Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: I+BteB2GPxyd1EEAQOTJFx7gIhGRrFtYVYZMydY2atk=
Subject key identifier: 89:87:71:8D:D7:DA:72:31:26:80:D7:3F:C1:20:1E:2D:25:E2:0F:3D
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 0197B93406D0E9B52BA4A2B2477F620E5D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 01:01:23 +0000
Manifest this update: Sun 29 Jun 2025 01:01:23 +0000
Manifest next update: Mon 30 Jun 2025 01:01:23 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: l751KzjA/TrbxtW1pdpZ8QZrR0ZULqWn+H317gY9Pbs=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:06:d0:e9:b5:2b:a4:a2:b2:47:7f:62:0e:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jun 29 01:01:23 2025 GMT
Not After : Jun 30 01:01:23 2025 GMT
Subject: CN=8987718dd7da72312680d73fc1201e2d25e20f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:82:d7:0d:e6:99:dc:fb:e7:ac:2f:c5:4e:
5f:1f:b1:78:5a:64:9a:3f:d0:48:96:98:b9:b6:f7:
6c:cd:e2:50:4d:e4:a1:91:86:97:33:9a:63:e4:dc:
27:14:37:12:50:a2:b3:4c:4a:28:47:b7:80:dd:cd:
09:3a:2f:d2:7f:00:e6:04:46:24:84:cc:65:38:a5:
41:63:42:4a:e7:a2:3f:1e:51:01:8c:3f:2b:0c:92:
3f:8c:fc:2c:b2:36:ff:22:ad:76:9a:47:83:c5:32:
cb:32:6b:31:13:64:36:ae:80:05:26:42:a2:a1:f0:
37:2b:12:c1:61:f0:9c:95:f8:72:62:1c:77:33:50:
24:dd:a9:68:c4:94:34:76:02:72:2d:39:dd:b1:55:
32:42:31:ed:f4:06:8a:d2:a8:64:e0:4f:df:3a:86:
1a:9c:47:71:2a:25:3f:6f:b5:f4:a0:c2:4f:45:f9:
ea:b5:c4:fc:2e:c8:8d:84:76:ed:a5:c1:d9:ee:79:
c2:cb:c2:37:66:f2:38:98:90:8d:9a:f3:78:fb:c0:
f8:61:d0:98:65:37:61:ba:6e:02:fc:35:dd:52:51:
06:15:7a:d3:d8:e1:bd:b3:03:e2:09:7f:31:e7:cc:
31:0a:f2:3b:da:27:b5:be:c8:8e:09:73:39:05:ac:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:71:8D:D7:DA:72:31:26:80:D7:3F:C1:20:1E:2D:25:E2:0F:3D
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7c:a7:7a:37:c1:73:43:80:79:47:c9:ec:e4:76:22:83:70:
20:01:f2:2e:df:90:f9:ea:ef:b7:30:fd:9e:3c:28:80:71:2e:
e5:d9:55:2a:7f:77:45:45:e8:c2:cb:46:68:61:82:0f:8b:8d:
4b:be:48:28:82:5d:48:f3:d3:53:69:68:ad:f4:6e:3d:da:85:
8d:73:39:d7:1f:24:81:7e:37:5b:6c:47:ab:e6:56:95:e0:17:
19:7f:f0:18:7f:59:6e:1f:c7:3d:40:93:75:02:a1:26:c7:8f:
59:b9:46:78:a3:77:09:39:0c:b7:11:e8:9c:90:45:80:98:65:
22:f3:67:d4:ab:3e:7f:df:a0:61:05:8d:43:3b:e8:f5:9f:21:
cb:7e:4b:03:3a:dc:7f:5c:a7:05:e6:bf:73:0b:73:fa:a9:e8:
8c:27:0d:f2:5f:b8:6c:9a:ef:38:10:65:8f:d0:8a:9a:da:3c:
39:ca:35:f2:ad:73:3e:9f:f6:c8:33:c8:a7:bf:d0:bb:50:46:
fc:1f:0b:6f:42:05:d9:72:e9:07:68:fb:0a:c3:73:44:6c:51:
d5:dd:95:e5:31:7c:de:b4:7e:22:71:ce:1f:61:90:91:57:27:
42:09:41:d9:19:56:44:92:83:78:0b:51:16:4c:53:1f:01:f9:
0c:88:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:25 2025 by rpki-client