Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: 4bNQK5ZIlx8joLvea/zVw9jituO4r3rRhj6HW9h7Gt8=
Subject key identifier: 2D:66:D7:D0:53:F0:8F:F7:7E:7A:33:2C:41:54:7F:5E:44:52:A5:CA
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019A725CCC2B1B846109DC4C1562C16A583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 16C0
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: Lmt/29YEN0+IgvQJtkpP6R/e8J8gGlkRGOnfOPdan8I=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:2b:1b:84:61:09:dc:4c:15:62:c1:6a:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=2d66d7d053f08ff77e7a332c41547f5e4452a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:d4:42:37:b7:9f:37:92:8f:83:90:fa:12:
32:f0:71:9b:a8:a2:0e:7b:8d:65:48:68:8c:9b:60:
b5:4a:9e:27:f4:cb:11:53:f8:37:d6:58:4e:14:02:
66:a0:ee:75:f6:3a:4e:7f:0c:7e:df:a3:12:c6:88:
ec:5b:e5:21:22:4f:84:79:a0:94:da:6c:2d:9e:ec:
33:3d:41:34:ad:7f:4a:1d:75:7f:10:66:f6:dc:4d:
af:cb:1a:a2:33:b0:4e:71:81:55:11:92:c5:f6:3c:
af:7d:e3:8d:a4:e2:71:60:25:dd:7e:39:c5:37:9e:
a0:5d:57:05:3c:ea:aa:6d:dd:05:7f:06:7e:a4:be:
07:5e:3c:a7:d1:5d:63:c7:b9:39:84:71:be:64:57:
1e:b0:32:e2:20:14:1c:85:d2:26:07:8e:a6:1f:15:
39:4b:8c:db:99:b3:aa:56:cc:38:a4:37:c2:d3:97:
d6:0a:7c:8b:57:13:24:11:ae:4d:93:eb:80:9f:f9:
07:c9:df:c6:5d:ad:45:cb:54:2d:d6:6a:66:4e:53:
73:2d:a1:e2:05:07:fa:81:03:f6:39:da:4a:61:9f:
81:f0:7f:9f:52:d4:a6:b5:dd:5a:57:3f:0d:36:26:
1f:fb:a8:be:58:69:8d:9e:0c:c6:3f:a4:79:f1:ac:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:D7:D0:53:F0:8F:F7:7E:7A:33:2C:41:54:7F:5E:44:52:A5:CA
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:b8:5c:70:ed:4a:d9:78:58:97:09:6a:da:4a:0d:8f:a9:
ff:77:a9:5e:0f:d1:b8:3e:15:91:79:b1:fe:9f:db:ec:9e:bb:
c8:95:e1:73:c9:4d:84:09:60:4f:c8:0b:e8:77:f3:1c:55:4c:
15:98:58:c3:38:a8:f4:df:51:00:3d:b0:df:e4:71:a5:ab:12:
50:30:16:6c:84:e0:09:93:05:3e:0a:dc:b5:78:03:47:2d:8e:
7a:15:54:b3:3d:a6:af:cb:c7:68:77:29:67:f1:98:06:87:4a:
c1:9a:3f:ec:33:df:c7:7a:05:e2:76:84:cb:1f:01:73:4c:f3:
2e:bf:42:d5:89:6d:0d:c4:33:e1:17:e5:e7:ef:22:88:72:64:
c9:ac:22:eb:9f:f4:0f:4a:f3:51:a1:1a:e9:fc:16:b9:87:e2:
f6:f7:dd:ca:95:44:69:bd:55:0d:02:f5:cf:d3:86:4b:b9:e6:
b6:45:64:80:a5:59:bb:4a:9e:53:eb:db:e2:ad:99:12:bb:ca:
22:6c:75:2d:18:e9:59:54:b6:f3:0a:f3:15:fa:c2:19:74:bf:
9b:32:8f:ab:01:30:ff:ba:da:3d:01:16:a1:e4:6b:56:92:fb:
28:17:f5:4a:3b:b6:93:a2:2c:19:74:3f:58:71:f7:c6:37:93:
41:c2:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:49:36 2025 by rpki-client