Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: 8lgiiIx3PLcCT+jAof3HE+y1cCAQBzxus5GfInImqQs=
Subject key identifier: 1D:1F:94:FE:1F:63:FE:33:9C:E5:9E:17:90:92:44:36:80:8D:AF:16
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019A7149FE91BB9AD3EBD55B933001010F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 070C
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: X9WW/wnKQhDgtUzp+uHrdH2fhnOLWB3xy7Z7Vu7wUbQ=)
2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fe:91:bb:9a:d3:eb:d5:5b:93:30:01:01:0f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=1d1f94fe1f63fe339ce59e1790924436808daf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:f1:20:b3:a5:2f:56:e3:a5:fa:00:1e:b5:
b3:9c:7a:1c:a8:af:13:6c:18:98:ba:19:00:dc:6f:
7d:d6:3b:f0:7c:1b:16:c3:91:8e:2a:fe:5c:eb:57:
d4:b8:33:0b:b6:03:89:53:3f:bb:5c:e3:d8:40:99:
a0:c6:84:56:12:d4:28:64:fb:f4:6b:4b:64:7a:45:
c2:c3:1b:03:1d:13:b9:9f:9d:65:70:1f:f7:46:01:
39:55:0c:58:76:da:fb:13:43:04:4f:fa:9a:76:c9:
bf:fe:f1:27:c1:de:9b:2e:e7:59:8f:29:44:2f:f4:
2d:58:48:3d:22:ff:c0:09:c5:af:08:5c:21:54:ee:
3a:18:51:5d:c2:cd:d2:f4:fd:6f:0f:dc:d4:ab:72:
af:51:4f:80:06:6d:b9:38:a7:bb:b9:85:c0:2b:fe:
a6:8d:fd:9f:9e:08:88:41:a2:18:20:33:4a:d2:94:
d2:e3:79:ef:54:f6:b7:2a:e4:d3:dd:13:b0:76:8c:
3a:d7:50:fd:ca:bd:c3:9f:86:eb:f7:ac:d1:c0:95:
30:2e:52:98:60:e1:01:f5:e6:26:6d:9d:d4:da:bc:
7f:3c:3a:7c:cf:97:05:7e:24:db:e8:df:bd:98:f4:
fe:62:7c:bf:f1:f5:9e:9b:be:17:a0:dd:4e:29:cf:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:94:FE:1F:63:FE:33:9C:E5:9E:17:90:92:44:36:80:8D:AF:16
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:42:9b:50:d6:ed:3c:d3:af:82:a9:3d:82:b4:7d:01:33:
e4:57:5b:29:58:3c:55:35:26:76:1f:21:d2:52:6d:6c:c7:1f:
c5:62:aa:c1:4f:d8:24:25:d7:44:91:49:7c:5f:39:c8:c8:50:
bc:e1:20:37:38:7e:42:2b:21:db:d5:db:3c:03:89:95:78:71:
eb:3f:a4:11:fa:d3:f1:3f:c8:e2:c3:bb:2b:4b:08:32:ed:f6:
e7:4e:7a:a0:1c:39:08:43:d5:e3:95:65:ab:ce:3a:53:d8:b6:
79:96:c0:7e:49:cf:b8:1a:e4:55:1d:b7:9c:7e:61:cb:cb:dd:
30:17:a8:95:ff:be:a9:d2:5a:1f:7f:bd:91:05:f2:be:64:c0:
76:de:a5:84:56:01:36:3b:b9:a3:1c:1c:62:32:f1:2e:a5:4b:
3c:65:c6:93:64:31:f5:12:6d:8d:8e:9c:72:2f:66:48:8d:17:
44:41:85:e4:e0:83:f8:ae:22:74:2e:e2:05:6e:ba:0d:b4:cc:
b7:42:4e:cf:69:be:13:3e:c6:8a:5f:ee:c4:f3:ae:a3:ef:56:
18:ae:78:ce:6f:07:97:e7:cc:29:29:13:20:ee:ab:94:b1:41:
e8:cb:eb:0e:00:c1:8a:0a:2e:c9:34:85:94:89:f2:e6:31:4b:
b6:28:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client