Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: lZ9AnQwf6E7Pgmi55YUETrW9lTD8n8NC0cZB6UdvhJQ=
Subject key identifier: B2:BF:93:EA:53:3B:BA:BC:31:6A:CA:E6:26:BA:15:49:14:F4:A3:60
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0197B7455AE81AC511FA5D2B999875E996F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1556
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: RqcQkU/Gj1Q6IIJVDgcIccoUhOVxR+tjeZHki9rcRSI=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5a:e8:1a:c5:11:fa:5d:2b:99:98:75:e9:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=b2bf93ea533bbabc316acae626ba154914f4a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:7e:60:2b:f4:0d:24:c5:4f:f4:24:f6:64:
96:32:4a:76:76:9e:90:6f:7a:da:3d:a1:61:d2:20:
b1:6b:df:46:db:cc:24:0a:27:9e:f7:19:ae:b0:86:
7e:ee:1f:0f:98:48:ea:45:7a:57:31:cc:d1:60:c3:
20:9b:d6:55:4b:a4:1c:75:2a:d2:c5:f0:59:85:6d:
98:bb:3b:ea:a8:c7:99:6e:4b:d7:66:20:f1:76:90:
d4:62:a7:44:8b:e2:6a:18:23:9c:b0:d7:45:45:40:
9e:1e:ae:c9:7d:d3:cf:35:4a:97:32:ca:51:01:4b:
44:c8:5b:04:c9:b9:f4:96:f3:92:ac:11:22:13:f2:
d7:04:37:b5:12:8d:c1:6d:50:90:da:89:57:55:d3:
bd:9b:9a:c9:68:3c:9a:5f:0b:69:44:81:68:80:13:
f0:c2:f4:33:bc:c7:56:f0:5a:6f:9b:ab:37:ce:f1:
94:2b:29:f0:f4:a8:13:b3:df:f3:d8:21:07:55:d3:
29:84:e8:87:14:53:70:2a:92:ef:c9:e7:e1:42:58:
ae:33:66:e0:6c:cb:25:81:52:34:ac:2d:5d:5d:b6:
f6:4b:8f:9e:57:7b:04:4a:d9:67:a6:b5:57:23:a4:
f2:e1:21:99:2e:cb:b8:0a:88:4a:03:f7:7f:e1:63:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:93:EA:53:3B:BA:BC:31:6A:CA:E6:26:BA:15:49:14:F4:A3:60
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:29:ee:2e:e3:19:6c:a8:40:16:31:71:49:d7:93:a6:95:be:
50:11:d6:bf:d7:18:45:e8:9c:33:e1:ad:13:3c:b9:2a:a2:63:
62:f3:0f:b8:d4:94:e2:9b:4b:7a:a4:95:b3:e7:0a:0e:a2:59:
e9:69:18:88:ea:2b:06:f9:43:ca:bc:04:07:30:e7:fc:5f:73:
82:df:0f:41:66:01:ea:b5:34:ed:4e:bf:9e:d7:35:ed:f2:88:
d7:ec:2a:7c:89:2a:8a:51:58:21:4e:80:56:b2:b9:b6:a0:11:
40:a7:33:66:5f:fc:3a:fd:eb:99:a9:bd:77:4f:37:4b:87:f2:
81:49:d8:3a:81:ca:4c:9b:bb:dd:52:fb:1f:09:8f:86:6f:14:
81:8d:59:d6:ec:b1:74:fa:76:50:a9:60:48:be:77:b7:d0:00:
98:ce:dd:da:90:02:9d:bf:e3:51:0f:c9:e7:d2:a0:fe:b6:18:
f0:85:df:ef:05:ab:cd:5b:dc:a2:c0:5a:96:ae:5c:ee:78:23:
52:99:67:9b:ba:ac:70:91:99:ae:b4:05:71:37:64:8d:17:37:
95:7d:44:e8:25:07:76:15:93:9d:68:c8:38:95:aa:5a:bc:c3:
16:79:db:bf:14:2d:bf:d9:b8:ef:db:a5:d6:9d:fc:c1:2f:37:
60:6d:f2:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVroGsUR+l0rmZh16Zb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjUwNjI4MTYwMTA1WhcNMjUwNjI5MTYwMTA1WjAzMTEwLwYDVQQD
EyhiMmJmOTNlYTUzM2JiYWJjMzE2YWNhZTYyNmJhMTU0OTE0ZjRhMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu55+YCv0DSTFT/Qk9mSWMkp2dp6Q
b3raPaFh0iCxa99G28wkCiee9xmusIZ+7h8PmEjqRXpXMczRYMMgm9ZVS6QcdSrS
xfBZhW2YuzvqqMeZbkvXZiDxdpDUYqdEi+JqGCOcsNdFRUCeHq7JfdPPNUqXMspR
AUtEyFsEybn0lvOSrBEiE/LXBDe1Eo3BbVCQ2olXVdO9m5rJaDyaXwtpRIFogBPw
wvQzvMdW8Fpvm6s3zvGUKynw9KgTs9/z2CEHVdMphOiHFFNwKpLvyefhQliuM2bg
bMslgVI0rC1dXbb2S4+eV3sEStlnprVXI6Ty4SGZLsu4CohKA/d/4WObcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK/k+pTO7q8MWrK5ia6FUkU9KNgMB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMynuLuMZ
bKhAFjFxSdeTppW+UBHWv9cYReicM+GtEzy5KqJjYvMPuNSU4ptLeqSVs+cKDqJZ
6WkYiOorBvlDyrwEBzDn/F9zgt8PQWYB6rU07U6/ntc17fKI1+wqfIkqilFYIU6A
VrK5tqARQKczZl/8Ov3rmam9d083S4fygUnYOoHKTJu73VL7HwmPhm8UgY1Z1uyx
dPp2UKlgSL53t9AAmM7d2pACnb/jUQ/J59Kg/rYY8IXf7wWrzVvcosBalq5c7ngj
Uplnm7qscJGZrrQFcTdkjRc3lX1E6CUHdhWTnWjIOJWqWrzDFnnbvxQtv9m479ul
1p38wS83YG3yBA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:08 2025 by rpki-client