Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: ubaeNSmPo5qZwVzLrzfRdOE6VuJvF4kiy5Jym8fk8/k=
Subject key identifier: 6A:86:20:B8:A2:27:6A:A5:31:43:D0:5D:FB:93:63:E5:A0:68:FA:01
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01984777426571D0CFBE9175A604733F1BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0328
Signing time: Sat 26 Jul 2025 16:00:54 +0000
Manifest this update: Sat 26 Jul 2025 16:00:54 +0000
Manifest next update: Sun 27 Jul 2025 16:00:54 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: WMtZqMA9hCjDf+QQk4CFKxDFjLSVy+Td9b+oWqmYchI=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:42:65:71:d0:cf:be:91:75:a6:04:73:3f:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jul 26 16:00:54 2025 GMT
Not After : Jul 27 16:00:54 2025 GMT
Subject: CN=6a8620b8a2276aa53143d05dfb9363e5a068fa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:a4:78:b2:20:98:c2:63:1e:29:75:d5:5a:
c1:7f:50:38:2b:b8:05:e5:9d:5f:fc:db:7b:57:e9:
dc:7a:fe:aa:a3:4a:59:12:73:ca:91:06:25:e2:99:
43:85:cc:61:3e:1e:5f:ed:ac:66:6b:3f:c9:0d:31:
b2:7d:a0:1f:28:12:87:40:94:69:eb:1b:2f:eb:9c:
6c:ec:26:dc:53:42:4f:e7:a8:e9:e4:5a:04:59:e1:
8e:2c:ad:4d:63:7d:62:bc:aa:d7:29:1f:c7:49:3f:
f2:78:f4:ef:2a:3c:4e:13:e7:45:6e:9a:f6:ef:73:
d6:b9:ce:3f:80:3c:ad:68:f8:6e:dc:98:80:75:58:
ce:4d:57:95:90:31:80:6b:39:98:63:f7:fc:b5:96:
79:e3:f9:dc:be:67:41:65:ec:89:44:3f:d1:e7:39:
f3:9c:61:fc:8b:b4:43:9a:98:21:53:49:85:a1:a8:
3d:f5:6a:ae:44:a2:33:4c:a8:56:05:b9:6f:df:e1:
f4:5d:40:34:00:9c:92:01:1f:a3:2d:e9:a8:89:94:
af:47:6b:da:aa:e8:ab:6b:48:12:57:85:9c:39:e1:
05:33:3a:18:af:04:a5:53:80:6d:a5:15:0d:5f:34:
3b:7b:e4:1d:7d:50:58:48:54:57:5e:63:dc:85:9e:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:20:B8:A2:27:6A:A5:31:43:D0:5D:FB:93:63:E5:A0:68:FA:01
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:53:88:73:4e:ba:cf:04:d2:46:22:e3:8e:d4:2f:5d:84:3e:
c6:1b:8a:be:68:81:2e:7b:49:5d:eb:80:72:98:a1:c3:a0:e5:
2a:b1:c9:63:7d:6c:29:d1:c9:3e:17:72:32:c9:6d:73:df:4a:
eb:1f:f0:08:9d:00:33:20:ef:29:6a:13:71:72:0d:a3:a9:16:
1f:89:86:d7:92:39:c7:56:70:93:03:dd:c8:5a:61:a0:3c:ff:
2b:f4:9f:08:5c:b4:02:c4:1f:ff:23:eb:0a:1d:f5:83:0d:8a:
b3:11:33:71:57:0c:62:c6:78:df:a1:66:b6:55:66:6b:7b:51:
98:5c:ce:d2:97:4b:03:c9:d8:1b:d7:63:d5:6c:c7:34:d3:38:
41:d7:df:49:25:5d:10:4f:4a:b1:cc:df:32:c9:4b:c4:0d:9e:
7a:ec:27:5d:3f:5a:f4:84:f8:81:7b:db:67:5e:b5:04:44:5f:
b4:c1:95:64:ad:6c:5c:a0:d1:db:85:f2:e6:0f:4a:f5:a2:b8:
22:a3:60:46:41:bd:a5:a5:be:a2:f8:85:26:e2:39:76:6f:e5:
49:80:9f:75:a7:1b:be:34:52:a4:fc:b1:d2:91:1d:c7:f3:e8:
00:a4:db:66:79:56:4d:47:ad:3f:7b:8e:60:83:8a:02:51:ad:
54:57:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:09 2025 by rpki-client