Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: xfk8o9AfkVAksupQZZ5nECwRGkB1kPgq06C1iGrvSq4=
Subject key identifier: C5:0D:C1:8A:DF:E9:36:CE:C1:2C:2C:0E:46:2D:3E:3F:92:2C:D2:ED
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019A53AD073B872C041B2F6D9C50868EFA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 11:00:39 +0000
Manifest this update: Wed 05 Nov 2025 11:00:39 +0000
Manifest next update: Thu 06 Nov 2025 11:00:39 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: 762yhmoyftG011zyaewBYy0QhCZh1aNgdzeg6tqwJuA=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:07:3b:87:2c:04:1b:2f:6d:9c:50:86:8e:fa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Nov 5 11:00:39 2025 GMT
Not After : Nov 6 11:00:39 2025 GMT
Subject: CN=c50dc18adfe936cec12c2c0e462d3e3f922cd2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:57:84:f7:57:50:dc:8e:ba:65:88:92:b6:
34:14:cb:34:e5:90:14:87:7a:94:72:be:50:e1:e8:
9a:97:be:55:69:9b:59:df:db:06:97:1a:0a:2e:7f:
24:4c:d4:a3:3e:db:11:03:5a:2a:cc:c2:22:ce:22:
61:31:b5:9e:f9:99:2b:00:2c:38:97:b5:df:de:64:
b3:7d:bb:d2:7d:de:77:f0:72:4d:82:14:30:77:11:
c0:0d:d4:b8:4a:b7:a1:e3:a2:b0:c6:7b:60:d0:3f:
a8:22:ff:81:b5:68:d3:ad:c1:ab:73:89:a0:ce:4d:
3d:95:9d:c8:89:81:2e:6e:57:a4:c8:4e:d6:ca:60:
03:81:0f:6e:8e:bb:8c:64:36:00:e3:77:61:04:6f:
b4:94:4e:cd:f3:d7:dc:fa:b5:d0:9d:c1:ea:c1:ad:
2a:b1:ba:18:50:ce:4b:fb:4a:f2:db:51:15:42:41:
c5:91:00:51:a9:a3:35:6f:1d:f7:4b:64:76:9f:45:
10:7d:7b:b5:60:44:78:3c:38:e3:48:c0:61:01:25:
c1:95:d3:53:7f:62:d1:45:bf:e9:b2:07:74:57:4b:
9c:ea:5b:17:0e:80:d5:26:bb:8b:1f:c0:60:18:11:
20:78:76:b6:67:9d:47:ed:53:ba:56:20:72:42:e6:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:C1:8A:DF:E9:36:CE:C1:2C:2C:0E:46:2D:3E:3F:92:2C:D2:ED
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:e0:36:83:3f:65:0e:b9:c9:13:5d:46:9a:bf:e2:6a:2e:
c2:a0:87:b3:25:a1:49:4a:ac:fa:e1:76:a5:b2:43:21:f3:46:
66:a2:5e:b8:22:76:45:89:2c:c4:8b:33:98:93:62:bd:b2:64:
c0:83:cf:78:d0:c5:53:5e:ae:e5:19:eb:31:83:63:84:af:73:
22:e6:2d:94:17:7b:d8:78:ca:b4:84:7f:79:9a:59:93:ae:37:
db:52:09:1e:45:0b:53:93:f2:42:a5:d5:0b:01:91:f7:c0:53:
c3:3c:6b:8d:df:8d:29:f7:07:0d:86:dd:37:f6:e9:95:c4:a1:
58:7d:5e:c9:66:0f:12:d6:43:d4:03:74:07:20:72:04:8f:09:
22:de:9b:71:ee:b8:94:39:34:d4:c9:87:d1:d0:63:d8:28:b0:
61:41:c9:04:2b:d1:e7:42:7b:56:1c:f7:de:7b:43:a8:5b:1f:
0c:c0:33:32:f6:ff:57:2a:2d:8a:7a:1e:bd:37:6c:dc:14:25:
3b:f7:36:3f:87:28:e2:e5:70:7e:f0:e2:ca:9b:0e:01:ce:88:
a8:6e:41:25:cc:d1:7a:35:08:e8:37:c5:33:bc:58:a8:c4:1f:
71:a1:9d:ae:b4:84:c7:a0:8e:df:16:47:59:0f:05:63:8d:40:
ba:0e:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:49 2025 by rpki-client