Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: kvxjmDWUirbma05J+vmodL6Rcpye4UefqlQtsaTKxZA=
Subject key identifier: C0:99:65:DE:ED:14:FF:7F:90:D5:2C:FF:3A:BF:C3:8D:EA:27:D1:A1
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 01992D4698C62650CD3726D45E08B7BF2763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 106A
Signing time: Tue 09 Sep 2025 07:00:25 +0000
Manifest this update: Tue 09 Sep 2025 07:00:25 +0000
Manifest next update: Wed 10 Sep 2025 07:00:25 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: 7wzu/Pzpm+lSGa8fU5m/MUxevfap5T0NqZvChOmg/E0=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:98:c6:26:50:cd:37:26:d4:5e:08:b7:bf:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Sep 9 07:00:25 2025 GMT
Not After : Sep 10 07:00:25 2025 GMT
Subject: CN=c09965deed14ff7f90d52cff3abfc38dea27d1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:f3:c4:f8:7e:36:7c:f3:71:d1:c6:7e:88:
c4:3f:29:a2:a5:79:31:3b:9c:a0:28:1e:a3:82:bc:
e3:d3:b6:a8:36:0f:34:53:81:12:26:76:54:82:73:
71:47:5c:0c:4f:17:cf:1c:64:f3:f6:7a:5b:18:cb:
b3:f7:74:7f:cf:57:85:d0:ce:87:fb:ca:fe:47:a5:
0c:47:48:ba:60:82:b7:e3:7f:d9:e8:17:a1:bc:17:
72:fd:cd:16:98:67:a4:a0:e0:cf:26:32:13:43:ad:
b0:5f:0b:a2:41:74:1a:4d:79:0e:c9:ed:00:6e:a7:
49:a7:a5:18:9a:80:cc:b7:e3:41:63:84:94:3f:86:
b6:5a:8a:6c:67:62:41:24:90:da:45:73:a6:d3:ed:
88:5d:93:8a:77:d3:56:5b:3a:59:26:7f:22:24:af:
51:f5:51:a2:4f:e9:24:c4:e7:46:d3:ce:0c:1d:66:
9b:62:ea:30:37:5b:09:18:a7:65:a4:0e:c9:f0:41:
3f:94:45:25:f7:0b:d7:a0:23:ec:bf:96:b8:a0:e2:
4b:7f:12:3c:62:96:10:46:0e:44:41:e8:59:92:32:
e5:ea:44:f2:7d:3b:3f:17:63:33:1b:f4:ea:d4:22:
9f:b0:6e:e9:71:f6:07:ff:03:0b:be:0a:46:a3:5a:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:65:DE:ED:14:FF:7F:90:D5:2C:FF:3A:BF:C3:8D:EA:27:D1:A1
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7f:5a:ec:39:f5:9a:83:74:3d:83:96:07:a8:c8:8b:60:95:
38:d9:10:9a:a9:9f:2a:44:fa:6d:2b:e1:4b:6c:f6:28:13:55:
4b:88:f1:1b:e8:51:1b:01:a1:18:ed:91:49:67:fb:26:d5:91:
cb:d2:2a:ef:4e:19:ec:30:e9:a5:ea:79:11:c3:f1:47:44:00:
22:9f:84:4c:ea:10:03:65:86:00:8a:5b:77:32:c6:2a:8d:36:
44:5e:a6:b7:9f:d6:47:41:d3:56:04:b0:7c:31:8f:18:11:07:
67:99:16:2d:02:13:5e:e1:a0:2e:05:62:07:cf:6f:92:50:39:
54:e4:1f:9f:11:41:92:ad:39:38:87:24:c4:d1:1d:ba:b9:93:
ad:1d:cc:b1:13:19:e8:0e:a6:9e:5c:6e:e0:f9:9d:31:d6:38:
21:38:0d:a1:57:34:11:2e:43:c0:33:1a:a1:ad:e6:a0:fc:31:
49:fd:d3:22:8a:54:48:9e:a2:7e:e9:c9:d4:69:41:10:9a:81:
b6:09:74:2b:f9:52:c0:e7:65:6e:5b:5a:74:d3:ba:52:c9:74:
01:ea:c9:83:d6:41:be:20:f0:83:85:db:de:0f:24:c7:16:f8:
cc:e5:00:5f:ea:64:b7:a1:0d:ee:7f:b6:4a:81:42:bd:9a:4a:
90:84:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:15:44 2025 by rpki-client