Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier: 7z4MFiZbHXfKx8htdkPntzTZSRrqvpk38wC0N8g5SYQ=
Subject key identifier: 4D:0D:8A:15:E0:A6:A1:6C:C1:F0:0A:C3:70:BC:D6:7B:A2:01:FD:14
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial: 019A4D74513A69A04F97A51CF9FB12D79EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: svB35UXQNUvwJZXLKSupASFHUmLbxf2M3nrb3tli+CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:51:3a:69:a0:4f:97:a5:1c:f9:fb:12:d7:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=4d0d8a15e0a6a16cc1f00ac370bcd67ba201fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:78:05:bf:f1:83:51:32:f7:dc:71:a5:53:
8f:ae:d5:e6:09:7e:f0:33:43:ac:c4:b0:2b:dc:1a:
4f:0b:59:cf:a7:7e:96:d9:ff:a8:96:bf:8b:77:18:
c3:7c:46:bb:4e:e2:71:8b:b1:6b:d6:9c:52:b9:60:
de:ce:3d:da:d2:29:4b:4a:74:3c:bd:8c:4a:84:ee:
97:d5:3c:ad:9e:4d:6a:bd:d2:2a:bc:fb:6d:80:68:
76:71:17:33:f1:cf:9f:66:51:3a:9a:02:9b:aa:03:
87:53:44:8e:71:45:17:cb:16:ea:9e:b2:a2:9e:d8:
c9:15:1d:d6:89:10:4f:09:27:4f:b7:95:47:5a:0d:
6b:59:dd:59:4e:e6:c9:48:24:ce:19:19:09:3b:75:
00:a1:a8:9e:90:24:ea:f1:69:2c:ab:97:38:34:42:
46:7d:ab:f9:38:08:4e:ac:bd:90:11:2f:2f:61:4f:
dc:4e:a2:16:7f:83:a7:ad:75:c6:d2:63:73:1b:60:
ba:01:67:89:bb:c7:8f:a6:b4:d6:9c:a0:6f:e0:ac:
ed:2d:c0:dd:a2:7e:f7:fc:8e:f9:40:8d:6e:74:18:
31:1c:fb:e7:a4:fd:1b:15:27:b2:1d:03:ae:00:ef:
e7:8c:52:a3:6e:a5:1c:fa:c9:85:c4:7a:d3:5d:92:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:8A:15:E0:A6:A1:6C:C1:F0:0A:C3:70:BC:D6:7B:A2:01:FD:14
X509v3 Authority Key Identifier:
keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:8c:bb:c0:59:2b:62:8f:0b:78:92:f6:b5:51:bb:d7:05:77:
4d:63:03:16:80:1f:72:5a:8f:6a:ec:26:8e:28:9c:1a:bc:c8:
d4:5a:bd:4c:1c:12:f9:11:a8:8a:f4:15:a3:c1:d9:29:fa:30:
07:83:e0:e0:7c:a7:c0:cb:c1:11:cc:a6:1f:8a:dc:67:90:d5:
f2:5d:74:42:e2:08:00:07:56:f8:8c:9d:3e:96:d3:1d:4f:d6:
78:c9:7f:3a:66:c7:2d:e3:8e:20:f9:d5:a0:0f:2d:da:dc:ff:
bc:a6:fa:e0:36:49:48:45:be:06:f7:d3:7d:9d:86:c6:7e:4e:
30:7a:3f:81:a3:a4:08:50:2e:cb:49:c4:30:38:e0:d0:ce:6e:
41:5d:5f:c4:1d:bc:b6:38:6e:bd:4d:ec:7b:c4:ca:cb:8a:35:
de:bf:76:25:78:aa:49:92:af:50:80:33:db:af:da:18:3e:a6:
2a:de:e9:92:c8:40:6b:22:3d:f8:32:60:05:1d:8c:be:02:2f:
3b:9f:0d:90:b4:59:27:6e:17:8b:e2:67:d5:6c:85:52:60:92:
33:a5:d5:23:a7:57:de:d6:8f:47:09:82:a8:c5:5f:3e:de:5e:
bd:0d:6b:e8:1b:db:75:8c:2b:6f:bc:fd:05:3d:0e:72:95:fc:
0d:dd:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:35 2025 by rpki-client