Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: L84FMyMCobrD23xGz/sUTJJ/1OF3B2rS0uTFc5i9t+I=
Subject key identifier: 35:A5:28:C3:25:57:86:F7:31:8A:E2:AF:A6:62:97:C2:73:09:80:E7
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 019A1EAE2E2CA771834C13100547BA1CE954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 10E7
Signing time: Sun 26 Oct 2025 04:02:02 +0000
Manifest this update: Sun 26 Oct 2025 04:02:02 +0000
Manifest next update: Mon 27 Oct 2025 04:02:02 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: 2HoIWT6OUK0c6GlgI0BDl064vvG+cQOzaNpiMeZlsjc=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ae:2e:2c:a7:71:83:4c:13:10:05:47:ba:1c:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Oct 26 04:02:02 2025 GMT
Not After : Oct 27 04:02:02 2025 GMT
Subject: CN=35a528c3255786f7318ae2afa66297c2730980e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:d4:14:b1:1a:75:3a:a1:c4:39:08:cd:cb:
6c:8d:90:f7:c5:f6:68:fa:d2:4e:6b:13:48:e3:a5:
67:36:c3:d3:e2:de:0a:2b:f0:98:39:1d:df:ba:95:
b7:19:65:81:98:b0:e2:76:9a:0e:d5:0f:e7:46:d1:
3f:59:88:af:83:c7:82:cb:c0:36:19:ea:3f:84:3d:
87:1d:d4:6c:39:0a:ad:53:a0:78:bd:dd:3c:9d:cd:
3c:d5:80:de:36:18:a8:92:8a:05:b0:44:a4:3e:a0:
80:2f:c2:d8:4d:01:57:48:5e:19:54:eb:7b:1e:0f:
2f:80:c5:49:45:e7:60:93:63:05:35:10:e3:48:7a:
50:f6:52:3a:9b:7b:47:72:1c:45:92:d6:db:ac:d2:
b9:0d:20:82:84:42:08:45:62:12:23:73:aa:09:11:
09:6c:d0:76:24:41:79:ff:97:21:71:34:cf:b6:2a:
d6:48:c7:de:22:63:18:19:54:4b:47:e0:f0:a1:54:
52:f2:79:86:7b:d5:e3:8d:22:14:0d:ad:8b:60:ea:
ae:2b:37:60:0c:38:5f:ac:05:6f:79:56:d6:65:f9:
75:cb:a3:ab:02:94:4d:7f:10:1c:32:4e:b3:78:e2:
b4:30:c6:0a:0e:d2:46:21:ab:c1:ea:25:b4:61:e3:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:28:C3:25:57:86:F7:31:8A:E2:AF:A6:62:97:C2:73:09:80:E7
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:0b:1a:e9:26:b4:a0:5c:06:47:94:cb:9b:2f:3a:f6:a3:
26:b9:2c:a1:49:11:b5:85:36:25:a1:71:ca:b9:c9:32:16:05:
49:53:b6:02:e3:3a:63:d9:69:b1:aa:1b:5b:38:fa:ca:61:a8:
35:58:48:54:af:3c:22:ec:f7:5e:05:bf:23:c1:5d:8d:80:77:
0a:58:3f:21:9f:10:f3:05:1e:d1:7f:42:d6:8b:5d:f8:4e:35:
5f:5d:3d:b9:ad:08:d2:d1:a5:12:40:f5:be:32:d1:14:62:97:
63:f8:7c:23:da:ae:46:b3:7c:c3:48:ae:19:64:d6:dc:f1:d1:
42:b8:f4:f1:d4:32:a6:8f:dd:70:88:eb:2b:c1:8e:ea:f6:23:
fe:83:02:6b:93:40:d7:2f:ae:97:a6:11:91:a3:78:da:0d:48:
8d:93:96:0c:5a:09:cb:f2:da:08:af:bb:42:56:cc:8f:3a:77:
1d:3f:30:d5:b0:17:62:9f:0d:e1:4c:ad:95:31:cb:54:e5:1b:
6e:3d:e1:57:2c:9e:e5:20:9e:7d:2b:6c:42:bc:ba:51:d5:6f:
46:6f:87:f7:b9:aa:27:39:65:6b:19:83:ee:b9:93:1c:49:48:
9b:bd:46:35:71:db:9b:98:6a:94:d1:6d:dc:f4:80:8e:aa:ca:
5f:0e:ac:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoeri4sp3GDTBMQBUe6HOlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjFkMGExZDc5NTNjZjNiODYwOGFkYzEwMjBiMjZhMWI2
ZDZhZTcwHhcNMjUxMDI2MDQwMjAyWhcNMjUxMDI3MDQwMjAyWjAzMTEwLwYDVQQD
EygzNWE1MjhjMzI1NTc4NmY3MzE4YWUyYWZhNjYyOTdjMjczMDk4MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYHUFLEadTqhxDkIzctsjZD3xfZo
+tJOaxNI46VnNsPT4t4KK/CYOR3fupW3GWWBmLDidpoO1Q/nRtE/WYivg8eCy8A2
Geo/hD2HHdRsOQqtU6B4vd08nc081YDeNhiokooFsESkPqCAL8LYTQFXSF4ZVOt7
Hg8vgMVJRedgk2MFNRDjSHpQ9lI6m3tHchxFktbbrNK5DSCChEIIRWISI3OqCREJ
bNB2JEF5/5chcTTPtirWSMfeImMYGVRLR+DwoVRS8nmGe9XjjSIUDa2LYOquKzdg
DDhfrAVveVbWZfl1y6OrApRNfxAcMk6zeOK0MMYKDtJGIavB6iW0YeOS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWlKMMlV4b3MYrir6Zil8JzCYDnMB8GA1UdIwQY
MBaAFAth0KHXlTzzuGCK3BAgsmobbWrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUt
NDcyMjBkMzE4YjRjLzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUtNDcyMjBkMzE4YjRj
LzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz8LGukm
tKBcBkeUy5svOvajJrksoUkRtYU2JaFxyrnJMhYFSVO2AuM6Y9lpsaobWzj6ymGo
NVhIVK88Iuz3XgW/I8FdjYB3Clg/IZ8Q8wUe0X9C1otd+E41X109ua0I0tGlEkD1
vjLRFGKXY/h8I9quRrN8w0iuGWTW3PHRQrj08dQypo/dcIjrK8GO6vYj/oMCa5NA
1y+ul6YRkaN42g1IjZOWDFoJy/LaCK+7QlbMjzp3HT8w1bAXYp8N4UytlTHLVOUb
bj3hVyye5SCefStsQry6UdVvRm+H97mqJzllaxmD7rmTHElIm71GNXHbm5hqlNFt
3PSAjqrKXw6s9A==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:10:42 2025 by rpki-client