Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: QlSEqblcCEE0lsLqXG0BJzakE3PZC/Mb/JQLpp+t4B8=
Subject key identifier: 38:88:E7:53:28:3A:2D:6C:27:54:C5:34:16:1F:8D:5C:0C:BD:18:E0
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 0199FDDA58F711B75BB07B0C86DDC0914237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 10D6
Signing time: Sun 19 Oct 2025 19:02:49 +0000
Manifest this update: Sun 19 Oct 2025 19:02:49 +0000
Manifest next update: Mon 20 Oct 2025 19:02:49 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: wWGpHcgK0cD+kAqsM9htN6+TyjOIvVyCYykl46yyxFM=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:58:f7:11:b7:5b:b0:7b:0c:86:dd:c0:91:42:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Oct 19 19:02:49 2025 GMT
Not After : Oct 20 19:02:49 2025 GMT
Subject: CN=3888e753283a2d6c2754c534161f8d5c0cbd18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:01:42:f5:78:d2:6a:6b:bf:21:21:c5:2b:
82:24:a9:5c:72:80:1c:89:42:ce:70:5a:2a:33:89:
60:c7:89:c0:1b:52:60:80:fc:22:bf:c3:7a:2c:00:
7d:ee:cf:04:2f:c3:00:b1:1a:a2:93:e0:8b:cd:d1:
1b:40:fb:ea:72:e2:41:9f:46:6a:19:8d:3e:c5:ef:
e4:fc:9b:c5:45:e3:36:28:73:4f:30:39:98:b8:43:
d4:01:21:ce:c2:bb:e6:1a:69:33:74:c2:e7:f9:c6:
11:7e:ce:d1:85:27:f9:f7:cf:11:cf:ea:c2:28:b0:
15:45:8c:77:ac:64:e7:ee:59:e7:5b:bf:fd:11:cf:
69:9b:c1:bd:45:7d:34:00:49:65:dd:e1:6d:d0:0e:
7c:21:6b:40:fd:44:24:44:28:b9:d6:1b:16:9c:29:
39:e1:b8:90:30:66:e1:5d:99:6c:d2:04:43:c0:01:
a2:a7:e7:76:80:97:62:47:77:2f:bd:25:a8:a9:46:
a6:27:81:07:64:90:8a:43:8f:d0:42:4d:4e:6f:b3:
5d:98:07:c9:ac:ef:8f:c2:c9:42:9d:ab:d7:6e:f0:
f6:0a:04:9b:31:db:fc:33:a1:df:79:e6:4c:51:de:
f0:cd:c0:0b:4c:51:70:6e:54:34:ca:8a:28:b3:26:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:E7:53:28:3A:2D:6C:27:54:C5:34:16:1F:8D:5C:0C:BD:18:E0
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:0e:f5:08:50:44:ab:5d:14:7e:4e:f1:eb:14:e6:f5:d5:
21:27:ca:7c:d5:61:6c:25:75:4b:d2:1e:45:64:b4:10:be:9a:
00:41:39:e5:be:1f:bc:b6:8d:62:be:9a:5d:50:7e:dc:96:72:
99:f0:da:da:62:cf:25:99:81:b0:47:29:fb:d7:03:6a:0a:ac:
8d:38:e0:8a:6d:4f:70:2c:83:d0:f7:f4:04:29:88:81:08:87:
b7:ca:3a:a5:5f:80:38:eb:b0:ac:ab:07:03:19:87:36:1c:13:
6b:33:60:8f:7c:4b:81:1a:7e:46:3c:a8:4d:fe:c6:4e:41:06:
7e:9e:37:24:14:a2:66:e5:84:94:c1:ea:4c:16:35:87:88:f4:
22:30:ec:72:e1:01:64:d3:2d:df:6b:be:6a:ff:b9:48:05:e1:
48:63:92:61:f0:c1:38:e0:18:a8:26:8e:36:a2:b4:5b:93:a2:
de:0a:c1:7d:f2:e6:8c:38:ae:f6:79:b7:62:d6:1b:d8:29:f3:
40:13:32:e0:b5:8f:0d:e0:f0:9f:6c:5f:75:c6:ab:58:89:93:
b3:94:bd:c0:8a:a7:93:50:16:ca:21:b3:f2:0e:a1:9d:48:7a:
07:47:ad:a3:16:03:de:15:a7:41:07:4a:9e:81:5b:ae:a0:61:
87:dc:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:54 2025 by rpki-client