Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: 4XxzQbmMlN+7Zp4snDmfTfBBfBtMRxrmuXTtiqM+tpA=
Subject key identifier: 21:A9:B2:CF:98:4F:A4:A7:D6:B4:5A:B0:0E:BC:3F:93:B9:82:97:23
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 0198439B02877AB1382C6F236C47F5A60E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 0FF1
Signing time: Fri 25 Jul 2025 22:01:28 +0000
Manifest this update: Fri 25 Jul 2025 22:01:28 +0000
Manifest next update: Sat 26 Jul 2025 22:01:28 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: QNr0ezfq3yrGEds0SJar+FuEOqm/nUFtlLl+AS0awyw=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:02:87:7a:b1:38:2c:6f:23:6c:47:f5:a6:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Jul 25 22:01:28 2025 GMT
Not After : Jul 26 22:01:28 2025 GMT
Subject: CN=21a9b2cf984fa4a7d6b45ab00ebc3f93b9829723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:19:99:70:52:ee:8f:8c:46:a4:07:23:82:
61:26:1c:93:10:6a:be:28:17:a6:32:eb:98:d4:0c:
ab:2c:29:0f:9c:e3:3d:9c:74:0e:aa:7b:e7:2a:70:
86:ad:31:fe:35:64:64:df:73:0d:ee:c5:0f:33:3a:
20:e8:51:c2:a8:80:97:b7:3c:fa:bd:4f:2d:eb:28:
a9:67:26:9d:6a:09:51:0d:da:8f:d6:28:06:4b:0b:
9f:50:83:4c:70:8a:9c:8b:de:28:15:da:61:9d:9a:
bb:2f:6b:07:e2:df:e2:a5:71:b1:95:47:9a:c4:c0:
0d:d0:b1:fa:27:13:d7:b2:49:0d:00:12:93:36:ef:
9f:65:dc:80:e2:f2:ac:8f:69:47:0e:aa:7b:10:3f:
29:fa:4e:17:20:2e:69:24:f4:af:42:43:50:27:ee:
97:de:d0:cb:26:33:80:aa:91:97:41:62:ad:6c:ef:
35:22:fc:8f:e7:d1:ce:27:c3:d4:59:d9:a4:7a:9a:
39:47:29:2d:5a:a1:56:58:bc:62:18:f6:48:28:42:
c9:ba:06:9a:78:48:8f:e0:d8:7e:24:05:fc:60:02:
2c:b4:38:75:5e:d2:4a:22:94:40:5c:da:3b:99:84:
f7:71:2e:ae:ed:ca:70:c6:9e:79:b9:8c:ed:c3:e7:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:B2:CF:98:4F:A4:A7:D6:B4:5A:B0:0E:BC:3F:93:B9:82:97:23
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:a9:2f:c6:68:cb:08:2d:e2:40:a1:16:19:a9:4c:da:2a:
2d:60:02:c5:72:4f:7c:d8:46:01:3c:0b:19:81:47:21:9d:ef:
a7:87:fd:d6:65:c5:64:2e:93:db:c9:a5:09:29:5f:82:5b:b3:
57:32:3f:c1:5b:3d:a7:ba:21:a7:2b:1e:76:20:b7:81:ab:c3:
9d:67:4e:fd:d3:80:92:df:22:6b:d7:1e:0f:0e:2f:cd:e8:1c:
9b:fe:3d:21:a2:46:19:58:d7:00:fa:7f:3b:16:f7:c1:d4:9a:
4f:2f:68:30:98:c2:2c:ae:31:9e:b3:89:a7:6b:44:f3:48:25:
8f:e3:81:f4:50:f6:c0:a1:91:8f:b4:ab:c1:a5:7d:f3:02:61:
17:c9:c0:e5:21:fa:51:35:70:89:2c:9f:08:57:a0:6d:82:9b:
e9:6a:fe:79:1e:e9:5c:ce:e2:19:63:e7:85:bc:89:80:5a:f2:
4a:d9:a0:71:97:a3:0b:9d:51:ee:6d:8c:81:a0:82:89:76:95:
9a:0c:8a:96:d1:8e:b9:16:68:e0:d1:6f:56:93:fe:e2:30:48:
59:34:b7:c8:cf:26:28:cd:a5:42:fe:35:44:03:e2:f8:43:e4:
eb:b7:32:63:4e:c6:03:51:a8:89:56:3f:8f:9b:64:f4:f2:e2:
b5:13:86:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmwKHerE4LG8jbEf1pg5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjFkMGExZDc5NTNjZjNiODYwOGFkYzEwMjBiMjZhMWI2
ZDZhZTcwHhcNMjUwNzI1MjIwMTI4WhcNMjUwNzI2MjIwMTI4WjAzMTEwLwYDVQQD
EygyMWE5YjJjZjk4NGZhNGE3ZDZiNDVhYjAwZWJjM2Y5M2I5ODI5NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycEZmXBS7o+MRqQHI4JhJhyTEGq+
KBemMuuY1AyrLCkPnOM9nHQOqnvnKnCGrTH+NWRk33MN7sUPMzog6FHCqICXtzz6
vU8t6yipZyadaglRDdqP1igGSwufUINMcIqci94oFdphnZq7L2sH4t/ipXGxlUea
xMAN0LH6JxPXskkNABKTNu+fZdyA4vKsj2lHDqp7ED8p+k4XIC5pJPSvQkNQJ+6X
3tDLJjOAqpGXQWKtbO81IvyP59HOJ8PUWdmkepo5RyktWqFWWLxiGPZIKELJugaa
eEiP4Nh+JAX8YAIstDh1XtJKIpRAXNo7mYT3cS6u7cpwxp55uYztw+eLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGpss+YT6Sn1rRasA68P5O5gpcjMB8GA1UdIwQY
MBaAFAth0KHXlTzzuGCK3BAgsmobbWrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUt
NDcyMjBkMzE4YjRjLzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUtNDcyMjBkMzE4YjRj
LzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPapL8Zo
ywgt4kChFhmpTNoqLWACxXJPfNhGATwLGYFHIZ3vp4f91mXFZC6T28mlCSlfgluz
VzI/wVs9p7ohpysediC3gavDnWdO/dOAkt8ia9ceDw4vzegcm/49IaJGGVjXAPp/
Oxb3wdSaTy9oMJjCLK4xnrOJp2tE80glj+OB9FD2wKGRj7SrwaV98wJhF8nA5SH6
UTVwiSyfCFegbYKb6Wr+eR7pXM7iGWPnhbyJgFryStmgcZejC51R7m2MgaCCiXaV
mgyKltGOuRZo4NFvVpP+4jBIWTS3yM8mKM2lQv41RAPi+EPk67cyY07GA1GoiVY/
j5tk9PLitROGMA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:03:01 2025 by rpki-client