Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: 6QTTp8kcVOvzYwRdx8lIe/Yu1VhoAspra9usCXCJpdw=
Subject key identifier: 75:6C:C6:A6:5B:96:4A:BE:B3:34:EA:1B:5F:F0:BF:F1:DE:2A:93:F0
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 019873E21C31C128D77C7997CBCD6A4CF9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 100A
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: 5m0pZ9LTj5w6RubB+naf3/0r6T/BwHf5eWoT2g4MkBE=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1c:31:c1:28:d7:7c:79:97:cb:cd:6a:4c:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=756cc6a65b964abeb334ea1b5ff0bff1de2a93f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:a9:a2:4d:74:a4:97:0d:4b:9d:19:4b:bc:
83:24:72:ae:22:be:90:fa:a9:0c:2a:84:62:98:ea:
d6:ff:65:3e:c4:8f:11:88:e6:d1:ab:a2:8b:fa:30:
4f:9c:56:b2:9c:b7:57:eb:56:2f:42:60:98:f8:9a:
8d:13:3c:43:c5:ad:42:50:07:9a:bb:e8:93:8d:c6:
bd:69:28:a0:33:58:f7:a5:5e:41:65:ee:ea:23:17:
17:19:87:90:08:10:05:3f:9a:4e:3c:be:0f:00:d8:
42:b0:ce:6a:5a:aa:95:56:69:e0:dd:57:05:df:05:
bb:1c:d5:87:fc:26:ac:ae:b6:88:77:ae:98:b7:67:
ec:b8:26:15:c9:43:db:c0:cb:d8:c2:07:aa:fe:60:
c8:98:08:9f:f4:88:b0:b5:6b:97:1b:9e:ac:63:d3:
41:fa:d2:fe:a0:80:58:34:a6:18:77:11:0d:11:86:
82:ce:84:b9:03:36:a9:b4:26:47:74:d3:a0:dc:09:
b1:42:1e:9e:3e:3d:90:4b:de:7c:65:3e:ba:a8:46:
f7:22:c9:4c:65:c2:c0:7b:2b:85:7b:7a:e2:cd:15:
6e:03:64:20:37:8e:c9:93:0b:87:59:19:8b:d7:fa:
8c:53:44:8f:f6:91:0b:28:0f:11:f0:d7:14:dd:48:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:C6:A6:5B:96:4A:BE:B3:34:EA:1B:5F:F0:BF:F1:DE:2A:93:F0
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:49:81:c1:0e:a8:d6:27:7a:58:10:99:b3:3d:22:ba:12:
5e:3e:57:1d:49:4d:59:0e:6f:ab:90:80:39:94:46:a9:98:a3:
b5:77:a9:05:e8:6c:88:d0:1d:19:23:3f:32:9d:29:2b:e0:62:
71:4a:b9:1e:15:c9:63:c8:fe:1d:4c:7c:85:5c:80:0c:d6:f2:
32:82:54:94:fc:62:ed:0a:43:b1:66:b2:e6:2f:80:6c:5e:f2:
d9:74:19:56:39:85:3d:da:10:17:1a:70:63:e9:48:a5:b1:b8:
dc:8d:76:98:c9:be:af:d7:cf:3c:28:5b:08:bb:ce:58:2c:a4:
86:a1:85:09:41:7f:23:97:8e:4b:57:c2:b5:ac:0a:11:d5:40:
ee:e1:59:bb:95:56:77:a6:56:4d:bd:4a:15:f8:f5:52:6c:14:
60:f2:ad:f9:ba:aa:61:d0:6a:7b:e5:9c:3b:ac:ef:48:22:a6:
d2:c7:6d:56:35:f3:9b:f8:70:71:0e:c5:ce:78:c8:09:66:2d:
88:77:76:e3:5e:c1:44:5d:04:6e:b9:93:cd:02:22:29:88:de:
f2:62:3f:26:9f:c4:d6:1f:38:21:d3:9a:67:e5:df:99:8a:a9:
ce:3c:35:ef:0f:68:c5:28:3c:ad:fe:1b:90:12:63:87:62:d3:
53:65:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:36 2025 by rpki-client