Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: ee1avVtv+VtCFSrDZ78+Jog4z/X6fZWeyR6KhCBDNpw=
Subject key identifier: BD:E9:0E:71:29:F7:42:97:8F:61:B3:8F:C9:E2:10:4F:DB:2D:36:B9
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0198D5158BAE9191BEA1547E2D25BE46A503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 15EA
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: KxciGyRQ8B0khs2SdOjmol35F1PuTO62jbgy1RV0LN4=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8b:ae:91:91:be:a1:54:7e:2d:25:be:46:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=bde90e7129f742978f61b38fc9e2104fdb2d36b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:43:63:36:0d:24:a4:dd:3d:a2:3f:1c:8b:
d7:a8:79:28:26:c2:a8:ff:36:1c:36:45:2c:77:be:
52:6a:ef:f4:a4:2a:61:f7:b1:34:2f:d9:b0:c5:0a:
8b:3d:c0:b2:51:96:3c:43:ae:0b:45:f2:c2:54:ea:
94:4a:a7:f1:c5:93:be:ee:99:fa:f5:0e:1d:8f:29:
67:90:f8:bc:7d:c2:4e:1d:eb:59:d3:c2:e3:cf:08:
0c:e7:a6:0f:ab:ae:58:58:39:65:8d:c2:a4:0b:71:
8e:68:95:63:95:6b:f9:da:94:a6:7b:17:a0:7f:23:
d5:35:5c:54:d3:07:3a:7c:65:c7:3d:9b:46:f5:bf:
1b:f0:62:0f:0d:5e:b2:0a:5f:86:41:0d:f4:9d:30:
f0:30:fc:e7:9d:12:7d:b9:5a:91:36:08:13:81:55:
24:db:6f:a8:6a:ba:da:b0:85:20:03:60:19:85:0d:
b6:c2:f3:17:a0:7a:3e:18:e3:23:00:36:fa:6f:e2:
a5:af:b0:a1:39:5d:15:e9:ec:de:91:bd:55:31:2a:
e3:d5:35:b2:f7:f5:d2:46:b9:b1:43:a7:55:9b:22:
28:6c:ac:55:26:9f:ec:ea:cc:f1:f5:60:f2:97:24:
96:b5:69:75:ce:18:4f:13:3b:a8:79:62:ce:41:7b:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:0E:71:29:F7:42:97:8F:61:B3:8F:C9:E2:10:4F:DB:2D:36:B9
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:23:c3:a7:06:10:5d:6e:36:ec:66:8a:ee:4e:84:c2:35:
30:1c:19:9a:2c:83:67:42:5e:6a:c0:a6:fd:66:9b:44:a1:25:
2e:05:60:ee:75:b8:81:7f:5d:92:07:94:49:93:5e:a0:09:b2:
ae:8d:58:9e:a2:61:cb:22:2e:0e:97:a7:dc:dd:a9:e2:33:c1:
10:41:79:a3:45:62:4e:2c:ad:15:81:19:69:81:07:fb:3c:8d:
31:eb:f1:f8:00:df:b0:a8:89:9c:43:3f:e3:4a:0b:f6:76:03:
e7:ad:05:33:2c:6c:93:69:82:40:8b:cd:99:28:29:7e:2c:c0:
20:3a:bd:b2:55:f7:9b:6b:c1:ed:70:2b:3d:99:ae:c2:95:e0:
a1:d4:d2:5f:e4:b8:d8:32:43:07:41:b9:2f:56:7d:31:57:b1:
b7:5a:5e:40:40:a8:4c:bb:5b:2f:c5:91:71:81:4f:3b:77:b4:
0c:7c:da:3a:e3:07:e9:ac:0d:ef:4c:44:7d:42:32:c5:0d:f6:
44:46:2d:22:d1:04:55:46:ae:94:d9:b8:fb:f1:66:37:9a:76:
00:e8:1e:cd:de:2c:63:90:8b:f8:cc:6b:10:39:33:1f:63:9f:
45:1e:ad:74:a9:93:75:db:ce:e5:eb:82:a0:32:aa:0d:87:4e:
21:8e:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:19 2025 by rpki-client