Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: xQA5aJsC5DKH/f0n4cazByyDUnyV0aI1pVqZWydFcNQ=
Subject key identifier: F2:DE:3A:CE:A9:E9:3E:CE:32:E4:A8:65:E4:F9:52:53:8E:55:24:5C
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 0199239FE2D4DDD07AA362D3B65A5ABC8C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 10:01:44 +0000
Manifest this update: Sun 07 Sep 2025 10:01:44 +0000
Manifest next update: Mon 08 Sep 2025 10:01:44 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: IxGpEZ9u5BK4HHEmfgi7bMYio6pdiQ2xz3KX98njIac=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e2:d4:dd:d0:7a:a3:62:d3:b6:5a:5a:bc:8c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Sep 7 10:01:44 2025 GMT
Not After : Sep 8 10:01:44 2025 GMT
Subject: CN=f2de3acea9e93ece32e4a865e4f952538e55245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:77:13:0c:d5:32:fb:95:05:46:0f:33:5e:
fa:0f:ea:bc:82:09:c7:db:d3:cf:3c:8d:ec:98:8f:
e2:5d:62:53:8e:20:32:56:b2:44:1a:76:8c:28:73:
f2:4c:56:0d:10:4a:80:b8:46:03:3d:fd:f8:c0:fe:
02:cb:75:ec:ff:c0:44:ab:68:06:5e:01:64:ed:43:
0f:7a:9b:ed:76:9b:6c:ca:39:d3:3e:ba:53:60:42:
2d:85:2c:9b:a4:fc:c3:ce:05:4c:d2:d5:1e:db:a7:
88:f6:a8:b0:2a:15:03:be:20:36:14:8e:ef:70:85:
6f:02:4f:f2:b3:df:08:c7:20:db:4f:70:c5:c0:00:
53:47:55:da:f8:2b:a6:c4:8d:bd:53:93:08:b2:26:
62:98:6e:c8:b5:75:e0:79:c5:20:21:a5:d9:65:ed:
93:8d:03:2e:61:4f:fc:bc:73:57:ed:08:79:41:01:
f5:ff:df:63:27:c1:f5:5f:3d:08:89:91:a5:48:4c:
d6:4c:81:63:ce:ed:27:db:6f:4f:08:d1:c4:83:03:
cf:b7:62:e6:cd:03:03:a2:30:84:ac:b6:51:a3:6b:
db:44:19:71:b2:4e:c6:bd:8e:f0:1f:f7:29:ff:b4:
c2:c7:69:15:7d:ec:41:92:b6:0d:1e:95:53:13:99:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:3A:CE:A9:E9:3E:CE:32:E4:A8:65:E4:F9:52:53:8E:55:24:5C
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f6:0e:b9:01:ba:5d:1c:ab:d8:8f:9f:6c:b4:8d:c2:ef:68:
37:13:2a:56:20:f8:7f:24:80:6d:75:0b:b5:fd:08:da:b3:d4:
13:45:46:2c:54:88:83:00:56:6c:cc:1a:6f:c8:b9:45:b6:f1:
6d:84:8f:3e:8c:dd:0f:19:38:8c:8e:c2:f9:50:63:b8:ac:86:
f1:fb:d1:0b:be:da:9c:87:c1:dc:61:e2:0f:2d:3e:33:0b:64:
cf:0f:06:9e:15:96:69:c7:56:d1:51:65:44:68:e3:b6:1b:fc:
b7:70:c7:ec:8b:9a:2b:0d:b0:13:81:98:8c:f6:5d:5a:6c:37:
f3:56:ab:20:0e:23:c4:de:91:18:27:e3:10:f1:e6:8c:46:f1:
a0:43:68:7b:1c:da:e8:c2:b9:4b:05:b5:23:f5:5f:5b:f7:d5:
e2:84:e6:dc:91:44:45:57:f9:f2:42:6a:1a:1d:4d:21:5b:46:
19:71:40:a6:0c:92:cc:6b:c0:bf:47:36:31:f9:4b:cb:0c:64:
1a:75:54:f6:ba:2e:11:a1:dd:21:03:f9:a8:43:eb:77:7a:57:
a2:54:0d:65:d7:64:68:7a:63:ba:78:1d:ae:09:4f:e7:c6:a0:
36:e3:8d:6e:09:4b:8c:5f:30:4c:60:5c:75:4f:40:e7:d5:84:
20:4f:7a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn+LU3dB6o2LTtlpavIydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz
ODQ1MWYwHhcNMjUwOTA3MTAwMTQ0WhcNMjUwOTA4MTAwMTQ0WjAzMTEwLwYDVQQD
EyhmMmRlM2FjZWE5ZTkzZWNlMzJlNGE4NjVlNGY5NTI1MzhlNTUyNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr653EwzVMvuVBUYPM176D+q8ggnH
29PPPI3smI/iXWJTjiAyVrJEGnaMKHPyTFYNEEqAuEYDPf34wP4Cy3Xs/8BEq2gG
XgFk7UMPepvtdptsyjnTPrpTYEIthSybpPzDzgVM0tUe26eI9qiwKhUDviA2FI7v
cIVvAk/ys98IxyDbT3DFwABTR1Xa+CumxI29U5MIsiZimG7ItXXgecUgIaXZZe2T
jQMuYU/8vHNX7Qh5QQH1/99jJ8H1Xz0IiZGlSEzWTIFjzu0n229PCNHEgwPPt2Lm
zQMDojCErLZRo2vbRBlxsk7GvY7wH/cp/7TCx2kVfexBkrYNHpVTE5mZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLeOs6p6T7OMuSoZeT5UlOOVSRcMB8GA1UdIwQY
MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt
MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3
LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfYOuQG6
XRyr2I+fbLSNwu9oNxMqViD4fySAbXULtf0I2rPUE0VGLFSIgwBWbMwab8i5Rbbx
bYSPPozdDxk4jI7C+VBjuKyG8fvRC77anIfB3GHiDy0+Mwtkzw8GnhWWacdW0VFl
RGjjthv8t3DH7IuaKw2wE4GYjPZdWmw381arIA4jxN6RGCfjEPHmjEbxoENoexza
6MK5SwW1I/VfW/fV4oTm3JFERVf58kJqGh1NIVtGGXFApgySzGvAv0c2MflLywxk
GnVU9rouEaHdIQP5qEPrd3pXolQNZddkaHpjungdrglP58agNuONbglLjF8wTGBc
dU9A59WEIE96EA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:29 2025 by rpki-client