
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: ZPsKmaxi4JjM4xPT9VJVU8MiLoZ9oV9DMVopzlMx3Gw=
Subject key identifier: 85:B5:B8:33:6E:14:E3:B3:37:64:15:60:E5:59:62:63:0C:64:93:18
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01987F793A6BCD0FC81E251639762AA3504E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0345
Signing time: Wed 06 Aug 2025 13:01:47 +0000
Manifest this update: Wed 06 Aug 2025 13:01:47 +0000
Manifest next update: Thu 07 Aug 2025 13:01:47 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: 1nwsDV76hssX+6kAXOWQgDI00YZEIriq05zS9lPdnrQ=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:3a:6b:cd:0f:c8:1e:25:16:39:76:2a:a3:50:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Aug 6 13:01:47 2025 GMT
Not After : Aug 7 13:01:47 2025 GMT
Subject: CN=85b5b8336e14e3b337641560e55962630c649318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:da:e5:85:84:30:8d:d6:f1:51:5a:c5:9c:
ee:59:55:02:af:b7:7e:07:e4:1c:df:82:a1:32:77:
c2:e3:44:38:52:36:60:0e:bc:53:ab:b7:a7:07:d9:
70:d9:64:ba:3e:52:0e:65:02:05:49:39:e3:c6:ce:
bb:58:a2:a3:df:ec:6e:00:54:ea:ff:f1:17:b3:98:
bd:ad:00:bb:39:94:94:6e:8e:95:a6:ce:be:1a:3e:
76:f6:ce:ac:51:c6:e7:90:cc:15:78:d9:c7:12:8f:
8d:13:ce:07:91:5b:36:4a:9e:98:f0:b2:92:9c:06:
b5:ca:f6:0e:0c:4e:9e:5a:6a:42:ba:ac:76:85:05:
70:21:e1:3e:8a:e8:d5:d9:cf:12:be:fd:4a:70:82:
3d:1e:e1:74:6c:ab:9c:3b:db:6c:20:f7:eb:bd:75:
2b:46:fc:23:3e:09:0c:98:6d:32:74:c3:da:f2:a6:
86:46:5e:10:ba:56:52:93:ca:26:01:cc:a2:4a:f1:
f3:cd:e0:93:4c:b1:31:2f:cd:f5:1d:74:70:49:0e:
d6:67:51:e8:71:98:f9:86:5b:d0:3d:a8:b4:b1:9c:
4b:12:8a:17:20:c6:f8:04:09:00:3c:ba:8d:84:75:
16:a2:24:e1:3d:26:f4:6f:29:6f:03:e4:b6:7a:d4:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:B8:33:6E:14:E3:B3:37:64:15:60:E5:59:62:63:0C:64:93:18
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b0:d8:93:40:08:98:64:99:0f:f6:fe:02:eb:cf:5a:84:c1:
57:53:27:97:08:56:5b:2e:d7:0c:32:0b:ac:8d:f2:60:4d:28:
e2:e7:b0:28:8b:46:f7:b7:a8:cb:a7:cb:69:89:4b:bb:33:16:
87:ff:6e:31:78:af:28:9f:ad:84:78:e1:d2:ab:97:fd:31:b6:
24:92:62:ec:54:2c:9d:14:99:16:ae:34:06:46:5b:f0:4c:01:
9b:f4:cb:33:f3:1a:23:5a:e5:d2:b9:a3:38:ac:79:1b:6b:cd:
7e:e5:ac:9c:58:31:51:13:ff:74:2c:97:38:76:45:b7:8b:c8:
90:23:b4:0b:53:7b:72:57:85:3b:44:87:43:fa:b4:ae:73:7d:
8b:45:21:3a:f8:ca:e4:d7:ac:82:b9:6a:07:09:1b:b7:df:6e:
03:27:55:5f:1d:c7:8a:0e:05:07:7a:7e:2d:2e:55:b9:1b:4e:
59:92:d0:2a:4b:4e:09:40:0b:95:0e:c7:16:e7:cc:fa:d5:9c:
59:98:83:2e:ea:16:eb:bd:ce:8f:bd:8a:1d:2c:fe:2d:80:e2:
b2:49:ab:be:1a:19:da:3e:0d:ba:4e:5e:97:99:e4:00:1e:d3:
29:67:02:6b:eb:4d:4f:51:8c:41:5b:44:18:37:25:29:9a:48:
af:56:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:54 2025 by rpki-client