Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: DJiWZ734rhnFSYVAufwSMaPtVYQksPe6rUiH70ZzwM8=
Subject key identifier: 5F:7C:04:87:06:02:74:6D:DC:48:9C:21:D4:14:49:6D:87:17:64:57
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019874F50C862D2B30451ECAF030E2325163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0604
Signing time: Mon 04 Aug 2025 12:01:12 +0000
Manifest this update: Mon 04 Aug 2025 12:01:12 +0000
Manifest next update: Tue 05 Aug 2025 12:01:12 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: tm1SsA+2IWSCoxMGc1y9tNUb5XKyemQNdTHNM0lvODI=)
2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:0c:86:2d:2b:30:45:1e:ca:f0:30:e2:32:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Aug 4 12:01:12 2025 GMT
Not After : Aug 5 12:01:12 2025 GMT
Subject: CN=5f7c04870602746ddc489c21d414496d87176457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:33:c9:42:a9:32:97:9f:98:62:f6:11:66:
67:b4:b1:76:44:a8:db:49:95:4a:8e:b6:97:c8:5b:
e9:9f:02:55:32:d6:71:78:1b:75:49:2c:58:cf:e0:
49:44:1a:64:2f:79:dc:9b:cc:cc:aa:3f:88:33:f5:
43:9b:1a:9e:42:31:56:33:32:e1:61:00:4e:7e:2a:
75:75:9d:fe:38:d0:0f:bd:0a:73:62:3a:e9:09:51:
95:af:00:62:df:06:56:12:d5:27:e9:92:ef:e0:90:
fa:d9:8e:b4:7f:3f:bc:c0:cb:33:a3:8c:fb:19:38:
72:d0:c6:3d:bf:97:d8:85:bd:62:79:30:78:89:ef:
0e:7a:99:b7:a8:3e:9c:64:b6:dc:d8:7c:ed:47:d1:
7b:45:1a:f2:24:e9:ff:b9:02:87:94:8c:30:04:c0:
aa:da:73:56:62:c4:7c:f0:13:da:6d:8a:e3:74:5d:
d7:92:17:25:c1:27:bf:42:90:3b:64:aa:88:f3:a9:
82:58:2f:af:0e:6b:3b:b8:e8:01:86:10:11:54:31:
3f:eb:8c:8c:01:8d:36:19:21:00:3b:a6:60:35:ae:
15:de:0e:a4:c9:9a:a8:e1:68:5d:09:86:cc:79:43:
66:c3:4f:f4:22:39:15:cc:ce:93:da:a0:41:ab:71:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:04:87:06:02:74:6D:DC:48:9C:21:D4:14:49:6D:87:17:64:57
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:14:bc:25:af:79:b0:4a:61:0c:a9:66:7b:93:08:ed:cb:
31:2d:83:c1:55:a2:bf:8f:63:15:9a:eb:b0:b8:ab:bc:c6:15:
fc:af:9e:8e:9a:9a:85:b3:1f:6c:32:0c:93:60:e3:0b:ea:60:
00:41:ad:8c:52:05:54:25:a1:13:6b:41:64:2b:a7:97:0e:52:
c2:6c:a5:d4:91:5f:45:01:4e:10:f6:a2:b6:40:8e:a5:11:30:
93:f3:33:87:8d:5a:ee:a8:50:5a:76:f1:5d:c4:51:26:20:67:
6d:95:44:79:0a:05:e1:5a:95:01:a0:34:4e:c3:3a:e2:7c:82:
d3:40:2a:57:64:42:6b:cf:61:5a:a6:d3:34:54:79:6d:66:d1:
63:e6:fa:7e:42:e9:be:6b:d4:ca:ac:2b:5c:6f:0d:28:76:b8:
76:8a:fc:c7:8a:11:2f:76:75:2a:2a:6c:7f:c2:83:b1:75:b3:
0d:aa:f0:43:c8:f7:95:1a:68:98:c1:95:c1:f2:70:22:3f:0a:
cb:0d:c5:64:ac:47:a4:b3:2a:72:b2:01:44:08:fc:d3:81:e9:
ea:33:4c:61:1c:41:fe:d8:32:f4:a3:e7:c0:f7:3a:69:d7:a4:
57:d0:84:80:13:c1:97:de:7f:37:0d:04:90:fd:a3:d5:18:a4:
76:2c:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:02 2025 by rpki-client