Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: VMfDhPYd3UQDpJvHCpp+EGvVN+6mWH6rx7UUr8j7MSg=
Subject key identifier: 96:21:3C:3D:64:28:C2:B8:0C:84:6D:E8:FD:FF:1A:19:B9:46:10:50
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 0197B6A10B07C5DB90F52EDF773EF64BF188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 0FA8
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: gHjU3glij3jbnKbmof/YHllykVOf+daFcF5CqRynSQI=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0b:07:c5:db:90:f5:2e:df:77:3e:f6:4b:f1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=96213c3d6428c2b80c846de8fdff1a19b9461050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:de:50:b5:9e:3f:73:6a:c6:24:06:5a:15:
3c:43:3c:90:1b:6c:61:8b:c5:4c:4d:f2:d4:9a:53:
cb:52:e2:9c:1e:6b:17:72:ca:30:31:7e:01:d5:e4:
2e:28:5a:45:dc:91:b3:f3:62:04:34:04:5a:a7:d5:
77:65:98:e0:65:85:e6:85:42:a2:3d:e1:1b:30:f4:
6a:9a:82:54:7a:82:17:90:21:90:3f:7d:2c:34:9d:
37:a0:ec:61:c0:e8:f4:1d:1d:b9:1d:38:16:7d:c9:
4a:35:c0:e8:dc:4a:21:63:f7:be:f0:95:b9:8e:31:
b4:3e:55:3b:dd:fb:34:87:0d:b7:eb:80:4d:e6:0c:
4d:b6:8a:e2:95:d7:77:7a:52:c0:70:14:dc:b9:11:
8a:53:f9:f8:56:b8:de:d5:ed:27:5a:83:60:80:b2:
6b:27:d7:57:ea:ba:17:d0:d8:38:65:7a:36:d0:13:
14:4b:f3:2e:92:fa:4b:47:30:13:59:c5:29:c1:a5:
2e:16:f0:50:74:e4:f8:f3:c2:ab:c8:7d:a1:c8:b9:
08:e9:52:07:08:4e:f2:92:1b:d1:6b:02:3b:92:21:
3e:95:fc:33:90:fb:a2:17:1c:c5:de:73:62:1d:72:
51:07:e3:be:a3:2a:79:9f:66:a3:52:b2:f0:11:5c:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:3C:3D:64:28:C2:B8:0C:84:6D:E8:FD:FF:1A:19:B9:46:10:50
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:07:59:1c:86:30:ba:72:d9:91:3b:2a:c6:5f:23:a9:4d:
00:b1:a4:fc:a4:a6:47:bb:b5:2e:ba:2d:dc:34:fd:c7:95:25:
e4:83:ff:95:4f:8d:6e:1a:a6:ee:68:b4:43:b4:0e:a8:dc:1c:
9f:75:51:6b:5a:8e:39:4d:3f:12:87:0e:1d:63:cd:88:cd:0a:
24:38:0b:20:59:5d:9d:f8:20:96:4d:11:2f:06:0d:5c:65:f3:
65:04:e2:5d:06:07:5b:a9:c5:80:f1:d1:c2:31:6b:62:67:9e:
22:d0:1d:10:e8:61:d7:5d:d6:e7:e3:30:dd:d6:b2:e6:7c:3d:
cb:c6:5e:8b:0f:7f:af:a6:42:10:29:00:05:01:17:a2:28:6b:
8f:94:f3:8b:c1:56:be:eb:52:b7:52:a1:54:b4:a2:09:31:9c:
ea:8e:67:d0:36:55:88:3e:86:96:3c:70:29:13:27:9f:90:5b:
c8:55:c5:4a:07:59:98:4b:84:aa:54:30:c8:a9:aa:db:9e:4a:
17:bc:f6:a7:4f:89:e1:9f:8e:00:51:5d:80:6f:27:d7:d5:46:
00:d4:9c:62:39:f8:fd:52:30:36:64:a8:f1:00:37:f6:07:6e:
d3:fc:b9:9d:a0:1c:84:95:1e:bf:8e:b3:2b:5c:8a:d3:4e:6d:
5e:34:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:42 2025 by rpki-client