2f:0f:78:18:54:f2:7c:
74:75:ef:8b:c8:6c:5b:5a:c6:a9:92:9c:11:a6:a0:
cd:22:22:ef:b2:66:83:ac:f7:bb:45:fb:cb:33:0a:
09:3c:78:4b:48:88:60:89:58:af:4b:82:3a:4a:8c:
5f:47:1a:32:8d:b2:3b:5f:68:cd:c8:d8:81:96:63:
27:77:75:71:89:1a:41:c8:6b:51:38:db:db:5a:a7:
c7:2a:36:41:6b:3f:46:42:11:a3:a6:04:c6:43:0a:
82:e5:7b:5b:f1:65:bc:d8:22:fd:97:71:87:b4:1e:
c2:a8:41:3d:9c:68:bc:be:9b:47:bf:85:b9:a3:b3:
68:53:29:1a:2a:38:c1:a3:37:5d:19:0e:88:56:8c:
3d:fc:87:e4:e3:eb:8f:6b:94:f1:f8:cf:60:dc:88:
7e:b9:58:19:e2:a4:1b:da:7d:21:7b:2d:bd:ad:ad:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:26:17:9B:CF:DD:D2:30:75:79:FD:BD:7A:E1:F1:34:CB:76:B3
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f4:8b:4a:62:21:12:2e:0c:28:ae:20:0f:9f:59:06:fb:18:
b7:1e:94:2c:fe:5b:ef:bd:a4:52:44:d7:ec:1c:f8:44:d0:72:
19:d0:4b:c3:a6:56:c2:6e:44:f8:b9:15:4a:3e:64:2f:b4:e9:
2e:20:0c:42:d6:e8:22:2a:4d:45:56:68:01:10:e0:44:be:37:
ef:f6:9a:fb:b3:ad:24:46:20:28:4b:6b:f4:e9:c1:9a:06:3b:
ec:37:a4:13:8f:fd:df:19:4b:06:50:00:f4:4c:38:98:af:0a:
ee:eb:40:ed:63:94:ca:50:06:da:b1:a5:81:36:1f:75:94:43:
07:8f:df:66:4f:28:db:10:db:19:a9:43:4f:9d:dd:6d:bf:5c:
1c:4e:90:0a:6f:1e:a7:83:8f:cd:da:1b:e0:5c:63:3b:0e:f3:
ef:5d:61:cd:4e:c7:ff:06:91:94:d1:02:ef:d5:03:da:ed:0e:
2e:12:da:36:42:8f:93:f4:fa:8f:54:e1:7f:af:e7:f3:98:42:
08:18:95:73:fa:21:31:4f:85:10:98:05:8b:19:db:c9:75:fd:
3b:2c:f1:6b:d6:fa:3f:62:f7:5f:e3:ed:24:62:fc:95:4d:b4:
4a:b1:54:0f:ae:33:fa:82:a0:ae:6c:78:3d:84:2c:97:1d:51:
b5:08:0e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AdQbO7u4IO3X3CXogkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1
Mjc3ZjUwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
Eyg1ZTRmMjYxNzliY2ZkZGQyMzA3NTc5ZmRiZDdhZTFmMTM0Y2I3NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGtxIi4oRfmpNATt7ANtBiJE0H8e
PI1qd6kgkXmNW1cBBFy97gPK4tf51FnJgOijs1qNa6iaOSyVFNNoKqbEHsxn6Tke
4ZV1FeAMHKDgy5G7/y8PeBhU8nx0de+LyGxbWsapkpwRpqDNIiLvsmaDrPe7RfvL
MwoJPHhLSIhgiVivS4I6SoxfRxoyjbI7X2jNyNiBlmMnd3VxiRpByGtRONvbWqfH
KjZBaz9GQhGjpgTGQwqC5Xtb8WW82CL9l3GHtB7CqEE9nGi8vptHv4W5o7NoUyka
KjjBozddGQ6IVow9/Ifk4+uPa5Tx+M9g3Ih+uVgZ4qQb2n0hey29ra3jRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5PJhebz93SMHV5/b164fE0y3azMB8GA1UdIwQY
MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt
NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk
LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvSLSmIh
Ei4MKK4gD59ZBvsYtx6ULP5b772kUkTX7Bz4RNByGdBLw6ZWwm5E+LkVSj5kL7Tp
LiAMQtboIipNRVZoARDgRL437/aa+7OtJEYgKEtr9OnBmgY77DekE4/93xlLBlAA
9Ew4mK8K7utA7WOUylAG2rGlgTYfdZRDB4/fZk8o2xDbGalDT53dbb9cHE6QCm8e
p4OPzdob4FxjOw7z711hzU7H/waRlNEC79UD2u0OLhLaNkKPk/T6j1Thf6/n85hC
CBiVc/ohMU+FEJgFixnbyXX9Oyzxa9b6P2L3X+PtJGL8lU20SrFUD64z+oKgrmx4
PYQslx1RtQgO/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:23 2025 by rpki-client