Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: fm5Iw0HYXuOJZgc9yQ14bNAAtgr0u//bMVGsGUz7j+0=
Subject key identifier: C3:C9:EA:53:B0:E9:5C:BA:57:C8:73:CB:E3:FC:58:59:B4:96:78:0D
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019A71B91988AC4DB70FE2020EE265189424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0447
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: /bmhlA5vWrWlXZnVCLfL6lTM/OitLX9d06vUUo67ETs=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:19:88:ac:4d:b7:0f:e2:02:0e:e2:65:18:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=c3c9ea53b0e95cba57c873cbe3fc5859b496780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:13:66:bb:70:28:96:38:37:92:ac:75:0e:
14:31:78:15:c5:7e:56:a9:7c:92:e8:d0:22:50:e1:
46:49:8b:4b:fb:9b:15:19:75:99:b3:17:a5:a1:06:
73:60:44:7f:43:64:a3:a4:95:51:cb:fd:7f:02:53:
5b:c8:1a:10:85:ac:20:66:6f:d8:cc:21:2c:f9:bb:
5e:6a:ea:ed:51:be:5c:f9:67:e4:cc:76:42:19:15:
6e:85:b7:56:f8:ca:a1:49:cc:61:16:45:4c:d6:8b:
9e:2d:ff:ee:df:dd:e0:81:02:77:b9:72:a6:3d:d9:
46:02:99:b7:69:82:43:38:3a:c3:bf:7e:18:3a:d0:
fc:9d:0b:c4:1e:2d:1a:43:05:ad:1d:c1:ee:69:2b:
f3:2c:46:58:70:95:1c:45:59:94:9d:46:15:fc:4f:
e4:fe:6a:88:ad:5d:d0:1e:6f:65:22:b3:fa:4b:cd:
dc:8a:77:e2:d6:d8:39:8b:50:9a:3a:4b:fd:52:27:
ea:38:cf:36:66:55:05:96:90:29:3f:4f:87:78:9c:
9f:87:88:93:d2:9b:4f:7a:14:28:21:1e:6f:a1:24:
81:35:aa:e4:fa:c5:4e:d8:e6:69:08:f8:7a:7c:f2:
01:bb:c1:88:1e:d6:b4:99:df:a8:51:54:f3:39:3d:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:EA:53:B0:E9:5C:BA:57:C8:73:CB:E3:FC:58:59:B4:96:78:0D
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:83:ab:47:db:f3:c5:62:0b:b9:9b:42:c5:08:6d:97:a2:
8d:90:b9:68:c7:90:73:a7:c7:d6:43:ff:21:b3:7e:ee:be:59:
1a:b5:ac:14:58:05:79:ab:3d:27:d4:1b:1d:97:e8:b5:d5:dd:
b8:e1:5f:22:81:38:98:e5:6a:f3:44:ea:10:2e:48:4f:c9:33:
5d:d3:dd:ab:6f:1a:c1:99:41:b9:1b:48:c3:7c:6c:30:ab:58:
57:9a:3e:1b:2b:5c:e6:be:00:22:60:a4:a1:81:8b:a0:bd:5f:
31:3e:be:78:63:15:80:a5:75:4e:01:3d:7c:50:9e:2d:8d:f6:
53:93:ec:0b:0e:21:bb:da:e8:26:14:d4:8c:c1:7d:5e:8f:7b:
1e:54:6d:d7:83:ad:7b:ec:c4:9a:da:b7:56:e6:f6:2b:3c:0a:
73:46:ee:3b:7d:00:09:dd:f5:6b:b3:f3:b1:12:f6:4d:35:8e:
2c:66:8d:21:cb:1f:9d:af:f7:7b:ec:1d:b8:0c:d5:c1:c3:2d:
22:69:15:4b:21:e8:fb:6e:be:83:41:34:c8:b6:5d:e3:38:17:
21:82:af:59:16:17:11:a9:be:dc:76:e5:c5:7f:f4:da:9d:cd:
d9:c4:76:02:ad:36:3c:92:05:08:c6:e6:e9:23:21:57:e8:d8:
77:78:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:11 2025 by rpki-client