Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: seuj3MQSrzTb44A/mGdEouoKZqmWFGRJikBxbWGNHQI=
Subject key identifier: 85:A9:6A:DB:9B:7E:B6:00:A2:BE:D6:9E:22:51:FB:89:40:2D:B8:85
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01976884F6D939EFA97E6CC9B78ACA9CC850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0579
Signing time: Fri 13 Jun 2025 09:00:33 +0000
Manifest this update: Fri 13 Jun 2025 09:00:33 +0000
Manifest next update: Sat 14 Jun 2025 09:00:33 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: cJuxH7ST3bzKUQD5ksE8XqP41QbNfGeSveThzedobyw=)
2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f6:d9:39:ef:a9:7e:6c:c9:b7:8a:ca:9c:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jun 13 09:00:33 2025 GMT
Not After : Jun 14 09:00:33 2025 GMT
Subject: CN=85a96adb9b7eb600a2bed69e2251fb89402db885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:dc:da:db:1c:6b:04:b3:a6:44:dc:4e:10:48:
34:eb:76:2a:7d:be:80:29:a0:87:83:3b:ad:2d:3e:
af:d9:1e:71:08:c6:56:1d:99:9b:63:9a:48:ad:66:
eb:bd:f0:2a:a3:d7:f2:d4:d4:8a:85:57:e4:ef:b0:
37:b3:1b:83:28:aa:00:30:2f:f3:c7:60:1c:a6:0f:
24:69:8b:21:45:7c:d6:ba:af:59:8e:ae:c7:5f:a8:
88:24:24:a5:95:d5:59:4f:ee:c0:aa:f6:51:d1:b2:
38:17:0e:2a:35:22:13:8d:33:65:94:33:18:cf:22:
38:9e:aa:2f:ae:9c:6e:ee:ca:36:8e:48:51:4c:dd:
e0:a3:5b:b1:e8:29:65:c9:08:81:92:a1:d6:3e:29:
58:83:58:50:a8:39:ab:2a:4c:a6:81:12:a6:cb:14:
46:10:09:50:94:fe:ba:78:53:7e:10:66:d4:12:92:
76:1b:7f:dc:20:29:fb:0a:73:eb:a2:a6:96:42:83:
77:62:fb:c4:4a:db:b1:53:09:c2:79:e7:5e:59:e4:
9d:b6:bf:64:7e:34:16:a2:19:e8:62:41:fa:c4:a7:
7e:5b:36:76:13:1a:90:43:7a:66:37:a8:b1:97:59:
3d:df:26:04:43:0e:82:3a:75:ab:ce:e4:e0:20:96:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:6A:DB:9B:7E:B6:00:A2:BE:D6:9E:22:51:FB:89:40:2D:B8:85
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:43:91:65:91:2f:fa:2d:b0:22:8c:32:d3:13:0f:66:b5:e7:
47:2c:b5:32:5d:ed:0b:f3:50:41:9b:ba:f0:23:f8:ac:84:f0:
1d:21:5a:3b:76:23:11:2a:13:33:b1:d7:3a:26:83:c7:7b:48:
5d:d9:47:98:52:31:5c:dc:05:40:a7:f3:ea:d5:67:85:56:c3:
07:f3:c6:94:71:04:0c:92:55:0d:aa:97:e1:16:a6:1c:bd:71:
51:a1:3b:2f:f1:9d:76:28:42:a4:ae:81:10:80:95:90:0b:fa:
be:d8:b0:c1:d4:d8:0a:c3:ce:da:82:73:ac:29:fc:8a:39:f8:
fa:f9:69:06:3b:4b:2b:42:7d:7b:db:63:ea:32:b1:7a:f4:5e:
6a:d3:fa:42:28:ae:ae:0e:23:f7:f0:5a:79:9b:b0:a3:74:fe:
49:13:ec:39:68:8e:13:f4:ad:21:8b:cd:a9:9d:81:5d:cd:0a:
f3:05:6b:f3:22:7b:bb:e2:95:35:f4:f1:26:cb:70:90:cc:f0:
47:cb:45:25:e2:b3:de:cd:52:e3:d8:21:cf:1c:2c:d5:cb:06:
32:10:01:9c:db:6b:18:4b:3a:bc:6c:bf:b3:e8:c4:96:a2:2d:
99:32:6b:32:c7:df:a0:55:a2:3c:26:12:7c:bf:77:7b:75:2e:
58:87:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:45 2025 by rpki-client