Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: e+bNWYAwZNMY+UOOz5yRilYEGu/faRqBg3CgJz6+fHI=
Subject key identifier: 9F:91:45:64:CE:FD:80:73:49:3E:B7:3A:F4:07:10:AD:36:11:D8:C1
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 0197B6A22104E1F58AD15E685139A6A2943E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 02DD
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: uDxYeEKcN9D1Tx9P1ZFOZWqWmt9abwddXlMUy0fBHTw=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:21:04:e1:f5:8a:d1:5e:68:51:39:a6:a2:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=9f914564cefd8073493eb73af40710ad3611d8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:f6:f9:23:65:f1:b6:e3:96:4d:c6:57:64:
07:32:0f:85:48:20:0c:1a:41:b8:ed:4b:07:91:76:
88:00:3e:99:8c:5d:20:d4:cf:1b:3f:a4:e4:72:b6:
bf:65:14:a5:76:1b:e5:ef:32:5d:fb:f9:4d:e6:61:
89:3c:4b:f7:f7:45:52:fe:59:3b:39:bd:fc:b0:93:
59:f9:01:05:a4:f9:8b:8a:61:5a:06:9b:eb:cd:60:
15:27:5b:8b:e4:ec:4b:bd:18:7d:1b:6c:03:59:18:
41:8c:2b:b7:b3:42:46:79:20:22:08:b5:30:dc:7d:
f4:42:b3:ee:e8:40:b7:db:76:1f:e2:c6:29:8b:d0:
04:2d:7c:d6:45:8b:a3:8a:5c:06:a3:89:8d:51:d3:
49:53:55:ef:73:80:fc:0f:10:96:08:b6:f9:39:7c:
68:2b:a5:72:21:3f:b6:c5:ca:20:13:1b:da:a6:ef:
53:87:1e:ee:0f:7c:fe:81:8d:0d:bd:76:99:3f:3f:
5e:f0:62:16:e1:38:90:ea:29:a4:87:7e:bf:9d:bd:
cc:8d:a5:7a:2b:87:95:c9:91:6f:80:92:d4:50:d6:
7b:0f:7e:af:4c:0e:89:11:5f:bc:67:9d:cc:25:f4:
d1:1b:92:dc:7d:ea:b3:49:f0:c6:25:1c:17:99:ab:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:45:64:CE:FD:80:73:49:3E:B7:3A:F4:07:10:AD:36:11:D8:C1
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4b:0a:f0:d8:49:e0:0b:4d:6a:69:e3:62:f9:1a:c6:73:71:
33:bd:48:7d:7f:da:8b:f7:86:a0:0d:42:c7:d6:18:f8:07:75:
71:01:65:6c:e1:2e:ec:e0:08:70:7d:ab:ee:f8:ef:96:08:80:
2e:b2:dd:c2:4e:9d:6c:9c:5c:1d:d8:4c:6d:90:2d:5d:6b:e4:
e2:d4:19:27:cc:47:3d:40:bc:73:d5:68:da:37:e5:8d:5c:dd:
4c:e2:98:24:bb:68:6c:5a:cd:f1:c3:1e:ff:8d:ff:cc:e7:f9:
1a:4a:87:6b:43:0a:be:29:bb:8b:b5:57:ce:24:45:cf:03:41:
5e:40:d6:04:d8:63:58:e3:5e:6a:10:09:01:e1:a9:03:c1:e9:
f6:00:cf:09:3b:aa:74:bb:18:00:29:0e:e6:14:4e:51:47:ad:
04:cd:b7:6b:eb:ca:15:82:d6:c2:9a:aa:e2:7d:2e:a6:6f:3c:
71:0c:e9:b2:13:e8:ae:25:95:7f:a8:a6:c4:f9:0b:c3:34:d9:
7f:a9:4a:d4:1d:f0:ff:a7:9d:c9:fe:d0:34:bf:c6:3e:c2:67:
a7:05:4f:3d:eb:48:bb:1d:5b:5c:5c:d6:9c:c8:3e:4e:7c:89:
9c:bb:0e:0e:ac:11:b9:22:94:5b:0e:fb:6f:cb:65:37:94:ff:
a1:ac:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:33 2025 by rpki-client