Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: 0xdOrAGy1bu7qCfvAoaWcdAOOBO2wuiGDigydVZ+vik=
Subject key identifier: 5A:CD:DC:DB:87:95:0A:BC:EE:C9:27:F2:F9:46:57:9F:32:A9:7E:AB
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019922551F33F1C09763E0B38CBF43B1B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1612
Signing time: Sun 07 Sep 2025 04:00:27 +0000
Manifest this update: Sun 07 Sep 2025 04:00:27 +0000
Manifest next update: Mon 08 Sep 2025 04:00:27 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: LTdO8cdmtfQt0JGHkP8S8dGAL/mLPTJ78m1Xy4GItIw=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1f:33:f1:c0:97:63:e0:b3:8c:bf:43:b1:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Sep 7 04:00:27 2025 GMT
Not After : Sep 8 04:00:27 2025 GMT
Subject: CN=5acddcdb87950abceec927f2f946579f32a97eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:8a:37:83:aa:5e:61:f6:3b:d3:b2:5e:8a:
35:f1:c4:de:08:34:76:2a:8c:99:af:a6:16:eb:ae:
ae:fb:d3:a0:af:8a:1d:fd:4d:03:56:4a:98:4b:fe:
96:f2:49:72:b6:65:6a:0d:79:53:69:9c:e5:96:0a:
34:14:a1:49:1f:4b:1c:24:48:3a:44:47:bd:97:24:
7f:89:d2:0c:2c:04:59:ae:61:9c:2c:c5:da:20:4f:
01:d1:b2:1a:b4:79:df:8b:6c:a3:b6:49:8f:87:29:
02:06:7b:1a:52:8e:88:ee:32:17:2f:7c:8d:7d:5f:
b6:8d:cc:8a:f4:dc:06:35:8e:c4:3a:18:7e:ac:8d:
63:40:ba:1d:14:06:97:6c:88:61:af:bc:46:7b:56:
95:e5:1f:ac:dc:f6:37:14:20:e9:9b:7a:c6:52:48:
c8:9a:47:10:62:e1:de:a3:a8:07:0e:1a:c9:98:1b:
d8:d6:3e:be:9f:63:51:97:ca:1d:d7:51:e3:c5:37:
cb:ec:43:a1:2c:8f:f0:7f:0a:15:0f:ba:6d:f8:e1:
7d:55:6e:d6:8f:70:78:d9:13:5a:73:26:9b:b4:67:
9d:d7:a8:fd:91:d9:15:0b:5d:b0:b2:ed:71:ab:ac:
43:31:ce:8f:5c:10:2a:fb:b0:e2:1f:74:90:e5:4f:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:DC:DB:87:95:0A:BC:EE:C9:27:F2:F9:46:57:9F:32:A9:7E:AB
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:9f:f0:a1:f0:33:09:33:34:3d:44:84:e3:c6:b7:38:32:
de:b3:2e:61:68:67:52:de:70:75:37:76:94:4f:f2:74:67:5e:
3f:b7:ce:ea:0c:be:68:5e:e0:e9:9f:87:2d:72:4d:51:c7:78:
61:71:6f:8d:01:19:b3:75:65:1e:08:0e:61:f9:10:95:87:95:
bd:68:d0:20:59:2e:a7:82:f3:43:6b:a3:0a:97:c5:d3:37:7c:
d7:8c:c8:6c:c7:c6:dd:ae:82:03:50:aa:31:d4:60:f1:e5:f7:
fc:8b:1e:07:4a:d8:51:e6:82:b2:ca:76:3b:ef:76:ba:25:8b:
3a:32:e6:c6:fd:14:60:f4:6c:c4:c8:59:a9:d3:3a:20:ef:10:
16:c2:b5:67:64:a0:0d:2f:6b:56:af:9d:3e:35:c9:8d:f0:33:
28:94:70:55:b3:a1:59:83:d6:bc:b6:ca:ce:4f:27:e8:6c:54:
ce:58:e4:da:4b:b6:77:c7:0b:8e:e1:7d:90:ac:1e:0f:43:66:
db:6b:5a:3d:3c:c2:bc:ca:ef:2d:36:0d:1d:00:89:0c:b0:b7:
04:a7:2b:0a:c8:cd:96:e2:67:aa:c9:ed:e6:3c:b8:49:0a:cf:
b4:45:ee:91:57:49:ae:fd:97:c6:66:11:87:6d:be:ae:ac:74:
12:44:27:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVR8z8cCXY+CzjL9DsbHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjUwOTA3MDQwMDI3WhcNMjUwOTA4MDQwMDI3WjAzMTEwLwYDVQQD
Eyg1YWNkZGNkYjg3OTUwYWJjZWVjOTI3ZjJmOTQ2NTc5ZjMyYTk3ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L2KN4OqXmH2O9OyXoo18cTeCDR2
KoyZr6YW666u+9Ogr4od/U0DVkqYS/6W8klytmVqDXlTaZzllgo0FKFJH0scJEg6
REe9lyR/idIMLARZrmGcLMXaIE8B0bIatHnfi2yjtkmPhykCBnsaUo6I7jIXL3yN
fV+2jcyK9NwGNY7EOhh+rI1jQLodFAaXbIhhr7xGe1aV5R+s3PY3FCDpm3rGUkjI
mkcQYuHeo6gHDhrJmBvY1j6+n2NRl8od11HjxTfL7EOhLI/wfwoVD7pt+OF9VW7W
j3B42RNacyabtGed16j9kdkVC12wsu1xq6xDMc6PXBAq+7DiH3SQ5U/d/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrN3NuHlQq87skn8vlGV58yqX6rMB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd6f8KHw
MwkzND1EhOPGtzgy3rMuYWhnUt5wdTd2lE/ydGdeP7fO6gy+aF7g6Z+HLXJNUcd4
YXFvjQEZs3VlHggOYfkQlYeVvWjQIFkup4LzQ2ujCpfF0zd814zIbMfG3a6CA1Cq
MdRg8eX3/IseB0rYUeaCssp2O+92uiWLOjLmxv0UYPRsxMhZqdM6IO8QFsK1Z2Sg
DS9rVq+dPjXJjfAzKJRwVbOhWYPWvLbKzk8n6GxUzljk2ku2d8cLjuF9kKweD0Nm
22taPTzCvMrvLTYNHQCJDLC3BKcrCsjNluJnqsnt5jy4SQrPtEXukVdJrv2XxmYR
h22+rqx0EkQnZA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:14 2025 by rpki-client