Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: 2MmHveNkIc+Sq7S+rduevEYPut2/QQSDSpYpodUNqqE=
Subject key identifier: FA:C3:C1:AC:95:DD:02:06:16:CF:89:B1:DE:4A:CA:70:4C:80:04:E1
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019A4EF577B3E9B5A87F19DA2E86F5A37393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0435
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: /JGQ7RIussI6KF4CwVN0WreNIGRhS5GBmiDne4zSHZ0=)
2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:77:b3:e9:b5:a8:7f:19:da:2e:86:f5:a3:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=fac3c1ac95dd020616cf89b1de4aca704c8004e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:9f:22:d9:5f:f1:64:c7:3d:c8:58:17:64:
c2:a8:de:2a:56:87:95:a4:80:41:33:29:60:8a:66:
d9:fc:24:94:d4:ea:8c:b6:b8:67:be:d2:54:65:85:
2f:cc:58:c3:44:57:b5:ae:99:4e:f5:57:87:a2:50:
0c:31:11:08:eb:8f:1c:5e:3e:13:e1:95:c1:2f:d8:
f4:d2:21:7b:5e:23:82:16:69:0e:4e:6e:1f:4d:f2:
b9:45:b8:1a:f3:af:e6:ac:5f:2e:e3:17:04:b4:0a:
72:9f:6e:47:61:07:ff:7b:6f:d6:82:9e:bb:1f:2b:
b8:50:7d:e2:40:97:76:70:83:b5:2a:42:da:1c:04:
00:ae:36:fa:6f:49:f9:bc:90:d6:79:ce:3b:9e:92:
f4:15:5e:bd:b5:3a:a4:e8:07:37:bb:31:9d:51:fd:
7d:4a:e6:d8:5c:41:e3:c3:28:98:56:b4:f1:1b:0b:
b7:43:8b:80:ec:07:0c:d4:39:a1:66:7d:da:79:57:
67:ea:33:38:fe:ee:ab:06:88:ed:b0:67:b1:4b:6d:
44:34:96:ab:9d:7f:c1:5a:ed:05:8c:fe:d6:d0:30:
5e:1f:10:1a:53:1f:7a:30:44:35:be:3d:e3:5d:12:
1e:66:1f:97:3c:73:44:70:44:da:7c:a9:20:f3:bd:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:C1:AC:95:DD:02:06:16:CF:89:B1:DE:4A:CA:70:4C:80:04:E1
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:f9:0b:ea:e1:18:60:47:ab:67:81:bd:02:1c:10:c1:9f:
d3:e6:77:b0:f4:ca:cc:2f:2e:67:15:36:59:55:03:71:5d:22:
5b:cf:d5:7f:76:7d:88:04:d9:4e:e4:81:ef:4a:b3:6a:68:2e:
9b:14:52:b6:f4:2a:f4:1b:9c:b5:49:c1:36:47:d4:a0:a0:67:
8a:e3:b5:fa:3f:04:c2:12:9c:b9:dd:1a:c5:f1:86:09:7e:a1:
43:75:1b:dd:00:b8:7a:90:70:96:dd:fc:a4:07:5e:58:d9:9a:
d7:04:e1:0d:f2:cf:2a:5c:1d:a3:14:34:42:46:83:9d:20:88:
ab:83:1a:2f:c6:f9:e8:4c:eb:10:7e:fd:c8:ca:a1:26:26:d5:
b3:86:23:c9:98:52:22:8c:7d:4c:36:1e:5b:1e:ae:5f:9c:9e:
31:a5:ea:70:9d:41:29:10:01:44:34:67:db:5f:d0:7e:72:9d:
3c:c3:61:0f:b7:97:de:1b:e0:4e:4a:ab:46:88:c7:f9:b3:17:
82:4e:ae:0a:07:45:ca:d6:99:3a:c4:fd:da:8d:b6:f2:f5:be:
22:9e:54:a7:e3:15:e4:b1:bf:a6:30:09:fa:ff:94:dc:8c:8d:
40:62:fb:20:03:09:85:88:1d:62:c5:4e:33:a6:c9:2c:03:58:
a0:d8:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:21 2025 by rpki-client