Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: Ji6dgefGGnNEFDIZzOWdK9G5aAuFlS5Zwx6CClMTudg=
Subject key identifier: 9C:DC:94:CC:79:83:37:B3:CC:F9:19:72:D8:E1:7D:E0:18:2A:C3:3B
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 01974EFC0889E3EF6247302AD2DA2A1B4B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1520
Signing time: Sun 08 Jun 2025 10:00:29 +0000
Manifest this update: Sun 08 Jun 2025 10:00:29 +0000
Manifest next update: Mon 09 Jun 2025 10:00:29 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: LakYGf7Duwd7GdftpwyHcFOo09kOYcRKpBnr5tVIh9M=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:08:89:e3:ef:62:47:30:2a:d2:da:2a:1b:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jun 8 10:00:29 2025 GMT
Not After : Jun 9 10:00:29 2025 GMT
Subject: CN=9cdc94cc798337b3ccf91972d8e17de0182ac33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:71:08:48:6d:b2:93:da:41:71:07:26:38:
03:ac:80:be:72:f3:eb:47:c3:30:cc:ab:da:08:34:
85:14:97:82:e2:73:3d:20:5e:6a:bc:1a:ca:e9:87:
5a:51:bd:70:67:6b:d0:57:fe:66:aa:c3:f8:67:79:
76:82:4d:8e:79:7d:93:70:50:c6:5d:7c:5d:26:cd:
22:a4:30:1b:42:5d:1f:03:22:59:55:61:a1:54:05:
ed:83:3a:78:aa:92:b2:8b:29:12:65:ba:3f:96:b3:
d1:b5:bf:36:5b:5d:27:01:fd:1f:60:1c:bd:25:6a:
3f:3d:38:2e:eb:e7:72:35:24:c3:9c:03:52:e3:89:
d8:3a:fd:41:d4:4a:b8:10:11:c3:aa:ad:5b:f1:0e:
7a:2f:43:e7:10:db:57:a1:83:46:21:15:a4:bc:33:
4a:f4:0f:1a:d0:ee:c2:5e:0f:5a:e0:4b:66:e6:79:
f5:31:24:9c:c0:cb:fd:6a:dd:41:50:10:00:8b:d0:
19:0d:96:dc:32:e0:44:b5:d8:83:2a:48:b2:38:b6:
9a:18:34:65:51:10:50:be:b8:a7:37:db:cd:aa:71:
41:07:14:aa:4e:8b:6f:ab:1f:57:5d:5e:71:99:ab:
ad:7c:6e:b5:3c:d3:62:4c:2d:b4:46:12:f7:86:9d:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:94:CC:79:83:37:B3:CC:F9:19:72:D8:E1:7D:E0:18:2A:C3:3B
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:84:02:6f:e8:ff:e0:02:ea:74:6e:35:12:ef:95:9f:af:a4:
81:a9:72:aa:98:2a:a5:ac:35:d5:fe:10:be:5e:5d:e9:31:7b:
78:2d:81:fa:f4:c6:b3:ee:fd:da:2e:7a:d2:e4:39:77:52:36:
51:97:0f:cc:50:f1:4a:88:90:05:84:9a:81:af:fc:be:8b:4a:
83:4a:55:84:4c:31:59:58:f3:0e:78:cb:bb:c0:8e:a2:7f:bf:
1f:d9:87:6d:1c:93:df:2b:8e:66:89:d2:ea:42:40:22:62:37:
81:ec:f8:56:29:70:69:26:bd:6e:0b:2f:70:3e:6f:d2:b3:78:
0a:f5:8e:22:35:bd:a2:e1:1b:e1:62:4a:31:c8:a0:f5:db:27:
e2:e8:13:d3:1a:e9:b6:26:e0:8b:7d:e4:05:39:9f:2d:a5:d6:
3a:64:33:79:c2:4a:39:c4:69:1b:39:88:e9:00:eb:17:3f:bb:
24:97:75:3a:68:be:1e:c3:32:d5:56:e6:ac:55:34:b7:5f:ae:
d5:a2:9a:df:af:df:64:29:e1:c7:d1:a9:69:03:87:c6:9d:eb:
55:6b:09:c4:25:a2:aa:7e:ae:52:b8:8e:cd:6d:f2:d8:ba:80:
31:db:84:9a:c9:37:80:3b:0b:fc:8f:00:22:fd:18:3a:96:5b:
4b:4b:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:26 2025 by rpki-client