Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: /Oo8ZvS0Ss8xEcorRVd6skTuUNAsLANwCbllEXZfMvc=
Subject key identifier: 6B:2E:5B:BD:DA:CA:E6:A0:87:20:9B:2B:D3:9E:3C:EE:6C:15:C8:71
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019A5375A29E062F109518BA7446935107CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 10:00:09 +0000
Manifest this update: Wed 05 Nov 2025 10:00:09 +0000
Manifest next update: Thu 06 Nov 2025 10:00:09 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: x+Iw0PZRC9OPLfdP9yagVDpVagNeUp6o6Ro5PoB8dIc=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:a2:9e:06:2f:10:95:18:ba:74:46:93:51:07:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Nov 5 10:00:09 2025 GMT
Not After : Nov 6 10:00:09 2025 GMT
Subject: CN=6b2e5bbddacae6a087209b2bd39e3cee6c15c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:3d:d8:b8:77:1b:3b:f2:c3:6d:28:ef:1d:
55:6a:ed:1a:25:a2:3a:fc:50:05:77:63:b0:d8:2e:
7d:92:45:45:cd:29:89:36:ba:33:40:a0:fe:40:66:
dd:97:00:4b:41:32:58:21:b8:67:da:fa:39:58:18:
1d:80:09:77:8d:32:4e:ae:1e:6d:03:2b:ea:b5:c5:
68:46:ab:3f:78:3d:cd:a6:24:bb:3c:a0:7e:1f:9d:
c0:ce:34:2c:36:33:8f:02:5b:72:d0:af:df:0e:f0:
d6:58:7d:fb:ac:c3:fa:74:f3:1e:52:b5:08:7d:ca:
29:05:f0:c2:7b:ee:d2:d2:df:01:53:51:eb:7e:0b:
b2:ad:77:6b:af:21:26:23:84:10:db:99:18:fc:f6:
8a:f5:de:7b:a1:76:ac:2f:81:53:67:b4:4b:d9:8a:
7e:d6:30:8d:72:f4:d2:53:a5:31:69:ec:d4:7f:3d:
7c:d4:ee:3b:58:36:98:aa:55:c7:1f:1d:ff:16:2b:
69:ad:cd:a2:cd:ee:2b:f9:8d:fb:dd:5d:fa:16:19:
3b:2d:cc:67:a7:92:db:2e:9f:47:df:5c:77:f5:6d:
1e:08:f9:81:e6:52:08:dc:7c:bb:1b:73:73:ff:7a:
60:bd:26:a4:0a:ef:30:7b:cf:1a:89:cc:ac:b8:99:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2E:5B:BD:DA:CA:E6:A0:87:20:9B:2B:D3:9E:3C:EE:6C:15:C8:71
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d2:76:74:1d:f7:91:f8:98:ae:ef:05:f9:da:a1:15:8e:1d:
6d:46:4c:fd:63:3a:b6:ff:3e:7e:7a:9c:66:ed:91:b5:bd:0f:
a5:e8:d0:50:15:7e:0f:62:bc:4c:27:a5:91:bc:e8:9d:55:a9:
23:17:37:f3:d0:5e:30:3e:39:30:50:2f:cf:ea:56:6c:4d:e8:
58:d8:b1:df:7b:2b:29:c9:d4:7d:2d:f0:99:84:7a:d1:a9:48:
70:05:0d:47:c7:01:df:cc:52:a5:93:91:1b:f2:e6:7a:e0:f0:
a7:e9:e7:8b:a8:e3:00:28:7d:11:ad:8f:19:3c:fe:d1:84:4f:
a0:e2:56:63:8b:7b:56:60:f3:9f:d9:eb:65:44:59:a0:4e:0c:
7a:de:61:12:41:e2:63:e4:39:a0:c4:44:9b:f8:d6:a7:e1:7a:
6c:d5:2e:18:41:35:e2:e5:d3:90:e1:4a:8a:c4:22:55:c3:52:
d4:8f:92:94:39:14:81:1b:9f:19:d6:0b:38:d8:a5:5d:0b:86:
eb:0a:45:f1:0c:1d:90:82:9d:09:b1:06:2e:6c:e3:18:76:9c:
10:2b:bc:3e:34:35:93:5e:ae:46:89:59:74:80:40:be:64:6d:
36:3a:b5:0c:9d:0f:37:bd:12:f8:d2:15:d3:c7:20:56:9f:46:
03:3c:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:12 2025 by rpki-client