Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: N4HpPhfuOp1LaDWoijoIITO7ya6lJYu5svxy//sVIQo=
Subject key identifier: A2:75:EB:6F:CD:BB:AE:DA:49:10:31:6B:08:6C:71:1F:31:14:9C:F6
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 0198D66009AECFC060482A4EC2A46B277760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0372
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: QW/maBkLes41ZkmzDBDa2W+dsQ0ADlC0377gLWmhkfc=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:09:ae:cf:c0:60:48:2a:4e:c2:a4:6b:27:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=a275eb6fcdbbaeda4910316b086c711f31149cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:eb:89:34:b6:1e:c9:d4:71:0a:f3:a3:29:
3b:db:d4:3b:2f:51:b5:c3:5a:00:7d:30:58:9d:c4:
65:7b:cd:3a:4b:c6:e1:7f:e9:d8:0d:97:49:61:d6:
83:4a:5d:ad:f6:28:ea:69:98:f8:65:b8:d8:51:08:
5d:4f:e8:75:05:a9:02:b3:96:21:30:e7:28:6f:bd:
10:39:f2:5a:de:25:56:6a:06:89:50:c2:0f:fb:26:
02:d2:3d:12:c2:70:d6:50:bc:27:4c:dd:14:f7:b9:
2a:58:ac:61:e2:3c:b2:a9:3e:24:5a:63:d6:02:61:
a3:a4:a3:fd:5e:49:de:79:60:2a:12:9a:22:7d:5b:
c9:e5:0e:ae:54:04:f7:63:5e:4a:ff:92:76:08:1c:
b8:36:c5:e4:57:e3:72:43:37:bf:5f:73:87:12:cc:
9d:6e:9c:cb:2c:78:07:24:74:e0:f4:e3:ae:81:66:
48:74:bd:aa:3b:10:bd:44:44:8a:aa:a6:96:88:88:
5d:ec:a3:7c:4e:74:76:3b:fb:3c:fa:2c:c1:c6:9a:
8a:3b:4c:9d:43:0b:17:e9:dd:c3:59:64:a9:ea:02:
98:36:3f:b8:fb:1b:f3:6a:dd:b6:7f:48:82:2a:dc:
50:19:1e:68:c9:58:aa:65:b0:38:d4:21:1e:ed:cc:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:EB:6F:CD:BB:AE:DA:49:10:31:6B:08:6C:71:1F:31:14:9C:F6
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:51:f8:f1:e0:4c:e1:0c:02:40:2e:1f:8a:cf:9d:5b:53:
ab:aa:d7:d5:8d:49:84:17:d8:ab:b6:c1:98:30:f1:81:1d:ae:
7e:ec:d8:06:75:05:23:da:9d:16:eb:db:5b:fa:7d:39:49:46:
72:2c:4a:3f:fb:99:a2:1c:3b:14:d5:3e:cc:bd:47:6c:f6:ac:
a4:08:7d:62:cb:5d:f7:f1:8d:68:9d:11:0d:89:57:58:ea:00:
c8:05:10:9a:9d:71:78:90:08:99:f7:97:f9:5c:df:4c:3f:be:
d9:5d:ee:e5:d6:f9:89:c2:1e:89:f9:c2:7b:c3:3a:08:8d:11:
b7:b5:c6:60:d9:92:91:90:23:91:7f:53:9c:c3:17:00:4c:ed:
02:28:c7:23:6a:54:98:3c:96:68:ff:80:cb:72:6e:76:e9:5d:
60:b1:96:81:0a:46:93:a0:c8:41:0f:9f:f3:1b:ec:8d:66:2c:
c8:f1:ae:58:c2:ec:f5:01:1c:cd:94:e4:b6:74:4c:28:9b:b0:
dc:5f:2e:25:f4:1f:03:41:27:44:63:fe:a4:1e:f7:b8:db:9a:
4c:44:bd:4c:ac:b5:99:9e:27:f9:82:52:97:0a:f8:69:ed:32:
82:e3:91:21:11:49:77:4b:06:60:01:a2:bc:e1:ba:ae:d9:19:
cf:20:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:31 2025 by rpki-client