Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: MuGDV5u3GTsoiODTuAmPIOnGhNHR9TwAeCByN4/rhvM=
Subject key identifier: 63:E1:EB:27:96:73:BB:33:94:E9:B7:37:B4:57:93:EE:17:27:E4:8A
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0199233137529B0B3170A2664DB6CABAB80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 065F
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: I/+3/YZy99k3wbhUa/bShPLUOQJpv9FoLY5S9CyAN+o=)
2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:37:52:9b:0b:31:70:a2:66:4d:b6:ca:ba:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=63e1eb279673bb3394e9b737b45793ee1727e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:4d:70:4e:64:7d:b6:d1:19:61:80:50:51:
b1:6d:40:eb:6a:0d:40:99:8a:8e:62:b4:ce:81:44:
db:66:0d:b5:96:4e:5b:62:69:31:ad:19:7c:f5:e0:
fb:46:4c:f9:3f:72:a7:49:ff:b4:a8:25:89:ef:19:
ef:38:1d:b0:88:11:67:e4:5b:5b:62:f8:0f:64:2e:
6f:63:58:52:f8:bc:10:ca:de:6b:88:89:eb:4a:7d:
67:bc:61:c3:4d:cc:a8:de:62:3f:49:66:ca:d5:ee:
87:07:ba:c3:9e:23:aa:05:8b:e9:36:a1:20:66:07:
2b:bc:54:dc:31:fe:1b:60:da:12:cf:91:94:1d:44:
87:6a:5c:73:25:12:48:c9:fd:9f:02:43:5d:48:7e:
c9:ae:74:da:a0:5a:88:43:0e:52:74:cd:38:28:8a:
2e:2d:c3:cc:66:96:33:d5:76:1b:cf:80:2f:6c:07:
8c:8b:55:ad:01:ac:82:f1:78:38:1b:6d:c0:96:bd:
0f:53:2a:6e:44:6f:10:8e:24:b6:b3:a3:e2:19:42:
55:1d:7e:e3:45:d1:b1:10:d4:31:78:a3:7e:2a:d3:
67:04:7c:38:4c:ff:e8:ee:57:80:16:f4:ce:92:be:
54:af:9c:26:b8:60:9d:9e:bc:e8:33:84:87:78:88:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:EB:27:96:73:BB:33:94:E9:B7:37:B4:57:93:EE:17:27:E4:8A
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fe:38:7b:59:4c:2b:93:cc:a3:10:a5:39:ec:86:26:28:18:
71:69:79:ca:75:6b:6f:ca:df:d1:95:76:f1:3d:87:c7:31:6d:
90:a7:6b:6e:69:4c:14:0b:70:9a:be:2e:08:32:7e:c3:b9:02:
c1:89:14:f1:27:c2:99:a0:19:84:fa:c5:55:fd:00:52:f1:71:
ce:6b:45:ad:70:3c:4f:82:a0:4d:0e:7f:0f:41:f6:09:5e:e7:
66:6c:0f:19:3d:fc:55:11:3a:2c:32:3e:01:28:92:95:e2:6c:
44:a1:1b:d5:33:74:ea:a2:64:ec:e4:58:3d:3a:51:13:ac:b8:
b0:8c:84:e5:7c:e1:65:9b:5c:b0:4b:34:5d:fd:38:2b:eb:36:
6e:0a:fd:3a:fc:f5:f3:12:e1:d2:88:9c:42:24:0c:5c:13:b2:
9b:ba:70:a1:0a:a5:a1:c4:2b:c5:a7:a7:08:49:19:43:0a:fc:
33:01:8e:a6:0e:5b:30:ee:f6:70:41:fc:e0:13:e8:58:ea:bf:
65:45:e0:ee:91:be:04:56:4d:0e:46:87:8c:f1:77:16:55:7e:
74:c0:4a:2d:02:05:73:c1:0a:4e:fa:b9:47:0b:70:e0:60:ad:
d7:d4:8e:37:54:d1:88:b4:b8:2a:b7:a8:19:0e:ce:58:f2:f3:
87:de:c7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMTdSmwsxcKJmTbbKurgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjUwOTA3MDgwMDUxWhcNMjUwOTA4MDgwMDUxWjAzMTEwLwYDVQQD
Eyg2M2UxZWIyNzk2NzNiYjMzOTRlOWI3MzdiNDU3OTNlZTE3MjdlNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS1NcE5kfbbRGWGAUFGxbUDrag1A
mYqOYrTOgUTbZg21lk5bYmkxrRl89eD7Rkz5P3KnSf+0qCWJ7xnvOB2wiBFn5Ftb
YvgPZC5vY1hS+LwQyt5riInrSn1nvGHDTcyo3mI/SWbK1e6HB7rDniOqBYvpNqEg
ZgcrvFTcMf4bYNoSz5GUHUSHalxzJRJIyf2fAkNdSH7JrnTaoFqIQw5SdM04KIou
LcPMZpYz1XYbz4AvbAeMi1WtAayC8Xg4G23Alr0PUypuRG8QjiS2s6PiGUJVHX7j
RdGxENQxeKN+KtNnBHw4TP/o7leAFvTOkr5Ur5wmuGCdnrzoM4SHeIhHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPh6yeWc7szlOm3N7RXk+4XJ+SKMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/44e1lM
K5PMoxClOeyGJigYcWl5ynVrb8rf0ZV28T2HxzFtkKdrbmlMFAtwmr4uCDJ+w7kC
wYkU8SfCmaAZhPrFVf0AUvFxzmtFrXA8T4KgTQ5/D0H2CV7nZmwPGT38VRE6LDI+
ASiSleJsRKEb1TN06qJk7ORYPTpRE6y4sIyE5XzhZZtcsEs0Xf04K+s2bgr9Ovz1
8xLh0oicQiQMXBOym7pwoQqlocQrxaenCEkZQwr8MwGOpg5bMO72cEH84BPoWOq/
ZUXg7pG+BFZNDkaHjPF3FlV+dMBKLQIFc8EKTvq5Rwtw4GCt19SON1TRiLS4Kreo
GQ7OWPLzh97HBg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:28 2025 by rpki-client