Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: mGSYJkLmp1z8pJWOLh+0DJ1pczdbtSskAjHuX6OtV84=
Subject key identifier: FB:A7:2F:46:6A:11:9F:B8:54:05:9D:0A:9F:85:B8:B9:B8:95:3F:7E
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 019873E3B0CE73F64F031BD38A9EF39F7251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:38 +0000
Manifest this update: Mon 04 Aug 2025 07:02:38 +0000
Manifest next update: Tue 05 Aug 2025 07:02:38 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: qbIPQ/GL6FwNONsZv0EFX0OXCcs/hIIn4Xsd+L9j93Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b0:ce:73:f6:4f:03:1b:d3:8a:9e:f3:9f:72:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Aug 4 07:02:38 2025 GMT
Not After : Aug 5 07:02:38 2025 GMT
Subject: CN=fba72f466a119fb854059d0a9f85b8b9b8953f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:71:a1:73:e8:4b:e7:7b:44:33:50:fd:60:
c1:f4:80:94:96:bb:1b:39:bb:0f:0a:71:af:72:47:
22:be:f5:8e:ea:e7:f1:e7:cb:9e:c6:99:7b:c1:0e:
99:91:a2:39:5d:eb:a8:14:35:1f:7a:63:7e:83:41:
07:72:01:43:d9:74:e1:4e:ed:a9:81:1e:99:af:9c:
24:3e:28:7d:7b:93:1a:4e:c7:97:96:c2:13:80:e6:
4a:b8:e2:9c:88:32:af:59:b4:f8:86:04:aa:9c:cd:
6d:e6:ce:1d:0f:55:14:b9:f7:02:24:d4:18:dd:b6:
ec:0b:65:4b:88:ac:68:07:4b:b8:31:b6:9a:13:8a:
7c:38:d4:8e:4e:6b:d2:9c:60:5f:8f:c4:af:6f:d1:
53:64:26:c6:1f:19:8a:04:f9:70:ad:65:f2:01:99:
e3:68:9c:8d:76:14:16:99:8b:9d:5f:c9:3e:20:c0:
5b:4a:21:22:59:d8:60:37:4d:1b:52:41:ea:13:3b:
5a:c3:2b:d0:71:c4:c1:d0:40:fa:e8:1c:3e:bb:33:
50:2e:41:e8:3d:28:3c:02:50:74:d9:39:ad:86:82:
ff:b8:9f:7f:39:0a:1c:e4:1e:87:9f:f5:8e:fd:60:
bb:60:64:fa:e8:4a:7a:6e:89:ce:74:a5:a3:a7:61:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:2F:46:6A:11:9F:B8:54:05:9D:0A:9F:85:B8:B9:B8:95:3F:7E
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:88:52:ae:c2:85:c9:e0:cb:c5:48:5b:e6:db:ca:a4:cc:14:
0f:3c:5a:3e:52:d3:da:1f:7b:8b:26:46:9f:e6:31:80:32:e1:
47:66:91:70:97:a6:a7:42:59:10:3f:1e:30:d1:03:99:61:8d:
fb:77:1c:07:26:6d:ae:21:d8:31:98:60:be:bd:35:b4:ae:1e:
e8:ba:20:e5:18:b6:4d:34:99:c7:b4:95:e9:d5:2c:3e:7d:7e:
81:9b:64:f6:b8:d0:dc:84:cf:ee:c7:5c:1e:17:bf:99:92:69:
4c:ce:c6:7f:01:58:25:ef:31:71:2d:42:3d:b0:65:2a:d9:b3:
56:87:2f:12:1b:b5:c8:d2:fa:81:6d:74:28:91:b8:f4:23:05:
d9:a8:b8:14:10:ff:15:41:4c:22:09:65:01:e9:3d:0c:75:de:
e4:9d:06:3f:c6:12:dc:65:53:f5:77:b3:d6:9e:d0:39:68:72:
33:9c:d0:be:6b:9e:8d:c4:ec:c6:6f:63:3e:35:f0:3b:f2:fd:
b6:d4:ba:fc:fc:3b:db:95:37:50:32:e6:8c:e6:6d:07:5d:59:
8c:9e:d7:0b:f3:c0:67:60:4a:59:b0:09:4c:fa:5c:49:4d:86:
cc:ee:96:f3:32:41:67:52:c7:41:11:50:5e:dc:81:04:57:95:
3f:19:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:34 2025 by rpki-client