Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: 9F1s4ip2uYzuwtlVxHaCV1lHTn0Use78VZ3rWUpr8rk=
Subject key identifier: 33:24:84:46:D8:18:5C:6F:23:C8:37:FA:08:E9:6C:CF:F1:22:05:D0
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01988CFCEDC1EFC3E7ACAFD8951AB7B3BB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 04:00:42 +0000
Manifest this update: Sat 09 Aug 2025 04:00:42 +0000
Manifest next update: Sun 10 Aug 2025 04:00:42 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: DxFEkwK4sWAhJnDuj3/LQfCw8BMB90IE0ADYHivNJYg=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:ed:c1:ef:c3:e7:ac:af:d8:95:1a:b7:b3:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Aug 9 04:00:42 2025 GMT
Not After : Aug 10 04:00:42 2025 GMT
Subject: CN=33248446d8185c6f23c837fa08e96ccff12205d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:2d:86:20:dc:d4:79:bd:19:28:3d:b3:7a:
2f:19:70:d1:05:a3:09:df:ab:2f:1b:d0:b3:b2:91:
8e:31:53:04:68:19:7c:fe:61:bd:44:f7:78:2d:de:
d9:6b:40:21:1b:d6:4b:d4:c9:de:5f:5a:4e:a1:f0:
91:b8:74:7d:28:cb:88:40:7c:63:f1:29:fd:4d:a2:
93:f2:c4:42:1f:77:11:bb:dd:cf:8a:9e:79:27:0a:
56:a7:7e:81:15:89:50:35:c3:88:17:c2:f7:89:9a:
62:aa:9d:4b:e1:8d:6f:13:bb:5f:e9:4d:25:a1:3e:
f6:3d:d5:2c:4c:a8:67:5f:5f:d2:71:c1:17:62:69:
4e:af:e6:08:82:73:7d:cd:40:32:c0:57:5f:94:73:
3c:70:f2:fc:27:0a:47:c4:20:d6:9f:5a:75:9d:0a:
1d:99:82:72:cf:97:84:54:71:bd:86:e1:5b:1a:aa:
7d:88:ad:93:37:17:8f:ea:34:77:5e:ae:0d:03:b3:
38:d0:2b:c7:eb:9d:4b:94:d7:9f:bb:6d:8d:86:e5:
9a:bc:4a:df:59:a4:31:c3:d6:f4:e4:95:d2:d0:7c:
1a:3f:7e:c9:51:59:e7:b0:da:c9:22:e4:b8:e4:aa:
93:fb:49:6c:dd:54:0a:66:a2:35:40:92:2d:1b:0b:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:84:46:D8:18:5C:6F:23:C8:37:FA:08:E9:6C:CF:F1:22:05:D0
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:25:b5:65:2c:97:6f:1a:ad:c6:ab:5a:99:1d:40:4b:0d:68:
a6:be:2c:f4:85:3f:cb:67:44:c5:a8:28:29:76:1b:2f:8a:38:
78:80:6f:35:eb:83:b6:fe:49:9e:9f:7b:3b:9c:3d:bc:8f:03:
d8:65:68:56:51:12:47:96:bf:5e:0b:0a:04:bb:ac:c7:b8:43:
65:0f:a9:20:d7:91:d9:c6:e5:c5:24:f1:3e:b7:13:8a:3c:3a:
92:f1:8e:1d:b0:45:6b:7c:7b:dd:2b:d9:bb:d7:c1:a1:15:4a:
c1:01:34:c6:e9:4c:71:05:90:cd:47:21:11:32:53:de:7f:61:
49:de:53:60:ea:74:51:62:d5:b2:38:f1:12:88:67:91:28:27:
ff:0c:63:ae:0b:6f:1f:59:e5:a2:82:93:3f:96:00:ae:5e:ef:
be:a1:38:ed:0a:16:03:03:24:31:76:03:64:71:6c:1f:c3:af:
46:68:08:44:93:d1:a7:43:3c:6f:e4:f4:69:21:cf:61:5b:d3:
73:f6:f5:16:e1:00:77:21:4b:b1:2d:f6:78:73:26:b6:06:6f:
1d:39:45:5d:fc:57:b8:e1:d0:93:42:69:93:73:0d:3c:41:40:
48:0c:f0:e1:5b:e9:f2:d4:0e:8f:af:1c:f7:74:4b:19:b0:74:
7b:7c:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:08 2025 by rpki-client