Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: OumOcx0NCgeGLuDA/dvI0hifQjxNzrxK/9X3tLJ5SZo=
Subject key identifier: 31:2C:59:28:71:CC:1B:AD:8D:FE:C0:97:79:40:4E:4A:13:40:87:D4
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019916BF1FA7D21E13F4182F39EA2A1349F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1669
Signing time: Thu 04 Sep 2025 22:00:47 +0000
Manifest this update: Thu 04 Sep 2025 22:00:47 +0000
Manifest next update: Fri 05 Sep 2025 22:00:47 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: KKILzfk+P5qfD3EHAEx06QXhPKrUzI29cNO4zsBbBwI=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:1f:a7:d2:1e:13:f4:18:2f:39:ea:2a:13:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Sep 4 22:00:47 2025 GMT
Not After : Sep 5 22:00:47 2025 GMT
Subject: CN=312c592871cc1bad8dfec09779404e4a134087d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:5e:75:13:49:74:96:14:1b:aa:3c:8c:d5:
6d:b5:9e:07:fc:88:5e:0b:d6:83:34:e3:05:21:5a:
ad:68:81:8a:1a:f3:5f:2a:2a:3d:70:92:c4:7b:77:
42:4b:d2:f9:fa:c8:f3:55:64:2c:e4:4e:b6:a1:55:
c9:47:2b:7d:26:b2:97:99:ba:b0:e2:2b:fb:5c:31:
ad:0f:85:0c:44:bf:1c:a7:0e:e3:6f:10:56:ff:69:
74:8c:e2:c6:af:db:f1:52:c2:50:a5:0a:31:ca:16:
58:e0:53:ea:aa:ca:02:fe:46:00:10:e2:46:67:f1:
aa:23:71:eb:d4:11:a3:bc:39:62:c3:6a:20:6f:76:
4b:da:00:92:8d:28:df:20:d3:02:f7:f7:f6:a8:1e:
a7:a7:63:04:ca:2a:3f:e1:57:e0:4a:17:19:ec:93:
76:98:79:8a:87:8f:ce:dd:97:09:03:03:d7:8d:b9:
d0:dd:ec:90:f8:b0:d0:5b:5c:c4:d8:8d:48:22:b8:
f0:fe:ea:f4:90:ff:d4:53:61:03:72:83:d2:eb:14:
a9:2e:0a:e2:0d:2a:56:76:da:41:c4:e0:98:7b:e9:
bf:81:c4:11:16:ee:4b:40:ab:e7:50:07:2e:7f:ee:
df:26:ef:69:e3:92:87:3e:6e:c3:02:63:0a:d6:51:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2C:59:28:71:CC:1B:AD:8D:FE:C0:97:79:40:4E:4A:13:40:87:D4
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:9d:ee:2b:b8:1b:c2:2f:71:c5:3e:2a:7f:18:e0:ca:75:
c1:b4:e8:7b:a0:35:80:46:89:30:55:9b:a0:12:d4:f8:0e:8f:
21:9b:f8:8c:b6:ff:64:33:e1:7b:f2:88:d0:42:df:3f:58:1c:
93:2e:63:2d:b6:0b:12:27:db:a1:d0:45:b7:cf:82:98:8b:25:
f2:0d:96:5b:06:82:28:9a:b8:d3:f9:84:7f:bc:c3:ca:03:a2:
4f:fb:8c:c2:07:b3:1b:63:03:d2:63:6a:cc:15:ff:31:09:3e:
e5:47:60:ec:7b:ba:18:2c:81:bb:b6:38:3e:2c:e2:46:b9:ff:
86:84:e8:8e:4b:ee:1e:74:db:15:af:b2:7e:2b:16:af:9a:49:
80:58:ee:28:ff:1c:b0:9b:fc:6f:fd:59:80:2e:33:f5:c8:ea:
aa:15:06:00:3f:b6:05:a1:b4:8d:e7:44:fe:6b:b0:22:21:66:
d8:60:b2:a2:df:8d:cf:e9:7e:87:f0:19:06:c4:9a:36:99:8b:
31:8d:02:e6:04:79:23:3c:a1:01:bb:bf:6d:d5:b9:d2:72:3a:
82:c9:86:ff:1f:24:4c:1c:c8:fe:36:e9:db:2e:ce:d5:e1:c6:
71:9f:a7:ea:3c:c7:ae:42:a1:37:d6:cb:aa:97:a0:ae:0e:5c:
0a:d6:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:55:32 2025 by rpki-client