Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: UcidPgECbCMQp2STJbhEXd0UhigQO2vVWRUDGJDSiEM=
Subject key identifier: 14:DC:F2:D1:72:1B:39:E3:7E:32:87:87:37:36:4E:99:DD:40:40:4B
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01988054002AE929EB232BE59B0928B45AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 17:00:45 +0000
Manifest this update: Wed 06 Aug 2025 17:00:45 +0000
Manifest next update: Thu 07 Aug 2025 17:00:45 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: nUBMExoBCKtN4f7o5DaI3Y21xBVmHxMADQzzGt6IUKs=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:00:2a:e9:29:eb:23:2b:e5:9b:09:28:b4:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Aug 6 17:00:45 2025 GMT
Not After : Aug 7 17:00:45 2025 GMT
Subject: CN=14dcf2d1721b39e37e32878737364e99dd40404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:af:4f:cd:6d:4d:3f:de:e3:f3:4c:c3:07:
19:2d:cf:37:c8:f0:ca:cb:60:5d:a7:b3:3d:df:df:
fb:61:9c:9a:bf:e6:23:26:bd:39:3c:84:3f:af:fa:
9d:e9:33:a3:c3:b0:2d:67:5e:1e:6b:cd:c5:86:73:
d4:2e:88:13:90:5d:a2:fb:64:52:89:84:4f:8d:52:
07:b6:eb:d5:8c:2e:e4:8e:1c:a1:36:5c:e8:f9:18:
36:35:f3:3a:9c:31:66:e4:5d:ff:00:91:86:57:a3:
92:63:0a:3e:64:d3:92:ad:19:19:a5:0d:03:53:d6:
36:cb:a5:75:3f:f6:55:10:5f:7f:f8:a7:6d:e6:0b:
e0:90:01:c2:ce:77:04:02:33:61:85:27:9d:cf:2e:
0d:de:85:3f:f3:5f:73:2d:35:be:b1:a9:bc:33:3c:
21:46:8d:6b:c2:e3:d0:28:4f:c4:41:6c:65:76:65:
69:0c:5d:2d:07:0c:f8:3d:df:42:8b:70:01:09:09:
29:e1:76:d3:cf:cc:d3:9e:42:7f:10:ef:95:2a:19:
30:88:91:1f:59:34:de:77:ef:b8:2d:6d:34:b9:bc:
24:0d:d8:85:41:67:b6:fb:10:d2:18:13:c9:82:b3:
db:10:e7:c0:40:c0:3b:e6:e2:b2:a9:1a:4d:f1:f8:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:F2:D1:72:1B:39:E3:7E:32:87:87:37:36:4E:99:DD:40:40:4B
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:c5:61:b9:a4:27:c4:41:e4:e3:8c:b6:92:eb:b2:bd:a3:
40:e4:bd:fa:d1:0c:7d:c3:02:1d:33:e3:d1:82:96:18:3a:9c:
25:b6:c0:1b:46:af:c9:ca:ea:cf:81:3d:57:ed:c3:8f:57:50:
6d:f9:89:1e:50:54:2b:4c:2f:de:1b:dc:ac:07:0f:ff:5a:5c:
7c:08:3d:4e:14:bf:b0:95:32:0f:ff:81:9a:65:20:17:f0:90:
85:a4:b8:0c:f4:06:4c:15:52:5d:4b:d5:2c:cf:63:e4:fc:5a:
54:e2:89:fa:e7:8a:ee:fb:36:0b:08:42:40:9b:ac:ae:3c:a7:
8a:57:74:1b:71:47:5c:28:20:a9:19:d3:3e:60:1a:75:6a:fb:
8c:be:ce:05:71:66:dc:ec:da:dd:48:ef:c0:03:47:6c:e8:66:
bf:f0:fb:31:46:a9:55:a6:52:e8:a6:b9:e5:ac:19:f4:ee:95:
38:21:f7:eb:f3:04:13:86:5e:e1:f5:55:05:f1:9a:84:4a:91:
2b:e9:b5:65:0e:d5:2c:ad:21:fe:1c:40:18:e5:69:52:4d:5a:
0d:69:fa:d3:b5:ac:b2:29:7c:96:01:95:e6:97:e5:91:97:80:
b1:b0:27:ab:9f:7e:67:07:b4:b5:e3:ce:00:0f:55:99:a0:17:
e2:d2:9c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVAAq6SnrIyvlmwkotFrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjUwODA2MTcwMDQ1WhcNMjUwODA3MTcwMDQ1WjAzMTEwLwYDVQQD
EygxNGRjZjJkMTcyMWIzOWUzN2UzMjg3ODczNzM2NGU5OWRkNDA0MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbqvT81tTT/e4/NMwwcZLc83yPDK
y2Bdp7M939/7YZyav+YjJr05PIQ/r/qd6TOjw7AtZ14ea83FhnPULogTkF2i+2RS
iYRPjVIHtuvVjC7kjhyhNlzo+Rg2NfM6nDFm5F3/AJGGV6OSYwo+ZNOSrRkZpQ0D
U9Y2y6V1P/ZVEF9/+Kdt5gvgkAHCzncEAjNhhSedzy4N3oU/819zLTW+sam8Mzwh
Ro1rwuPQKE/EQWxldmVpDF0tBwz4Pd9Ci3ABCQkp4XbTz8zTnkJ/EO+VKhkwiJEf
WTTed++4LW00ubwkDdiFQWe2+xDSGBPJgrPbEOfAQMA75uKyqRpN8fjn6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTc8tFyGznjfjKHhzc2TpndQEBLMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+TFYbmk
J8RB5OOMtpLrsr2jQOS9+tEMfcMCHTPj0YKWGDqcJbbAG0avycrqz4E9V+3Dj1dQ
bfmJHlBUK0wv3hvcrAcP/1pcfAg9ThS/sJUyD/+BmmUgF/CQhaS4DPQGTBVSXUvV
LM9j5PxaVOKJ+ueK7vs2CwhCQJusrjynild0G3FHXCggqRnTPmAadWr7jL7OBXFm
3Oza3UjvwANHbOhmv/D7MUapVaZS6Ka55awZ9O6VOCH36/MEE4Ze4fVVBfGahEqR
K+m1ZQ7VLK0h/hxAGOVpUk1aDWn607Wssil8lgGV5pflkZeAsbAnq59+Zwe0tePO
AA9VmaAX4tKcJQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:36 2025 by rpki-client