Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: gRw01APVBWFz7LhUBzZ+n1GwYeHXq4n4FVWih/HQOjQ=
Subject key identifier: B8:32:9A:FC:27:BE:0D:5D:C7:C6:E8:75:4D:3C:F4:52:51:0B:78:22
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019835A7CCA7695A9960F36ABD2643B07A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 056D
Signing time: Wed 23 Jul 2025 05:00:45 +0000
Manifest this update: Wed 23 Jul 2025 05:00:45 +0000
Manifest next update: Thu 24 Jul 2025 05:00:45 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: x4BOYESrDZeYopBVFbARIQeaVtdj3P/GgZcQhElIvFk=)
2: A_DdgpizT--rlZ-ab-YZdIwkNLE.roa (hash: hfZgPH/DllsEyaUJjbheadfPG1jNf80tTNcLY41EaYQ=)
3: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
4: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (hash: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=)
5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
7: q13-9N0ob4EuZWCOBMGdrrmovYs.roa (hash: eeKbIgwTI3WJxgPRBQEnAOsOn9kelg3Nk/9eNVvZbRQ=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:cc:a7:69:5a:99:60:f3:6a:bd:26:43:b0:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jul 23 05:00:45 2025 GMT
Not After : Jul 24 05:00:45 2025 GMT
Subject: CN=b8329afc27be0d5dc7c6e8754d3cf452510b7822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:9f:c6:a8:46:d5:a9:ca:2e:13:8e:81:55:
00:ab:c4:f3:8b:b5:f3:c7:0f:21:67:28:8b:d4:6b:
93:4b:b8:8e:9f:6b:08:e1:15:a5:f8:b8:b0:ed:e1:
a6:c3:4a:3f:4d:0f:1c:5a:3c:dc:dc:29:e4:0d:a2:
20:97:0f:82:d7:81:6e:1b:3b:33:fc:4a:37:e4:0b:
6f:b8:5d:ab:ca:a8:b2:a8:ed:af:9e:9d:5f:52:ed:
17:fd:37:63:c6:f4:76:ce:04:cb:c9:1d:c2:28:ff:
2a:ea:7a:13:b3:fa:5f:1f:1a:4e:a6:70:72:e9:b3:
2c:5c:3b:4f:97:65:01:11:da:74:22:e4:11:98:da:
37:36:43:bd:ea:12:1e:77:7c:92:42:b9:e4:ee:37:
8e:5f:43:53:a2:11:7f:d2:d2:65:12:fb:ff:9e:47:
2f:fb:9b:38:9b:c7:77:d7:e0:38:7d:4e:01:b7:f8:
fa:5d:a4:27:b2:6c:69:50:f2:5f:44:f0:58:bb:ac:
7a:aa:d6:f4:b3:f1:eb:8f:f6:21:00:97:9f:37:7d:
de:4b:c6:8d:a1:c8:c9:38:8d:39:19:21:e2:00:72:
7a:16:e3:74:df:6d:09:8d:75:f9:02:91:00:a3:6e:
df:85:ec:d7:e8:73:94:f1:12:9f:54:5b:9f:6f:21:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:9A:FC:27:BE:0D:5D:C7:C6:E8:75:4D:3C:F4:52:51:0B:78:22
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:38:7f:61:e7:19:e1:7c:20:38:98:b3:3a:77:cc:82:69:b4:
c8:e8:e9:13:ec:62:3d:be:a5:79:32:a5:d4:02:40:ef:7d:5c:
40:22:84:e4:9d:16:a5:91:7f:dc:89:6b:20:25:df:3e:d0:20:
ec:db:a1:6d:36:10:82:d7:46:c8:77:5c:ad:82:12:da:21:33:
d3:2b:1d:90:e1:d6:6d:0b:aa:0e:3f:b1:de:c6:81:65:d2:ff:
45:70:95:3d:8b:f5:2e:62:a7:99:6a:a9:dd:70:06:c8:86:7f:
95:e3:8b:59:21:b7:37:cc:d0:db:fe:e0:21:d7:2a:9f:76:45:
8c:c0:b5:09:42:92:cf:c7:c9:17:7a:24:b2:4c:2a:6e:01:fd:
5a:ab:d7:fc:15:ad:da:72:77:62:a2:52:f8:17:6c:78:81:92:
aa:3d:c7:83:96:0d:07:f3:30:63:45:4c:a1:7a:0c:c7:f2:df:
a4:ab:97:4a:bf:e7:5d:12:e0:2e:a5:b7:f2:97:96:0d:21:2b:
05:82:a9:e6:4b:d2:05:ce:f9:25:9b:0a:b5:42:3f:0e:d9:16:
4c:b4:04:91:5f:ac:a3:3a:cb:ec:f9:8f:51:48:51:68:1a:5d:
51:b7:ed:54:9f:36:09:75:bd:15:c2:ed:a3:63:1a:39:97:e9:
c0:84:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:42:08 2025 by rpki-client