Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: rCFN92x8/W51tT9Dadi7v2TdAqtbUpb/laW4Osl9zIc=
Subject key identifier: EC:6C:9D:F4:91:10:AE:BA:76:AA:BA:BB:00:DA:8F:CC:59:B6:E6:48
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019771F5E079BB34B7B3AC4406D1A2CBF863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:00:28 +0000
Manifest this update: Sun 15 Jun 2025 05:00:28 +0000
Manifest next update: Mon 16 Jun 2025 05:00:28 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: WkDS8EbnWA+mCPph/mJWA3UaOy5vV7ki20VPYOBUm/w=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:e0:79:bb:34:b7:b3:ac:44:06:d1:a2:cb:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jun 15 05:00:28 2025 GMT
Not After : Jun 16 05:00:28 2025 GMT
Subject: CN=ec6c9df49110aeba76aababb00da8fcc59b6e648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:03:22:72:6e:88:54:55:46:85:f4:ce:e5:
4f:0f:7a:9f:5a:1b:fc:13:69:73:98:b2:c1:73:b7:
c0:fd:26:b3:d0:b0:f3:1b:a6:76:30:be:79:0f:44:
fa:d4:7d:4f:f5:92:29:f6:bc:62:8b:fb:c6:87:7d:
42:e1:45:cf:3d:89:3d:e7:1e:10:f7:13:63:14:49:
06:72:2c:18:d0:f3:b5:e7:5b:58:9d:d8:4b:12:f2:
33:a7:50:0b:20:ff:5f:de:9d:a8:00:79:9c:bd:79:
ad:de:78:89:64:49:d6:f0:6e:3d:3b:d8:1d:03:c4:
c7:9b:13:37:db:b0:ce:23:e6:fe:7a:47:84:75:5e:
dd:85:60:f0:b7:b5:dd:d7:e5:3c:07:22:70:b3:37:
2b:d5:c0:52:db:fd:3c:b0:85:77:b4:82:8c:d4:a6:
12:be:9d:1a:39:9a:0d:5a:9d:0c:56:82:79:80:c0:
e5:78:26:41:d5:5c:58:7c:50:a3:7f:ca:66:f1:1b:
7d:bf:3d:dc:81:21:e1:cf:d9:62:d9:ba:0d:08:d4:
b0:c3:6e:6e:10:dd:e3:19:0f:be:b1:62:d4:2b:75:
61:78:cb:2f:d3:f4:85:54:8f:70:1e:3a:aa:c6:ac:
98:4c:9d:08:90:81:62:92:d6:ec:68:00:f6:16:9a:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:9D:F4:91:10:AE:BA:76:AA:BA:BB:00:DA:8F:CC:59:B6:E6:48
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:20:e5:7c:ac:8e:ca:7d:f6:77:c6:c5:8f:bf:69:99:b7:
fe:82:24:71:d9:b9:0c:2b:bc:5a:6e:82:23:86:e4:d2:c4:ad:
50:d0:57:92:21:49:94:64:81:6a:2e:7c:64:9c:14:45:c6:94:
ed:fb:47:11:8b:ec:05:10:a2:6b:cc:70:5e:c4:b3:9d:34:7e:
5e:f8:74:5b:72:ae:ff:f6:72:32:31:25:0e:ea:5e:f2:7b:fa:
8d:2d:6d:67:86:5d:a0:8d:cc:ea:20:9c:f1:98:87:85:60:6b:
0e:74:77:c8:96:10:c3:5a:df:76:5b:e8:e7:9c:18:ee:5a:ec:
9e:f0:0b:df:8c:63:b0:d8:f9:0c:10:c5:4f:eb:a7:a2:6e:a8:
a7:da:95:32:61:de:e5:5e:b0:ce:48:d2:45:c5:c4:eb:d6:a8:
6d:d5:eb:1e:5f:4e:30:56:d9:8a:a2:6f:52:e5:c2:78:68:5e:
38:cf:68:c8:88:35:50:0d:24:2b:cf:eb:30:08:7a:9d:b0:96:
da:83:fd:15:fe:35:ed:cc:8c:98:a2:9c:6b:26:a4:d8:b3:b9:
0a:17:a3:4d:e1:4f:ef:d5:9e:46:6d:f5:99:26:3e:2b:ff:14:
35:a2:04:05:78:fe:e2:08:49:6b:c3:6d:4d:c1:07:4e:0a:19:
0c:67:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:02 2025 by rpki-client