Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: nBD7A1947ey82vMXvB2jQolhZI4tPw+nqHIxzr7MVl8=
Subject key identifier: 45:CE:74:0E:87:1D:B1:A4:7A:AF:62:2E:B7:81:07:44:34:89:D8:8B
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019A5074F07E46494A068A5D666BC5B1956F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 06FB
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: t8jZcRQvSoeUGfL/88esY1cArPMQ4t5MQ3//n8UYgnU=)
2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f0:7e:46:49:4a:06:8a:5d:66:6b:c5:b1:95:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=45ce740e871db1a47aaf622eb78107443489d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:a2:f6:12:0d:b3:24:40:2c:c3:20:0c:91:
29:d9:80:cf:f4:d9:68:f1:b4:1d:44:79:a5:39:cc:
8b:de:88:e6:4b:e2:aa:9d:ed:34:dd:b4:e9:dc:73:
e6:7d:e4:70:da:73:9e:a2:66:38:bc:b9:cf:f2:9c:
1b:39:41:83:6a:c5:11:0c:b0:02:4a:db:15:a1:a5:
e1:09:85:a8:aa:34:a1:6a:f5:d2:ba:6e:78:14:e1:
88:59:59:b4:40:9b:40:35:42:5e:71:1e:a4:f0:ac:
5f:75:f9:f1:e9:0a:dd:ba:04:ae:d5:78:a6:70:62:
50:22:bb:ed:db:c0:fc:5d:47:ef:c0:4a:a5:17:fc:
eb:d4:88:5b:93:a8:75:9b:aa:37:94:bd:03:40:ac:
e9:68:79:51:9c:fe:86:14:2e:7c:a0:4a:76:06:92:
a2:33:12:34:b0:24:77:66:03:f9:09:62:2c:59:f0:
b0:74:65:60:20:3a:ee:12:f7:35:6b:c5:4a:60:fc:
3d:e0:a4:98:ca:5b:b0:d9:90:6d:43:bc:d7:b5:c3:
fb:3b:30:51:a0:c3:e7:06:63:3f:df:d7:70:b7:60:
b8:19:98:43:f7:68:e1:e9:28:b1:2c:f2:d3:8e:8a:
8f:28:51:90:e1:53:d3:67:ae:37:47:72:6e:9a:fe:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:74:0E:87:1D:B1:A4:7A:AF:62:2E:B7:81:07:44:34:89:D8:8B
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:db:65:c1:0d:90:b9:6d:d0:c7:c1:7b:05:93:a8:ef:6c:
d4:47:6e:e1:09:c8:bc:f9:a3:18:f8:74:f4:80:4b:75:01:93:
9e:6f:e6:cb:55:85:f2:c7:3c:59:d4:d4:46:75:35:ac:61:69:
55:f0:6d:40:8b:12:6c:63:61:00:1d:c5:24:e3:80:56:03:82:
1e:24:a1:b1:ca:06:86:b3:2d:b9:5c:f9:87:92:f7:66:3e:5c:
0a:04:04:ed:18:01:d4:22:72:48:3f:69:c1:7d:b0:07:88:26:
a2:46:71:69:fd:01:f1:df:7f:1a:b9:3c:ca:ba:bd:ad:16:ff:
3f:34:2c:2e:93:4e:7f:7a:38:94:0e:f9:38:a3:69:b7:b8:9b:
1e:b7:64:1c:48:05:02:a0:cb:05:15:74:dd:f8:64:9c:95:79:
85:77:39:c0:4f:15:fd:97:c8:18:39:99:db:d6:be:0b:f1:13:
3c:5b:88:99:c7:6b:1f:24:15:74:c9:56:1e:ca:a2:51:88:f2:
00:01:02:be:5d:c8:9c:5a:70:b6:89:a4:9a:fd:c4:1e:42:88:
31:80:3b:03:25:b0:a0:86:29:3d:88:2a:46:dd:b3:c9:0d:0d:
48:eb:08:dd:0b:e2:b1:58:89:4b:bc:3b:a0:88:35:0a:1f:ec:
8b:cc:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:32:28 2025 by rpki-client