Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier: B2PgN9FIBvP3dS8IqIDJZnCc6mux0UuST/bHDXPpPmA=
Subject key identifier: 66:86:8A:88:9A:0C:59:F3:EC:60:71:65:55:5B:B2:26:7E:96:4E:E0
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial: 01988B7D6E37667F9FCE13B8EF3B606BEC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 21:01:49 +0000
Manifest this update: Fri 08 Aug 2025 21:01:49 +0000
Manifest next update: Sat 09 Aug 2025 21:01:49 +0000
Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: WrwO+2vKFcbFgsLls4Vhox9qU2PLafUMgkY1FnNzngI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:6e:37:66:7f:9f:ce:13:b8:ef:3b:60:6b:ec:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Validity
Not Before: Aug 8 21:01:49 2025 GMT
Not After : Aug 9 21:01:49 2025 GMT
Subject: CN=66868a889a0c59f3ec607165555bb2267e964ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:2c:e0:18:4b:1d:7d:47:4d:b4:7e:ac:0c:
c0:94:91:ae:c4:9f:94:35:cb:fe:97:3b:b8:a3:8f:
e6:27:31:2a:e9:10:7d:ee:e6:2d:53:1c:5f:58:e9:
ba:dc:5c:df:f7:7f:57:f9:12:39:8a:54:f8:46:f0:
70:33:ae:a6:c0:09:d8:da:17:b2:88:f5:61:70:83:
c2:40:2b:2f:9d:92:4e:91:3b:8f:83:c9:1e:2f:80:
10:ce:fd:f1:55:0a:ba:b3:47:42:a8:db:cc:20:a0:
41:02:77:50:9e:42:86:f0:e3:08:e7:9f:93:f2:9d:
85:a7:d4:d4:d9:97:2d:46:b0:64:3e:a8:8d:e9:af:
53:93:fd:82:db:34:ad:44:cb:7c:93:3a:03:4c:6b:
39:be:1a:bd:f6:ac:8b:39:f6:0f:32:89:63:1b:a4:
7b:4c:6c:1d:1c:77:83:3e:ae:44:2d:d7:bc:0f:82:
14:23:3e:9b:e6:f8:4e:af:60:cb:4f:ca:7c:eb:91:
1c:f3:c9:a7:bf:b3:91:ae:58:c4:c0:7f:ff:7a:7e:
19:74:fa:9d:dd:08:26:fa:28:86:9f:50:f0:1d:50:
bf:98:a4:18:72:3f:52:05:bb:be:95:f9:11:72:24:
02:44:eb:02:55:20:52:3c:4d:b2:65:de:a3:da:b9:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:8A:88:9A:0C:59:F3:EC:60:71:65:55:5B:B2:26:7E:96:4E:E0
X509v3 Authority Key Identifier:
keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:67:7c:f8:a4:9d:61:2d:9a:e0:49:04:de:93:6c:8e:6a:
ec:50:02:8a:72:d2:13:43:2a:aa:a7:aa:b5:bb:25:3b:32:52:
1b:96:dc:42:53:0a:7e:18:d5:08:89:31:ca:9f:c2:fb:e4:86:
e0:7f:e4:30:ee:31:3e:18:3f:32:21:9f:7b:0b:b9:2e:5e:b2:
d4:c8:1d:db:ef:1f:71:4f:eb:f4:ca:d9:aa:fc:ed:d1:8b:50:
92:c2:2a:32:6b:f2:22:0b:dd:e2:b5:d4:16:a4:47:53:ad:78:
07:be:5d:de:8b:14:35:93:f1:a0:e2:b2:94:90:03:d2:86:b3:
1e:61:c0:67:c7:17:5b:a1:6b:06:95:83:9f:75:db:19:70:60:
f6:45:02:27:01:b4:db:32:df:1b:dd:94:7d:af:34:b3:82:d3:
46:04:a5:28:5f:f3:39:95:86:d8:aa:b9:64:5c:82:78:f5:10:
2e:4a:7d:41:85:da:a0:0e:d3:0f:d5:ca:6d:72:20:ec:31:73:
a2:d0:0a:49:f2:bf:dd:f3:44:e5:2b:86:d8:f0:a0:cb:9d:e7:
c2:cf:d3:15:f5:0d:57:a5:4d:a3:68:1e:45:f5:2b:24:e6:42:
b0:73:de:e6:30:96:dc:db:a8:eb:ad:83:a1:45:46:67:6d:b4:
90:93:cb:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfW43Zn+fzhO47ztga+xEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWNlZGU3ZTBmZmJkMzA4YWNiOTExMjEzNjhkZjhkNmNi
MmU5NjEwHhcNMjUwODA4MjEwMTQ5WhcNMjUwODA5MjEwMTQ5WjAzMTEwLwYDVQQD
Eyg2Njg2OGE4ODlhMGM1OWYzZWM2MDcxNjU1NTViYjIyNjdlOTY0ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXAs4BhLHX1HTbR+rAzAlJGuxJ+U
Ncv+lzu4o4/mJzEq6RB97uYtUxxfWOm63Fzf939X+RI5ilT4RvBwM66mwAnY2hey
iPVhcIPCQCsvnZJOkTuPg8keL4AQzv3xVQq6s0dCqNvMIKBBAndQnkKG8OMI55+T
8p2Fp9TU2ZctRrBkPqiN6a9Tk/2C2zStRMt8kzoDTGs5vhq99qyLOfYPMoljG6R7
TGwdHHeDPq5ELde8D4IUIz6b5vhOr2DLT8p865Ec88mnv7ORrljEwH//en4ZdPqd
3Qgm+iiGn1DwHVC/mKQYcj9SBbu+lfkRciQCROsCVSBSPE2yZd6j2rlEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaGioiaDFnz7GBxZVVbsiZ+lk7gMB8GA1UdIwQY
MBaAFETs7efg/70wisuREhNo341ssulhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUt
ODA5MzBiMjg0YTY5LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUtODA5MzBiMjg0YTY5
LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo41nfPik
nWEtmuBJBN6TbI5q7FACinLSE0MqqqeqtbslOzJSG5bcQlMKfhjVCIkxyp/C++SG
4H/kMO4xPhg/MiGfewu5Ll6y1Mgd2+8fcU/r9MrZqvzt0YtQksIqMmvyIgvd4rXU
FqRHU614B75d3osUNZPxoOKylJAD0oazHmHAZ8cXW6FrBpWDn3XbGXBg9kUCJwG0
2zLfG92Ufa80s4LTRgSlKF/zOZWG2Kq5ZFyCePUQLkp9QYXaoA7TD9XKbXIg7DFz
otAKSfK/3fNE5SuG2PCgy53nws/TFfUNV6VNo2geRfUrJOZCsHPe5jCW3Nuo662D
oUVGZ220kJPLtw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:44 2025 by rpki-client