Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: 0giBPu0UYdZwJ/x32BYH5gdUirlbzqyF5v/oFwmWAUQ=
Subject key identifier: 8C:5C:3D:C9:4A:69:C8:49:3E:B9:2C:4B:55:4B:60:01:DD:D9:80:30
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 01985CB77F187F09E4FC93F99090005AD84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 19:03:06 +0000
Manifest this update: Wed 30 Jul 2025 19:03:06 +0000
Manifest next update: Thu 31 Jul 2025 19:03:06 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: h5t8Vd71gQklwaBultB2YOwWBTLG9Fs6dzkdT9sXzpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 19:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b7:7f:18:7f:09:e4:fc:93:f9:90:90:00:5a:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Jul 30 19:03:06 2025 GMT
Not After : Jul 31 19:03:06 2025 GMT
Subject: CN=8c5c3dc94a69c8493eb92c4b554b6001ddd98030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:27:02:b0:f4:4d:17:b6:c7:2f:83:8c:b8:
fe:b6:1e:f8:dc:02:27:06:c0:ff:13:cd:b3:9d:e7:
6b:cf:98:02:0a:3c:f1:da:22:57:41:35:7f:6d:b7:
b2:0a:76:67:c0:64:0e:9f:7d:f2:51:4e:6f:19:0e:
e4:7f:72:b5:da:df:19:bc:fd:0e:6d:3b:59:f7:69:
2c:54:e0:20:29:0d:3d:51:89:9b:c1:d1:05:3b:87:
e9:c8:44:44:2a:a4:60:50:25:d5:79:7c:6d:b9:97:
94:90:b3:b9:40:2e:ab:99:a3:35:b0:9d:e0:20:4a:
76:52:7d:1d:eb:b9:b3:b3:25:5e:6b:68:99:f6:3d:
ea:75:d9:ab:44:85:3c:f1:df:10:6d:54:55:ad:37:
88:57:94:32:25:15:30:00:b9:3d:b0:16:e3:5b:f4:
55:03:a8:93:aa:2f:be:0f:79:18:a2:f5:0a:59:84:
0e:60:a7:68:e5:f7:a7:3e:b9:c0:29:92:94:57:5c:
64:3b:c6:1a:c8:54:1d:a6:b6:07:c6:13:fa:4c:f9:
50:d9:4b:a2:55:75:df:f8:27:91:0b:b1:d6:f0:5e:
2d:54:eb:80:36:67:ec:f0:3e:42:ce:f4:a6:3d:03:
47:ba:c8:65:46:9e:1e:88:c2:61:0a:65:8e:46:6d:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:3D:C9:4A:69:C8:49:3E:B9:2C:4B:55:4B:60:01:DD:D9:80:30
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3e:f4:fb:bb:b4:ef:ff:13:eb:04:17:f9:f2:6b:4f:04:a5:
58:03:2d:63:c0:b8:7f:bc:85:e0:94:81:74:dc:20:59:17:fe:
cd:95:38:9b:f9:99:04:de:2d:ee:35:f2:85:a2:07:d2:25:e4:
29:cf:05:a8:b6:40:0b:4a:73:0d:bc:91:f9:df:f7:91:c5:21:
46:08:5b:3f:1a:82:6f:68:59:1d:e3:57:94:8a:84:9f:fe:f6:
dd:e7:0f:81:76:b0:e5:ae:10:8b:2d:1e:90:25:ea:83:91:ff:
91:7e:aa:f6:ef:04:7b:dc:80:cb:d1:7b:2c:ab:b5:31:be:71:
ce:33:71:37:45:bc:39:60:96:29:b0:b8:96:f2:ab:8a:b8:11:
b6:4d:f2:40:07:b2:9e:72:6a:39:e0:db:29:5d:72:03:1b:b4:
b3:d8:70:47:d4:b5:21:8f:b3:ef:93:5f:06:14:95:e4:a5:5d:
f0:c6:eb:57:78:3e:c9:6a:1b:1b:f1:bc:a6:4a:34:82:ca:77:
e3:b0:83:29:a4:25:55:ca:12:ba:28:15:e7:ed:65:0e:fb:18:
ca:2b:9b:1d:79:a6:3a:58:6b:35:f8:6f:e9:ae:76:df:db:5c:
b3:04:d6:6f:1d:48:85:11:8d:b8:70:a6:13:11:b2:35:d6:6e:
1c:53:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:47:23 2025 by rpki-client