Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: 3hijEgM15fyk50GXZwsKyee9M0mEaj/VHU2jwFC2Boo=
Subject key identifier: 3A:30:E2:A0:85:E6:8E:1A:05:1E:60:B6:28:C2:F0:AC:C7:04:40:1B
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 01974B1F798EBE35D4C24FB87CEA25996B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 16:00:43 +0000
Manifest this update: Sat 07 Jun 2025 16:00:43 +0000
Manifest next update: Sun 08 Jun 2025 16:00:43 +0000
Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: BqmFWYAiC5h/er1LEac0YqXTuLhuE3Y4mMxjK/w9v0w=)
2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:79:8e:be:35:d4:c2:4f:b8:7c:ea:25:99:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jun 7 16:00:43 2025 GMT
Not After : Jun 8 16:00:43 2025 GMT
Subject: CN=3a30e2a085e68e1a051e60b628c2f0acc704401b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:17:a9:5f:a8:b4:df:bc:c4:50:f7:2b:af:
9a:44:89:79:ce:7b:d5:b6:1e:79:01:29:3b:57:81:
42:22:58:9d:e7:f2:01:d5:b4:d6:7d:07:5f:54:30:
bc:17:a1:26:f9:da:16:b5:7a:8c:16:4b:c1:6f:65:
6a:16:40:28:33:4d:7b:5d:41:5b:c2:05:f4:d9:aa:
b5:e3:92:3d:74:d2:59:f7:4c:fa:4e:0a:60:0d:65:
91:90:73:cf:70:a6:80:9a:d6:c8:27:39:db:4d:b2:
ec:c0:64:76:5f:fe:61:3e:28:a9:e6:8c:6c:2e:3a:
f8:b2:5b:89:79:53:63:1d:b6:4d:76:cf:3a:aa:1a:
49:92:b0:ef:9f:7a:fa:64:04:5b:ab:d6:02:04:7c:
ab:f7:64:21:13:07:d9:f8:0b:68:20:f3:9d:ff:97:
db:20:0a:b5:42:5c:a3:68:09:27:41:d7:29:7b:c8:
3b:ed:21:c3:7b:f7:fb:f8:96:56:7f:36:ba:f7:5a:
f3:76:e8:62:67:bd:9e:51:62:1c:16:d9:84:41:a8:
92:d0:86:e9:98:ea:6a:1d:23:8a:8d:ac:db:9a:ce:
bf:eb:95:f6:7f:04:45:9b:2f:c6:9b:90:ab:62:f2:
55:b3:10:58:a7:84:0d:77:e1:70:6f:b7:b0:c4:8a:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:E2:A0:85:E6:8E:1A:05:1E:60:B6:28:C2:F0:AC:C7:04:40:1B
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:fc:a5:4b:cb:e8:e1:63:2f:40:ba:5b:8e:4c:25:b2:da:
2a:4e:88:dd:cd:94:83:02:85:c4:01:a5:60:b5:6b:0d:01:a8:
7d:47:58:b7:67:60:f6:85:64:ae:8a:05:27:06:d3:92:9a:a9:
9d:3f:88:f7:36:e4:a3:7a:e1:15:3f:cb:3b:5a:a5:a1:9a:7c:
db:74:af:64:8b:b4:40:0d:6d:e1:bb:04:fa:c2:36:c4:d6:e1:
0e:09:34:99:88:0e:3c:30:84:44:27:ac:32:45:fd:38:75:1b:
73:8e:d4:27:29:78:0d:a8:50:74:26:7b:5e:16:f4:54:f7:58:
77:9a:42:40:53:c0:4e:ac:f4:71:22:5c:31:50:f3:a2:ab:76:
25:1e:10:38:ac:3f:f8:ad:70:7f:a3:08:2e:ac:07:ee:02:ad:
18:d3:fc:a9:39:e1:6e:2a:ea:75:7a:a5:cd:cb:9e:39:55:b0:
85:04:4e:47:8a:6c:67:16:c7:e0:2f:ba:db:3f:b6:b4:8a:82:
e9:d0:79:bf:7e:17:ed:4d:b6:23:15:90:ad:2f:a7:26:8b:40:
2b:f3:7f:da:e2:f1:b7:a4:88:7e:4b:a3:b0:a8:bc:6f:0c:e1:
51:0c:23:e2:35:c6:8e:46:c7:07:d5:0e:f7:a3:39:bd:ab:24:
63:78:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:43 2025 by rpki-client