Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: ccHRZCi5ismky6OCuJkYq7PuTHu2VuxorLyEgG4tqDc=
Subject key identifier: 3A:2B:9F:0C:E2:AB:32:99:F6:F1:1D:D9:85:99:FD:8E:D8:B9:15:6A
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 0199FCC6B55D965F7C0F503B99359071D9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 065B
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: 00C7byJrYp7kE+tokyzJh54CGGDSTElKQoXtx8khYxQ=)
2: LhFRmWbupiZRrTcY1BMgZx0XNm0.roa (hash: 1sSu4Xw0ICcOgnrgocU5c3W/gRE/T8H+tT4ltd3ayqM=)
3: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
4: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (hash: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=)
5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
7: l05lA3ihNrsbi6O1jQgYe6U6RiI.roa (hash: cFNLHeKumGIo0r4P/u4GyYnqlWIoiMqc4hH4vqv6oWg=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b5:5d:96:5f:7c:0f:50:3b:99:35:90:71:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=3a2b9f0ce2ab3299f6f11dd98599fd8ed8b9156a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:ec:20:48:90:2b:26:80:be:95:d2:57:ad:
c2:63:b4:f1:0a:bf:3d:75:36:0a:ad:36:10:cb:9b:
d4:06:17:c3:4c:98:95:0b:cd:68:db:61:cc:d2:81:
9d:84:0f:0f:6d:31:db:94:bf:7a:dc:e5:fd:54:7f:
de:de:e6:98:a1:3a:ef:fd:46:4c:3c:48:f5:b4:3a:
97:c1:23:21:4c:54:b0:1f:d3:e4:c7:e9:44:e5:87:
fc:4e:f6:a5:17:0c:d2:1c:0f:50:91:38:13:c4:69:
eb:66:37:2d:e5:b6:ae:a9:b2:8a:66:05:f4:45:97:
38:12:96:7c:ab:c8:69:55:5d:e1:de:77:f3:35:e2:
b8:e0:47:4c:85:6a:16:36:bd:74:ec:52:08:32:7f:
f4:e9:1e:7c:6d:d4:ed:8c:48:ec:23:a7:29:93:80:
1d:a4:b1:9c:7f:63:e1:02:01:f7:c1:60:54:1a:ef:
ff:69:49:17:c8:b2:c8:0d:37:ea:5e:d9:9e:a3:e8:
a1:ba:a8:fb:3c:0b:d1:56:64:7d:e3:20:bd:40:31:
b1:06:30:fc:ee:f8:7f:75:4f:77:79:ab:d7:bf:97:
62:ff:0d:e8:88:7a:74:d7:06:53:ac:1c:93:d6:34:
50:24:48:88:63:57:d1:da:fc:2e:e1:83:cb:4a:f9:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:9F:0C:E2:AB:32:99:F6:F1:1D:D9:85:99:FD:8E:D8:B9:15:6A
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:7d:e8:ab:ad:2d:15:84:0e:49:f5:02:b7:2f:fb:88:fb:
30:08:21:84:8c:b2:88:82:fb:05:44:6d:8e:51:dd:85:23:2c:
3f:52:3c:7b:6a:96:c3:85:f5:5f:b4:e2:da:81:4a:27:0f:1a:
52:6f:94:4b:67:bc:ab:ba:43:80:a5:82:8b:91:ab:75:80:7d:
38:88:b0:1b:79:17:25:ba:3d:9b:bf:b9:e9:43:f8:3f:1a:d7:
f4:a4:97:92:c5:97:51:59:cf:88:dd:37:fc:c3:1b:d3:3c:09:
bc:af:33:35:1b:1a:aa:88:6c:af:6b:0a:60:70:e7:df:c8:0f:
67:f4:e2:07:7b:67:cc:72:f3:88:f4:6b:ab:75:5a:0b:61:ce:
73:dc:2b:27:47:77:60:ea:b4:00:76:75:55:8b:f6:8f:a3:cd:
1a:2f:a2:f8:21:d8:88:26:8b:f4:1a:d7:c4:66:1b:c1:7c:47:
7f:6a:f5:fe:36:a1:e0:6f:77:1a:45:52:95:3d:41:ec:c5:d6:
cc:94:33:f1:3c:2c:84:d1:f5:ab:94:47:5b:3e:78:e6:1a:b2:
17:c6:aa:0e:ee:9c:ec:5e:a2:58:9b:54:04:72:b0:68:3e:e5:
34:d7:2d:87:ab:59:8c:4d:b2:df:91:2f:16:f3:30:1e:0d:ed:
e1:86:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:09 2025 by rpki-client