Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: LNVTPJbxfEMX3PbPaB+EBxGJfWUo22pmyHhnJttmWNU=
Subject key identifier: FD:7B:1F:14:9B:34:FE:5B:8F:57:E2:0B:31:84:A1:E3:2F:57:A9:A1
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0199FB7CBFF32127D16676F778D1953AA045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 06CF
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: OfLDhojokOL4zJFt7TDgteHTgrmohTWQDY9Qk1tmSM8=)
2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bf:f3:21:27:d1:66:76:f7:78:d1:95:3a:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=fd7b1f149b34fe5b8f57e20b3184a1e32f57a9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:c6:e0:3a:c7:14:81:32:6b:c9:b2:f0:e1:
78:9f:6d:78:d8:57:69:bc:2a:b5:ec:23:e1:12:d4:
14:07:ec:e9:7a:6c:8a:e0:c2:18:a4:b4:54:89:c8:
c8:44:f5:04:d5:56:fa:07:57:27:c0:39:e0:ff:39:
bf:15:dd:83:e2:db:27:40:82:8a:73:d2:3b:a1:34:
08:40:16:0e:c4:15:ff:48:81:38:8b:97:69:d4:ae:
33:42:5c:fd:90:bf:03:ee:46:9c:60:3e:d4:08:85:
9b:85:20:ab:29:39:8a:22:00:c6:43:22:51:c5:f2:
46:9a:2b:df:7e:bb:81:88:f4:1c:ef:1c:1b:8b:09:
64:b7:f4:61:98:ca:db:46:80:4d:7f:15:2d:ad:6f:
fb:11:8f:87:35:a5:e2:67:bc:e1:cb:86:8c:6d:d0:
9f:9d:ca:ca:80:79:47:e9:13:3e:47:6a:1c:fd:d9:
58:d5:a4:19:5b:82:15:85:1a:78:21:01:02:e8:d5:
ed:60:e1:25:c2:34:84:60:e0:ef:e5:af:6e:5e:cb:
fc:9f:c0:ea:79:43:a0:ca:35:a4:85:3e:8b:28:56:
36:8c:81:da:d0:94:63:b1:c2:a3:15:8b:19:f7:e3:
1e:8c:8f:c9:68:15:41:3c:ae:c1:65:c6:57:50:6a:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7B:1F:14:9B:34:FE:5B:8F:57:E2:0B:31:84:A1:E3:2F:57:A9:A1
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:d9:80:e6:b9:4b:74:ed:67:72:ad:d0:2f:18:c1:79:04:
1d:dc:83:5a:48:4a:4e:c0:e9:02:50:98:5c:f2:0d:4b:05:67:
28:60:4b:04:41:01:ac:cc:98:69:86:83:f3:73:47:ef:d0:d6:
02:db:d0:bb:78:ec:1e:94:be:5a:7d:db:58:a1:a0:9d:5c:8c:
68:0c:fc:99:d9:0f:5e:f6:4d:e0:6d:d4:2b:3a:d7:62:93:bc:
3b:d9:a1:a1:be:02:be:36:52:dd:69:9c:ec:ff:9d:db:79:ed:
62:4b:2b:8a:b5:47:2a:00:9f:f9:96:44:d1:dc:b6:d3:65:3b:
3c:0d:87:12:7b:f1:ef:2b:fd:1d:32:db:25:16:0f:32:37:1b:
70:bc:b4:e0:42:f2:c7:16:93:2d:2a:de:81:e4:5f:93:f1:1c:
a6:90:22:2e:13:78:9a:2c:68:d4:4c:78:5d:fa:21:ae:fa:e6:
67:23:a7:d4:9a:84:99:e5:cb:71:1a:7a:24:b1:d2:79:d9:d6:
80:11:f5:7b:37:93:00:72:3d:31:a7:05:9d:f3:c0:e4:27:e5:
48:6a:00:85:aa:f7:6a:52:29:c1:6e:54:80:47:06:05:8c:70:
83:f5:42:93:e3:08:72:7f:9d:04:88:a9:7a:6e:1f:7d:99:94:
33:30:38:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fL/zISfRZnb3eNGVOqBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjUxMDE5MDgwMTIwWhcNMjUxMDIwMDgwMTIwWjAzMTEwLwYDVQQD
EyhmZDdiMWYxNDliMzRmZTViOGY1N2UyMGIzMTg0YTFlMzJmNTdhOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3G4DrHFIEya8my8OF4n2142Fdp
vCq17CPhEtQUB+zpemyK4MIYpLRUicjIRPUE1Vb6B1cnwDng/zm/Fd2D4tsnQIKK
c9I7oTQIQBYOxBX/SIE4i5dp1K4zQlz9kL8D7kacYD7UCIWbhSCrKTmKIgDGQyJR
xfJGmivffruBiPQc7xwbiwlkt/RhmMrbRoBNfxUtrW/7EY+HNaXiZ7zhy4aMbdCf
ncrKgHlH6RM+R2oc/dlY1aQZW4IVhRp4IQEC6NXtYOElwjSEYODv5a9uXsv8n8Dq
eUOgyjWkhT6LKFY2jIHa0JRjscKjFYsZ9+MejI/JaBVBPK7BZcZXUGpyfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP17HxSbNP5bj1fiCzGEoeMvV6mhMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWjZgOa5
S3TtZ3Kt0C8YwXkEHdyDWkhKTsDpAlCYXPINSwVnKGBLBEEBrMyYaYaD83NH79DW
AtvQu3jsHpS+Wn3bWKGgnVyMaAz8mdkPXvZN4G3UKzrXYpO8O9mhob4CvjZS3Wmc
7P+d23ntYksrirVHKgCf+ZZE0dy202U7PA2HEnvx7yv9HTLbJRYPMjcbcLy04ELy
xxaTLSregeRfk/EcppAiLhN4mixo1Ex4XfohrvrmZyOn1JqEmeXLcRp6JLHSednW
gBH1ezeTAHI9MacFnfPA5CflSGoAhar3alIpwW5UgEcGBYxwg/VCk+MIcn+dBIip
em4ffZmUMzA4xw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:39 2025 by rpki-client