Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: dvqAaUIH+CxG4LyWp5WEog16QgXQl7LBD6UuZhFaLIA=
Subject key identifier: 35:06:F2:A8:75:17:97:55:FB:22:07:80:A3:BD:E7:5B:4D:4C:CF:C0
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01974C31CCB39350A60F51EC11418F2BE9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 02A6
Signing time: Sat 07 Jun 2025 21:00:21 +0000
Manifest this update: Sat 07 Jun 2025 21:00:21 +0000
Manifest next update: Sun 08 Jun 2025 21:00:21 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: MdKv+GadBWcY4evalb6v01igRh+efjy0Vcl8hy6mBn0=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:cc:b3:93:50:a6:0f:51:ec:11:41:8f:2b:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jun 7 21:00:21 2025 GMT
Not After : Jun 8 21:00:21 2025 GMT
Subject: CN=3506f2a875179755fb220780a3bde75b4d4ccfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:c0:65:50:a9:8c:23:dc:68:b7:43:c3:61:
95:2b:3b:b2:3c:de:54:b9:c9:e9:d4:e2:f6:5c:d1:
23:5a:b4:81:01:e1:08:56:bc:08:0a:2a:c4:58:82:
7c:6c:8e:48:79:01:6f:21:15:5f:8f:00:6f:98:bf:
ea:a7:53:bd:17:08:99:de:ff:88:70:b6:1d:db:28:
36:57:fa:a9:62:e1:89:2a:fb:1f:5d:b4:a0:f6:a7:
85:e6:e0:9f:6b:dd:0d:76:ba:16:9f:31:ec:01:2d:
8a:f3:54:d8:bc:be:1c:7e:ee:cf:60:55:96:f4:ca:
e7:a0:d5:eb:43:00:1c:9f:07:62:0e:e9:a0:96:21:
0a:69:9a:51:f7:a0:c8:36:2c:2f:df:b9:d3:bf:53:
e2:38:41:43:26:c6:16:17:30:16:27:3d:ed:91:73:
9f:bb:31:2f:50:b6:37:3d:f1:69:73:49:d2:11:00:
e9:5b:79:08:22:86:55:7d:cc:62:d3:e5:80:41:36:
37:c9:e5:33:eb:db:d8:f5:e5:cf:a4:d5:dd:68:cc:
e1:a5:92:06:7d:0f:89:f3:d4:1d:a2:da:28:51:16:
c0:37:d1:dc:6a:9e:3e:0c:d9:94:7a:60:e4:ed:d4:
38:ab:b5:53:2d:bf:a4:1b:fa:68:fb:f0:71:53:7c:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:F2:A8:75:17:97:55:FB:22:07:80:A3:BD:E7:5B:4D:4C:CF:C0
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:55:b7:65:1a:47:c3:cc:b6:69:3c:63:d6:c2:20:cf:51:bf:
af:1f:8d:dd:e2:d6:0b:7e:0a:ab:1f:1b:27:f3:49:71:b1:b7:
91:08:70:96:16:a8:08:4d:01:e5:a9:42:d4:d4:3d:6f:c5:70:
3b:2c:62:dd:1e:c3:bb:31:f0:50:9b:05:af:7a:15:26:ad:2f:
52:51:be:ec:5e:cd:db:c4:b4:f4:fb:7d:44:cf:eb:95:c9:17:
0b:a4:53:58:49:94:30:fb:f2:9a:7e:69:2d:93:24:df:30:e6:
fb:e9:6e:0b:a7:05:97:25:0e:b4:83:2d:e9:75:8e:46:b1:cc:
25:9b:44:e7:56:e9:0e:0d:9f:2d:58:20:44:fc:28:68:22:33:
58:ef:e1:ab:9d:4c:62:6b:c8:26:8e:bf:3f:67:28:e0:11:fb:
e0:a0:ac:e9:03:b2:2a:74:fe:ee:43:a8:7e:2b:79:60:23:b4:
e7:e1:d7:8e:84:93:9f:dc:2a:2b:20:dc:bb:7f:51:a5:be:0e:
cf:55:e3:60:3f:45:7d:d8:e1:9b:2a:0c:a6:73:37:34:eb:57:
7d:91:b6:00:06:e1:15:a7:19:a2:2b:e8:b0:89:b8:0c:a0:a4:
87:7f:15:58:fa:a2:94:33:8f:8c:b2:9d:4f:b5:05:a6:56:c5:
52:23:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:10 2025 by rpki-client