Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: 6G/Q/wHefZE7n9btMJ7cplRPpC2aDidVJmBhTRQdocg=
Subject key identifier: EB:7C:55:F4:6A:39:A8:6C:F0:5F:6F:CD:E3:6C:D2:C7:F1:39:B2:A5
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0198D5F182D21E198646FD2B6A3A4BE6E5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0637
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: 0ciNsxz8Z6f1c4pzuI8mF3TT2LrGkiCo5X+QXi5bZyg=)
2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:82:d2:1e:19:86:46:fd:2b:6a:3a:4b:e6:e5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=eb7c55f46a39a86cf05f6fcde36cd2c7f139b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:cb:ce:3d:8d:62:d2:0e:d3:8f:6b:b7:b6:
f5:61:cf:6f:ad:71:4f:b4:8d:0c:7d:2e:65:6e:48:
29:40:d2:95:38:8c:1d:9c:95:43:65:86:4d:49:42:
51:e2:69:e4:86:0d:6f:a3:ba:fd:24:83:af:6e:e0:
64:75:4f:22:aa:68:49:fe:b3:d1:d5:44:b3:5f:61:
0c:83:2c:83:c1:7f:84:6f:d0:2d:b9:c0:a9:5a:f0:
85:f6:0a:6e:e4:65:f9:94:28:0b:6c:fd:a2:89:38:
15:fc:47:25:11:62:0a:dc:37:91:cf:a2:01:50:8c:
20:72:b4:50:e5:88:fa:62:b0:68:ca:2a:51:36:a8:
0d:52:01:b4:82:81:af:62:9e:a7:8c:b6:2f:a0:47:
06:fd:60:18:8a:51:4b:63:e1:5b:96:d9:6a:5e:6c:
e6:0a:0d:ab:56:b8:04:d4:d2:8c:66:72:0c:ce:29:
f2:bd:29:ba:13:1e:bc:6e:e5:f7:c6:4e:64:0e:ee:
43:5a:2e:d1:11:dc:44:ef:c4:9f:fb:1a:ba:73:c1:
36:85:80:20:e8:29:dc:ae:99:3c:6e:dd:02:a2:88:
70:e5:f2:76:50:31:09:28:8a:45:a4:26:2c:f8:4d:
7f:de:9a:f1:a0:77:fc:b9:f7:05:cf:88:5b:c3:55:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7C:55:F4:6A:39:A8:6C:F0:5F:6F:CD:E3:6C:D2:C7:F1:39:B2:A5
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:ca:20:81:ca:80:71:ef:09:1b:5f:0b:4c:4c:29:d0:4b:
66:69:97:2f:a7:5d:52:23:60:5b:e5:b7:be:33:35:e1:f4:a7:
9e:d2:c3:cd:e3:c5:85:13:4e:1d:65:a9:cf:0a:12:a1:7e:ee:
b2:10:76:c6:69:29:e3:fc:19:da:ae:f1:73:e0:95:7a:28:05:
a6:36:ea:1c:1c:2c:38:a2:92:68:87:5c:8e:62:e5:fb:a0:08:
96:e1:3a:53:f3:c7:50:3e:71:5b:db:6f:3e:ea:20:36:4a:35:
c2:5b:66:43:c9:c8:08:6a:f8:69:cd:c0:cc:bb:73:d4:29:14:
aa:65:0f:a7:c8:31:82:9e:38:4f:68:a8:52:0f:96:90:9a:3a:
9b:d5:a8:21:4a:38:9a:73:44:99:00:62:f6:c9:b7:ec:99:df:
5f:7b:84:47:31:d5:3d:fe:e8:dc:51:2e:59:d2:f2:a5:8c:b8:
c0:63:ea:1c:8e:9d:86:34:08:3d:06:29:2a:dc:d5:03:9f:31:
02:dd:f8:66:61:cc:07:50:e6:de:f3:40:af:32:68:0f:5e:06:
bf:b5:9e:b7:f6:aa:5e:68:51:c4:e4:a0:32:a0:ba:7f:4d:06:
4a:cc:0d:7a:b1:f7:d2:cd:77:53:e3:41:cc:a5:dc:17:85:82:
af:f8:98:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YLSHhmGRv0rajpL5uXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EyhlYjdjNTVmNDZhMzlhODZjZjA1ZjZmY2RlMzZjZDJjN2YxMzliMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvHLzj2NYtIO049rt7b1Yc9vrXFP
tI0MfS5lbkgpQNKVOIwdnJVDZYZNSUJR4mnkhg1vo7r9JIOvbuBkdU8iqmhJ/rPR
1USzX2EMgyyDwX+Eb9AtucCpWvCF9gpu5GX5lCgLbP2iiTgV/EclEWIK3DeRz6IB
UIwgcrRQ5Yj6YrBoyipRNqgNUgG0goGvYp6njLYvoEcG/WAYilFLY+FbltlqXmzm
Cg2rVrgE1NKMZnIMzinyvSm6Ex68buX3xk5kDu5DWi7REdxE78Sf+xq6c8E2hYAg
6Cncrpk8bt0Coohw5fJ2UDEJKIpFpCYs+E1/3prxoHf8ufcFz4hbw1VdjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt8VfRqOahs8F9vzeNs0sfxObKlMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnvKIIHK
gHHvCRtfC0xMKdBLZmmXL6ddUiNgW+W3vjM14fSnntLDzePFhRNOHWWpzwoSoX7u
shB2xmkp4/wZ2q7xc+CVeigFpjbqHBwsOKKSaIdcjmLl+6AIluE6U/PHUD5xW9tv
PuogNko1wltmQ8nICGr4ac3AzLtz1CkUqmUPp8gxgp44T2ioUg+WkJo6m9WoIUo4
mnNEmQBi9sm37JnfX3uERzHVPf7o3FEuWdLypYy4wGPqHI6dhjQIPQYpKtzVA58x
At34ZmHMB1Dm3vNArzJoD14Gv7Wet/aqXmhRxOSgMqC6f00GSswNerH30s13U+NB
zKXcF4WCr/iYZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:51 2025 by rpki-client