Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: yEjYmmRzJS9lml4ImciGOTNCYx6kjAqUS5ehOVSO004=
Subject key identifier: 9D:97:BA:28:F2:47:BA:13:1C:F8:57:87:22:0C:8F:F8:8B:AB:3A:62
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019A71B9372EFFD56A201F6BCE16F842BD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0411
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: cCZwHAE14NHcCjJ6OUhCp+KlRfyvlVw7K03SrXyuB/8=)
2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:37:2e:ff:d5:6a:20:1f:6b:ce:16:f8:42:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=9d97ba28f247ba131cf85787220c8ff88bab3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:a6:b7:0e:bc:41:36:b7:2b:8c:15:6e:6a:
f4:f6:0f:e0:32:45:f5:50:24:92:97:48:b1:8e:e9:
af:d7:26:d6:de:51:6f:50:e1:b4:11:92:a1:f4:bf:
14:ca:24:55:5d:16:9d:aa:fb:65:66:4c:a1:8f:52:
45:f5:5d:74:e6:a2:32:4d:76:4a:80:df:b6:0f:3a:
5e:e5:f3:e0:ca:85:ad:70:2f:f6:f9:36:3c:5a:5c:
98:3b:89:b4:85:ad:fa:f6:2b:c4:23:ac:97:2d:a8:
6a:aa:cd:cd:a1:e1:e3:6f:4c:98:e7:17:3e:6a:af:
1e:12:0f:ea:cd:2a:ef:38:b7:28:e3:01:df:ad:b6:
0a:79:7f:88:41:2e:27:65:41:79:7f:f0:9a:63:2e:
78:df:fc:07:2b:35:e5:75:a2:5b:11:31:81:f5:72:
51:ec:bc:01:f6:83:0c:a8:b6:64:c6:f3:ab:fa:8d:
1a:c1:2b:52:15:9e:06:3e:ad:36:65:07:52:8c:d1:
4c:99:9d:b1:2a:e3:73:bc:aa:05:85:6b:be:1d:e3:
84:46:0f:cf:2d:ea:37:16:52:5b:37:30:27:3c:cd:
f3:af:2c:69:b7:ea:b1:6c:50:0e:7e:c6:43:8a:29:
16:5d:8e:f4:9e:78:33:61:59:6d:c1:c9:92:48:7d:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:BA:28:F2:47:BA:13:1C:F8:57:87:22:0C:8F:F8:8B:AB:3A:62
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:01:56:d9:62:8b:89:c5:84:3d:a9:c7:91:65:9d:f1:0a:
a1:b9:2d:1b:2f:91:51:e8:20:a5:7b:e1:1e:ac:97:42:2c:5f:
dc:b2:a2:fe:e8:66:47:28:0d:93:41:af:59:15:9e:9b:6b:ad:
de:ef:04:d9:32:39:20:4e:97:4c:ba:cb:f1:ed:56:0d:b9:07:
9e:44:48:f4:26:55:f1:64:87:f7:36:70:7b:a2:38:96:7b:98:
5f:3d:85:19:23:63:92:6e:b3:6c:78:7a:69:dc:fc:7c:47:0b:
bf:73:ca:37:c3:90:85:7e:37:f5:0f:9f:9a:49:77:57:c7:dd:
7f:0a:52:0a:a6:19:db:e7:6c:91:f3:6e:dd:60:2f:4c:3c:ab:
2a:52:7c:ee:ea:d1:cc:4e:e8:64:5f:64:ef:0f:39:81:82:dd:
87:3f:6c:27:ac:a3:e7:9a:c8:56:48:f8:63:2f:21:0e:dd:b2:
c5:b7:96:5c:f8:85:ac:9c:66:be:e4:e0:5c:0c:73:76:f9:39:
75:86:1d:73:75:29:81:cf:28:73:07:76:84:15:bc:41:21:4e:
96:13:13:fd:c8:26:52:d8:38:70:66:c4:11:43:57:7a:fe:7e:
71:cf:fb:a5:8d:99:78:cf:82:78:4f:44:91:4d:63:f6:d1:21:
84:7f:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:56 2025 by rpki-client