Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: ay+iGSYGS65OsGuBze0UwAztJkNFYdJf8RD6ejbpCx8=
Subject key identifier: B7:6C:82:E8:C2:18:06:6C:3F:F2:50:A9:6B:34:2A:A8:58:B6:CE:3F
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019A71B822814D7ED7E74AAC59D65615E950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: 3DAPWjJG7sAbxgsFpAXib5LedodPYParBd3HaT4xB6U=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:81:4d:7e:d7:e7:4a:ac:59:d6:56:15:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=b76c82e8c218066c3ff250a96b342aa858b6ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:44:87:19:62:4e:79:e7:2e:02:20:fe:67:
3d:03:59:ef:df:3b:b8:23:ac:fa:bf:20:9d:2d:02:
5b:e1:3f:de:dc:0a:e1:97:7e:2c:a1:60:78:48:02:
64:25:43:98:4a:1c:95:4d:ef:7d:1e:6f:7c:ae:43:
f4:71:92:20:5b:ab:fe:49:aa:08:a5:c7:cd:61:60:
3d:16:1b:85:39:71:cb:11:a9:d8:04:e5:50:18:74:
ef:9f:34:3c:81:d2:f0:e7:b1:68:31:8a:f8:d0:ff:
11:3a:17:71:ed:3b:a6:d6:b9:79:86:ae:d0:a1:c8:
07:49:d2:8c:95:cf:4f:0b:8f:a2:1f:6f:62:03:9b:
44:78:e3:45:8c:ef:db:95:6c:d0:f3:3d:79:32:e6:
33:da:20:96:9a:e5:83:9e:65:af:7b:e3:5c:21:5b:
70:1e:65:6b:9f:a2:e9:7a:6d:31:97:85:93:39:30:
56:7b:66:d4:99:c0:f6:ef:b9:d1:bb:5b:10:99:d7:
ed:28:94:7a:c0:65:0b:09:a2:6d:4c:de:fb:9f:59:
40:1d:73:b0:8f:32:f0:9d:47:fc:5a:8a:2c:d6:47:
a1:33:a1:49:43:0b:1f:94:c2:0e:50:cc:27:b1:ab:
0b:94:ae:43:c7:e4:ef:68:37:3e:b0:a7:00:80:f3:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:82:E8:C2:18:06:6C:3F:F2:50:A9:6B:34:2A:A8:58:B6:CE:3F
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6c:b8:fd:92:99:46:04:2a:20:64:9c:f0:e0:97:d7:2e:c5:
6c:c5:72:f5:96:77:29:7d:c5:be:fc:34:4b:1e:04:d9:97:4c:
a2:21:7f:4e:db:6c:87:8e:6e:88:c1:23:7e:db:e8:c2:71:a2:
61:bf:11:c3:02:6a:53:24:4f:06:b3:97:de:c4:c9:5c:74:de:
34:25:74:6c:30:62:21:88:a1:06:f1:34:6b:a8:97:c8:7e:82:
74:ad:f9:79:fd:78:4f:47:40:26:a5:25:68:1d:24:fe:7a:b5:
db:2f:dd:75:75:62:16:46:c1:73:05:63:98:55:8a:f4:7b:06:
f9:88:8d:4e:48:d6:05:f7:31:2a:dc:40:b7:d8:80:9f:64:38:
85:f3:26:0f:93:48:e6:6a:28:00:83:16:f4:8f:4a:4f:2d:a7:
c1:8e:f3:58:38:f0:bb:a7:2a:6d:52:44:4b:0f:b0:16:b3:20:
a3:3e:76:3a:a2:1c:c5:5f:c5:40:56:02:07:4e:a5:7e:a2:4b:
65:cc:3d:2f:43:2a:31:e6:0f:9b:25:3d:59:16:10:f1:b1:62:
c3:ef:1b:df:47:b6:db:69:00:e3:b8:2b:53:cb:7a:e0:6f:46:
ad:67:a7:b1:d4:3f:6b:e2:4c:61:0f:af:b7:a8:64:7f:21:84:
c6:34:98:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:18 2025 by rpki-client