Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: 10Lx0Q3egRASN70C+lVkW/h1YhKlGxs74WBUy1pPYtQ=
Subject key identifier: FE:50:F4:E5:DE:DA:10:1F:E9:D7:30:62:D1:9D:81:F0:C6:17:C1:F7
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 019A4EF49F818D5ABD76BA53D0E8BF9E993A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 1100
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: zbVQg/ZC6i5vIxFLmkTkSHSNWvBHBQUIjOyCGHDuD+Q=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9f:81:8d:5a:bd:76:ba:53:d0:e8:bf:9e:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=fe50f4e5deda101fe9d73062d19d81f0c617c1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:20:54:3a:57:bf:65:2a:60:06:a6:2a:70:
79:65:be:cd:9e:cc:4c:1e:69:7c:38:8a:61:ce:54:
32:d8:35:9a:b7:88:89:f4:cb:de:d4:cd:35:54:fc:
4b:25:6c:2b:83:72:eb:69:d1:ff:dc:69:ff:67:d5:
35:08:42:94:d8:3a:d9:bf:89:20:90:9b:2a:59:de:
ce:ef:8c:6b:bd:be:94:4a:b8:2c:d3:f0:17:51:16:
06:b6:ba:68:a8:24:86:e6:f0:c8:84:e9:fb:9e:fb:
d8:f8:e5:cf:b2:f6:1d:99:a8:08:13:56:6f:c0:63:
92:b9:67:3d:bf:ce:b1:f5:e7:78:3e:63:cb:96:73:
1d:5c:2f:0d:68:98:97:a0:b8:e9:b1:b0:0b:92:c7:
e3:ed:da:bb:36:1a:fc:b0:04:5b:8a:bd:88:00:37:
e8:02:c7:eb:b2:d7:0a:ae:78:0e:41:4a:2a:ba:9f:
a7:60:da:10:a7:72:c9:3c:26:e6:98:78:9e:60:c4:
3e:6e:08:99:07:dd:7a:8c:29:a4:3b:56:29:30:ca:
5e:a6:3e:0c:d4:e3:bc:66:b9:40:7b:9b:a1:4e:e6:
a8:a3:24:98:f4:8c:ba:15:ed:e9:fa:5b:b2:44:da:
14:0e:7d:19:54:97:9f:3c:39:7a:82:2a:53:6c:4f:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:F4:E5:DE:DA:10:1F:E9:D7:30:62:D1:9D:81:F0:C6:17:C1:F7
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ea:80:eb:24:d2:27:97:a8:de:97:22:c6:8b:51:b9:a6:ec:
00:e1:41:48:a2:4a:ab:f1:03:c7:0d:fd:7f:16:60:65:5a:db:
7e:c9:28:0d:7f:11:da:6e:c6:fd:f3:a5:ef:c6:3f:09:8a:7e:
16:ae:71:b3:18:36:51:83:03:5d:9b:81:a2:f2:b2:f3:3e:e0:
58:ca:17:21:fe:3b:f3:3e:4e:90:59:55:03:8a:0c:ea:08:cb:
63:55:d4:8e:7b:3a:20:0d:cc:30:e9:5b:6f:5f:f7:a9:7c:07:
92:9a:fe:f8:12:ac:16:44:c0:9e:45:e0:d3:4b:5e:38:04:36:
d0:6c:8f:59:02:8c:10:99:93:7f:06:bd:a4:51:0d:94:3c:41:
b3:76:57:7e:cb:a7:91:94:00:29:a7:fa:29:a7:14:35:3c:13:
c5:57:8f:88:e2:87:19:2b:e8:9a:7e:5b:75:51:dc:c2:d7:59:
8b:a8:cf:97:f2:76:98:9b:f0:96:bc:8c:ba:28:72:c4:63:3e:
d4:be:80:07:b9:4d:81:49:90:9b:be:93:44:d5:30:05:09:8f:
26:d6:62:7f:36:3b:df:61:24:a4:e7:78:74:a7:1e:11:26:e8:
75:4d:fe:5b:6e:a4:93:a4:c8:4c:41:48:18:da:23:0a:e1:f3:
08:59:c9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9J+BjVq9drpT0Oi/npk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjFkMGExZDc5NTNjZjNiODYwOGFkYzEwMjBiMjZhMWI2
ZDZhZTcwHhcNMjUxMTA0MTMwMDQ1WhcNMjUxMTA1MTMwMDQ1WjAzMTEwLwYDVQQD
EyhmZTUwZjRlNWRlZGExMDFmZTlkNzMwNjJkMTlkODFmMGM2MTdjMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcogVDpXv2UqYAamKnB5Zb7NnsxM
Hml8OIphzlQy2DWat4iJ9Mve1M01VPxLJWwrg3LradH/3Gn/Z9U1CEKU2DrZv4kg
kJsqWd7O74xrvb6USrgs0/AXURYGtrpoqCSG5vDIhOn7nvvY+OXPsvYdmagIE1Zv
wGOSuWc9v86x9ed4PmPLlnMdXC8NaJiXoLjpsbALksfj7dq7Nhr8sARbir2IADfo
AsfrstcKrngOQUoqup+nYNoQp3LJPCbmmHieYMQ+bgiZB916jCmkO1YpMMpepj4M
1OO8ZrlAe5uhTuaooySY9Iy6Fe3p+luyRNoUDn0ZVJefPDl6gipTbE+pJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5Q9OXe2hAf6dcwYtGdgfDGF8H3MB8GA1UdIwQY
MBaAFAth0KHXlTzzuGCK3BAgsmobbWrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUt
NDcyMjBkMzE4YjRjLzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jMmMyNzEtMTcxYS00MTkwLWJmZDUtNDcyMjBkMzE4YjRj
LzEvQzJIUW9kZVZQUE80WUlyY0VDQ3lhaHR0YXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuqA6yTS
J5eo3pcixotRuabsAOFBSKJKq/EDxw39fxZgZVrbfskoDX8R2m7G/fOl78Y/CYp+
Fq5xsxg2UYMDXZuBovKy8z7gWMoXIf478z5OkFlVA4oM6gjLY1XUjns6IA3MMOlb
b1/3qXwHkpr++BKsFkTAnkXg00teOAQ20GyPWQKMEJmTfwa9pFENlDxBs3ZXfsun
kZQAKaf6KacUNTwTxVePiOKHGSvomn5bdVHcwtdZi6jPl/J2mJvwlryMuihyxGM+
1L6AB7lNgUmQm76TRNUwBQmPJtZifzY732EkpOd4dKceESbodU3+W26kk6TITEFI
GNojCuHzCFnJaA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:13 2025 by rpki-client