Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: F+lc3IZZ4uIu37C2Yc/LfjJXMqdIY5zgvFcaifHZIgg=
Subject key identifier: DF:35:A8:55:3A:A7:16:EE:20:9D:8E:EE:1A:32:43:56:65:28:D9:39
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 0198D5161BDB76847EF02752DDBD1F481EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: mFMcGiOdl1ZnfhaGTQiXxbWPleFi30ukV5VPeAuu/94=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1b:db:76:84:7e:f0:27:52:dd:bd:1f:48:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=df35a8553aa716ee209d8eee1a3243566528d939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:64:fb:eb:fd:39:d4:01:b4:15:6e:78:e9:
7d:83:ee:e8:3d:97:08:91:0d:3c:50:de:04:c8:66:
bc:8a:98:2a:81:87:6b:c4:c3:c9:af:54:e4:45:5a:
9d:73:a3:23:78:c2:c0:7e:b7:84:6a:fe:2e:47:2b:
f0:2f:fe:22:76:2a:9e:0b:bf:fd:7f:c1:d6:b1:fa:
ec:0e:18:b4:3c:44:10:ac:86:f2:63:34:7d:f3:2b:
67:47:35:0b:85:b9:90:f0:01:3c:64:d4:61:8d:de:
0f:3d:08:bc:89:72:55:07:48:08:70:26:ef:2b:a6:
6c:36:06:65:a7:34:60:b3:69:d0:4e:a5:14:e6:88:
70:06:c4:7c:cb:8a:38:59:3f:d4:cf:2b:22:29:05:
eb:4e:86:55:74:09:63:ba:09:84:84:65:b9:3c:d2:
e9:5d:e9:09:dc:0d:55:5f:84:0d:98:89:c8:49:da:
85:b5:ec:31:c8:ab:c1:3c:1a:6b:e1:54:7a:ea:be:
1b:d7:8c:d2:46:b5:d5:85:1c:ae:5d:dc:42:80:0d:
56:dc:8e:d0:d9:8e:b6:e0:b8:72:b8:22:9f:3f:8c:
75:46:cc:d0:2f:03:d1:4f:3f:84:92:3e:1f:ec:fa:
2f:ce:e9:57:34:b2:2d:c7:92:98:0d:d7:9c:17:8e:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:A8:55:3A:A7:16:EE:20:9D:8E:EE:1A:32:43:56:65:28:D9:39
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:4e:b3:c6:c5:c2:0f:44:05:49:f6:63:a5:fc:d7:21:51:
9e:c8:26:ad:87:fb:9f:e4:7f:53:64:27:6d:ae:f8:87:79:d9:
fe:86:7b:d9:35:a3:33:db:65:99:ef:c9:b0:55:3d:b6:f4:c5:
70:9f:7b:78:10:04:29:e0:74:e6:7e:73:01:4b:17:bc:b4:fc:
0c:f3:af:64:41:be:ba:74:44:9f:29:7e:2d:42:44:db:6b:01:
75:c0:a4:68:29:56:db:f9:c3:ca:b1:55:02:84:af:57:56:8b:
0e:aa:cb:72:84:66:39:28:dc:8f:0b:b0:bc:30:4f:01:46:54:
94:6a:be:7d:c8:8c:13:63:f9:ea:3c:b6:73:11:6a:78:b9:4c:
df:21:bf:27:28:43:e7:b2:83:38:fa:31:59:a7:7e:b6:3f:ed:
96:8b:5a:ca:dd:17:91:a7:56:6c:76:1c:bc:82:80:62:d6:9f:
ec:32:59:05:a4:6e:c9:b8:83:4d:db:98:ce:76:ef:8e:df:c3:
76:83:be:99:73:53:5e:be:78:ca:e1:b5:75:41:32:e8:5a:27:
d6:fd:93:52:0f:e1:71:d2:6a:a3:17:43:bc:4a:ee:63:32:f3:
ea:8b:3c:dd:ab:00:d8:66:0d:76:99:52:21:cc:b7:02:f1:4c:
5b:1b:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:56 2025 by rpki-client