Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: r7GGyHCnQ2ZYpSZ0dkQjnJaIqOkGojrGBqz0XLhtPQ4=
Subject key identifier: 08:BA:8A:20:ED:C9:06:05:C9:DF:1A:C3:91:91:64:E8:A3:1E:D2:93
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019653EE55D325D58EAF5D30D6DB4905CDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 16:00:50 +0000
Manifest this update: Sun 20 Apr 2025 16:00:50 +0000
Manifest next update: Mon 21 Apr 2025 16:00:50 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: tG1G8ZTp1EkT/bUF7Q7DxDFJAN8TONvPiDHil9Qz+R8=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:55:d3:25:d5:8e:af:5d:30:d6:db:49:05:cd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Apr 20 16:00:50 2025 GMT
Not After : Apr 21 16:00:50 2025 GMT
Subject: CN=08ba8a20edc90605c9df1ac3919164e8a31ed293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:b2:09:67:8a:30:4f:02:09:d7:6f:a5:a7:
48:45:c6:ac:e3:e3:af:0c:0e:89:69:8a:00:29:6a:
fc:2a:aa:c4:18:0e:2d:f1:05:bf:99:db:db:71:32:
f9:b5:fa:53:92:3d:2f:bd:b0:82:b4:f6:c7:e7:17:
ad:72:26:c2:f6:df:de:96:8b:89:3b:74:d3:8f:2b:
de:83:1b:89:4c:5d:e6:4d:11:44:a0:42:9c:3f:a8:
69:3a:58:b8:45:e8:7e:f3:ec:f1:7b:1e:84:4a:3d:
fe:e3:52:f4:13:29:1c:15:ef:3e:ad:be:88:b3:59:
39:26:fd:72:0b:65:c5:9b:ea:8b:76:b3:5a:ab:52:
b5:60:f6:3d:13:b3:28:5b:a2:d6:f7:9b:23:4c:a6:
f6:d0:78:a6:f2:78:2b:11:70:c3:cb:76:b9:84:6f:
0a:3d:8b:09:42:15:17:c7:f0:36:1c:11:4c:b2:9a:
67:84:f6:69:6a:5a:8b:20:bd:e1:49:7b:ce:a5:48:
33:a1:5e:c3:dd:04:a8:6d:71:58:c4:74:b9:f4:dc:
85:5d:66:09:fb:f0:c1:b5:cf:b3:1c:80:bb:94:9b:
e1:f9:c0:52:ee:09:b0:44:a4:4b:ba:6d:0f:71:c2:
da:2b:6c:2a:82:26:78:a5:c2:a5:b3:84:8c:11:82:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:8A:20:ED:C9:06:05:C9:DF:1A:C3:91:91:64:E8:A3:1E:D2:93
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:ed:38:65:af:37:8f:04:f7:51:b2:df:56:65:ec:6d:ca:
2e:c2:dd:55:e5:8b:a8:14:da:10:3b:74:03:ef:09:f9:1c:f8:
cf:c8:1c:9c:74:a5:02:ed:38:09:86:6c:0d:a6:05:95:fa:2d:
50:61:ee:01:95:f6:6e:21:ff:f5:b8:fc:38:ff:93:4d:75:75:
28:d7:28:2d:0f:8b:a3:f4:37:85:5b:47:68:bf:d4:b6:cc:47:
0d:9d:5f:bf:39:d2:80:3b:1f:e9:10:6a:0b:ea:f2:61:f5:5b:
53:bd:5b:e7:f3:d1:25:c9:71:6d:d5:69:02:8c:ac:16:51:11:
29:bd:0b:96:34:d6:df:12:8c:c1:af:b3:14:51:62:1b:5c:e2:
cb:bb:42:90:2c:c0:35:b3:6a:67:97:44:22:08:2a:50:3c:3b:
4a:eb:c5:60:fd:4e:35:75:c1:6f:5c:3c:eb:56:bb:0c:7e:af:
23:8c:e4:a8:92:55:e9:74:6c:eb:6a:e2:f0:a2:1b:dc:65:f1:
39:b1:85:6e:ad:e1:5a:73:59:d1:2a:fe:9f:f5:0b:df:15:ca:
34:b2:78:56:2e:72:e2:62:d6:c7:06:1c:e1:6a:b3:c8:e9:95:
af:13:5f:32:8a:f7:fe:7b:d4:37:d8:89:2a:3d:89:5a:d1:a0:
aa:96:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:05 2025 by rpki-client