Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: I9YF6sheFAyM3pfDvaMg01dqOcbrlUSDlfJaE23kXRM=
Subject key identifier: 87:CD:D5:0D:F0:7B:8A:FB:F0:D9:62:46:09:A8:38:A9:70:C8:C9:7A
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019A725CAA7694D09ECB2B5D40AE5E43FCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: zaGbj6AIdfNGpyN/FG1NzFK9N3UWmSogWADp+fD4EKI=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:aa:76:94:d0:9e:cb:2b:5d:40:ae:5e:43:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=87cdd50df07b8afbf0d9624609a838a970c8c97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:87:a3:37:c7:53:0c:cf:95:04:9b:60:f9:
27:53:b7:10:d7:30:ce:2b:7d:65:bb:c4:fa:36:d1:
1f:51:11:83:0e:b0:d9:31:26:cf:47:fb:fb:37:e5:
11:5c:8f:52:ef:01:3d:89:d3:a5:03:67:16:de:1d:
f9:e4:ca:d5:20:cb:37:52:56:f6:50:d5:4f:fd:a2:
46:18:1e:af:d5:42:cc:a5:f6:d1:23:15:51:de:fc:
c2:42:76:10:99:09:cc:6d:4b:76:2c:51:52:55:31:
0d:22:50:c0:b2:50:ba:84:61:56:37:99:b2:8f:d9:
69:81:52:04:a8:ba:7b:66:04:e0:33:fd:5b:9a:90:
86:e1:9e:df:7d:8b:2a:18:a9:6c:db:29:0f:28:4c:
93:64:d3:45:41:23:9c:d8:15:93:9d:7b:12:53:cb:
87:8a:de:2a:11:92:70:ce:e9:14:25:79:5d:86:e1:
14:61:58:98:eb:3a:57:d0:bd:4d:ae:5a:e7:71:e4:
6e:9b:49:37:b6:26:3f:42:60:71:40:64:d9:c5:49:
3c:57:8f:11:3b:28:35:d3:20:68:4c:78:ac:8f:ee:
f3:24:07:38:01:3c:e1:4b:9a:b1:ef:d3:17:68:a5:
1b:07:30:fe:93:f6:77:5c:ac:95:7d:7c:c5:87:be:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:D5:0D:F0:7B:8A:FB:F0:D9:62:46:09:A8:38:A9:70:C8:C9:7A
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b1:74:9b:f8:77:31:7c:a1:2b:07:b4:02:ee:82:00:41:f5:
9b:99:6e:bf:26:b4:59:fd:f8:a8:a7:cf:95:77:20:42:ce:54:
c1:4f:71:31:2b:a5:be:fd:7b:f2:e6:a9:db:b7:5b:bc:c4:1d:
ca:03:d5:14:be:4a:34:c4:54:e9:f6:cb:57:c9:bf:05:c2:0c:
7c:b4:62:59:ca:c6:48:56:2d:65:40:53:ee:75:35:4f:07:b8:
9d:48:12:9a:11:1e:ca:9f:22:f4:87:2a:ef:45:6b:dc:88:67:
a1:74:a0:04:80:f8:0a:a8:e1:7e:ff:1e:0c:63:e3:e7:90:f4:
51:8c:48:d0:a3:9f:98:a2:e7:da:9a:93:52:83:24:60:fc:53:
4b:29:07:94:f7:dd:bb:3a:d7:3d:e2:05:6a:c2:24:f5:d5:73:
e2:60:e6:3f:48:9d:9f:b3:bf:6f:28:05:ab:bf:73:7b:a9:1f:
96:75:08:27:a4:48:f2:a4:86:e1:ab:a7:10:50:c4:40:10:ed:
72:00:d5:65:41:d2:6a:93:66:cf:e2:d7:81:3c:cb:86:34:d5:
fb:34:44:5c:dc:f7:f4:73:52:76:2a:24:6d:7a:67:1d:24:2d:
65:52:9c:2f:60:65:2a:c7:02:30:52:83:d8:5e:d2:0f:aa:5c:
88:56:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:44 2025 by rpki-client