Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: JaUEq4rIMWjtIuHylxr8evHFPEMKCi3lW+xMxS5VDFw=
Subject key identifier: 92:BA:30:C1:DE:5D:7B:A1:86:A1:D0:24:12:24:EE:40:A3:7C:ED:47
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019872988535D3DD78F8EBD5664C63616B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 01:00:54 +0000
Manifest this update: Mon 04 Aug 2025 01:00:54 +0000
Manifest next update: Tue 05 Aug 2025 01:00:54 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: cOq5fW8zRff3cI40B1afk3e78XQh/vV3k9sNiOo1gFU=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:85:35:d3:dd:78:f8:eb:d5:66:4c:63:61:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Aug 4 01:00:54 2025 GMT
Not After : Aug 5 01:00:54 2025 GMT
Subject: CN=92ba30c1de5d7ba186a1d0241224ee40a37ced47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:d8:bc:8d:51:8f:53:20:b1:b9:7b:3c:fe:
4f:33:aa:8d:aa:25:98:9d:89:7e:ce:74:fc:20:b7:
c4:42:ab:91:80:44:17:98:79:29:9d:af:fd:49:b6:
bf:2f:b6:df:48:7d:73:02:0a:f6:52:da:8d:8d:7d:
df:3b:08:3b:99:2c:89:34:c2:fb:d9:8e:b8:8f:17:
22:76:99:fe:9f:ff:be:86:2d:3c:a7:16:be:ea:16:
05:58:b6:1c:f8:ce:ca:57:86:94:02:eb:18:b1:cf:
ed:29:df:a5:3c:58:07:f4:4f:57:f6:6d:1a:06:42:
c6:7e:45:64:f6:a1:fa:97:a1:6c:46:5c:ba:de:84:
ef:5a:15:3f:e3:73:4c:a3:d0:70:c2:d5:00:c7:b4:
65:50:8c:e6:c7:68:d9:d0:ee:1b:44:44:34:d9:af:
26:a5:fa:21:73:bb:20:fd:af:61:22:bb:af:02:7b:
28:a1:5d:90:4d:e7:b3:ba:8b:cc:d2:78:5c:0a:f8:
dc:de:ac:48:05:33:c5:c5:ad:e6:70:c5:d9:51:db:
73:42:97:78:b9:89:f9:89:65:2d:04:f3:d9:4b:8f:
6a:22:77:f5:e5:9a:c0:6a:4f:aa:06:73:05:13:18:
0a:88:de:39:d5:08:6a:8d:59:0d:ef:1c:0b:3d:78:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:30:C1:DE:5D:7B:A1:86:A1:D0:24:12:24:EE:40:A3:7C:ED:47
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:9f:f6:ef:35:37:06:39:6b:91:bb:ef:42:a6:93:e9:65:
03:f9:4b:e8:9f:97:7f:5d:b5:8c:11:9b:37:fc:2d:5f:29:67:
ed:d8:c7:6e:b7:fb:a6:f5:c5:33:f1:66:6e:a0:1e:82:66:2f:
6d:04:3e:05:9d:4f:39:7b:2e:fe:84:54:02:d9:0e:49:c3:76:
c6:4a:bb:98:21:bc:20:d7:7b:a3:9c:26:cd:7f:eb:11:29:6d:
47:9a:8f:e3:c9:85:8e:dc:f0:4f:6e:af:42:61:b3:19:a3:29:
59:4c:ce:34:08:f1:26:d2:07:0a:eb:e6:7e:33:9b:4d:64:cb:
97:87:1e:d4:ae:ec:57:c6:06:3a:7f:13:c0:0f:ef:06:05:3d:
92:d1:8a:c7:8c:53:29:22:e6:e9:63:e8:64:8e:b2:70:45:bb:
4c:cc:fd:41:dd:e0:3a:e8:39:20:4d:56:5d:07:a7:45:a2:9e:
b6:81:6e:c5:ea:83:f6:ed:2f:0d:d2:ee:7f:16:74:4b:ea:7f:
06:9a:0c:09:4f:26:92:b4:b7:63:72:cd:f2:03:3d:72:06:5f:
bf:6f:7d:12:47:52:b0:ef:c3:74:f6:d3:7c:95:ac:9e:19:6c:
b9:fb:a1:d4:96:81:23:16:33:6a:78:cc:6d:c5:9a:46:63:86:
55:c5:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:28 2025 by rpki-client