Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: oQNNHrI4HFzZc6IcoB2O3rZ7tadSs2E1Tn5HZggYPaE=
Subject key identifier: 9E:A1:C7:3B:F3:9F:D5:A5:ED:53:F3:86:71:3D:96:4F:A5:44:4E:55
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 0199239F69D9473A1B95FF6C56E4CDD4169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 58
Signing time: Sun 07 Sep 2025 10:01:13 +0000
Manifest this update: Sun 07 Sep 2025 10:01:13 +0000
Manifest next update: Mon 08 Sep 2025 10:01:13 +0000
Files and hashes: 1: 1OnAxERvwCdnk__Rn-ReVSlbcoM.roa (hash: aqwsdMgIbP4mFzFG0p4x2dQgO0GnM+i3JMeyA55YC7E=)
2: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: b14hw1DIgevu+cogOjOI8eJcdtLp3+MDGxk1Dg5u0VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:69:d9:47:3a:1b:95:ff:6c:56:e4:cd:d4:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Sep 7 10:01:13 2025 GMT
Not After : Sep 8 10:01:13 2025 GMT
Subject: CN=9ea1c73bf39fd5a5ed53f386713d964fa5444e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:73:04:41:5f:b0:41:92:8e:3d:a1:93:6c:
e9:77:e6:4a:70:4f:2b:82:7b:f0:82:0a:ed:50:ff:
89:97:ed:24:93:85:6a:ac:16:4b:04:18:89:27:9f:
44:40:42:4e:a7:30:64:21:d7:e2:4e:a0:aa:0c:7c:
51:28:22:e5:cb:00:34:25:14:c5:24:59:07:67:07:
ae:a5:f1:0f:3b:fc:d9:7a:7f:c4:fd:85:9a:2a:6c:
d5:ae:a2:00:85:3f:d4:4b:7e:0a:9e:9d:0f:56:0c:
97:32:4e:5a:99:c4:4d:f0:8e:b5:b6:9a:1d:15:c2:
dd:81:4c:9b:9b:ae:3a:3d:e5:4a:4e:6c:61:c0:da:
44:0c:4b:0d:11:98:a9:9f:05:0b:51:d8:79:5d:a1:
17:a4:02:97:7a:53:ec:b5:07:96:ed:94:21:11:92:
87:09:e0:bd:61:80:a2:3b:9a:26:e1:6f:2a:20:90:
9f:33:21:8b:59:bf:0f:ad:3f:c6:12:67:04:0b:e8:
4e:53:c7:1d:56:a8:c9:5e:34:43:02:89:ba:ef:07:
85:99:36:28:48:ed:20:5a:52:78:0a:b5:dd:ed:1f:
4c:3b:96:f5:5b:9b:e3:c0:1e:e1:9d:cd:7d:5d:82:
93:15:1a:f4:b6:93:76:9a:4e:f2:61:71:02:ee:74:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:C7:3B:F3:9F:D5:A5:ED:53:F3:86:71:3D:96:4F:A5:44:4E:55
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:19:d0:be:49:d7:e1:a3:ed:88:ea:8a:a2:e7:84:07:b5:d8:
71:4f:ab:cb:17:11:0c:ba:39:10:fb:be:a3:d4:ac:f1:9f:42:
00:68:d9:95:1f:cf:73:7e:01:76:e7:ae:dc:36:07:3d:4c:b1:
ae:79:ca:da:9e:e6:ee:1d:6d:a3:a5:71:0d:50:65:00:89:fd:
52:41:09:dc:ee:d7:3b:f3:26:36:2b:b6:22:6f:c4:89:11:b2:
aa:c9:79:66:a9:7e:6d:99:6e:12:44:06:6a:1a:72:29:3b:d9:
e5:63:3e:cc:0b:b5:a4:b5:c8:60:c5:43:31:ca:86:77:5b:79:
7e:a0:89:95:f2:e5:9c:c2:83:aa:9a:38:25:f9:40:45:19:06:
d2:06:b9:a8:c2:7a:f2:7b:8d:8f:7c:33:09:69:69:de:34:fe:
4e:a2:d6:65:5d:86:d6:dc:1c:c6:f7:dc:9b:06:10:8e:ca:6c:
f3:80:4e:ce:12:bc:98:75:ae:09:a9:a0:c5:2f:64:b9:3b:e2:
8d:80:bb:c5:9e:8a:51:80:97:64:bf:f6:a5:4a:59:96:7a:55:
46:c9:fc:fd:ef:02:ad:0c:79:ab:01:25:60:bc:11:41:9f:78:
2e:00:d2:7a:e5:b2:c1:7c:64:ad:ea:33:2c:59:f1:13:d1:5a:
8a:bd:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:57 2025 by rpki-client