Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: ntLYrTBkXgzmn+mae9C9P403iK2gCBx3ZfAjI2UNEtY=
Subject key identifier: 94:20:BE:3C:4C:6A:93:EA:15:01:E0:3A:D2:0D:BC:2D:A2:A8:6F:33
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 0198D54E57F8E5F7D90EFD31017F8CAF4412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: yeOTh5GDHGeIRutTQxRCXoKIRXOp8DPD/AX57mDAkN4=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:57:f8:e5:f7:d9:0e:fd:31:01:7f:8c:af:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=9420be3c4c6a93ea1501e03ad20dbc2da2a86f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:e8:fd:92:35:f5:32:fa:08:4f:f8:3b:ae:
1d:eb:11:41:ab:a6:b3:36:4a:97:d9:4a:bf:f5:aa:
0e:53:57:b8:64:b2:6b:62:85:2b:e4:41:6e:47:83:
0e:b1:ec:63:8f:d6:13:f4:e9:ad:bc:6b:d9:ba:c2:
ec:13:ef:d4:b0:60:28:4f:54:6b:fe:00:9a:d8:20:
a2:7f:ec:81:cd:0e:aa:35:3d:0f:45:33:c1:f1:df:
23:de:c0:b5:57:4c:c3:26:7d:28:97:27:b1:26:27:
04:48:37:60:f5:04:de:71:db:6e:3d:82:58:e9:eb:
bf:6a:5a:28:eb:9a:1f:87:fa:05:62:6b:48:6e:6f:
c1:01:ff:22:56:de:30:1e:7b:68:7d:74:a2:e7:e7:
f9:fc:99:d9:ce:0b:8a:df:41:e2:77:10:57:11:56:
bd:b2:31:8c:75:1b:fc:50:6d:ad:db:3a:f2:58:6d:
57:21:27:ee:e2:e5:dc:1c:46:2c:78:bf:09:b3:6b:
c7:2d:78:9b:f8:36:c1:4b:e9:4c:07:3d:14:ed:64:
f6:35:fb:ac:1d:9d:b4:cf:5d:ab:5f:2e:24:e8:99:
0a:e1:b6:99:4c:32:c1:50:20:d5:57:e9:71:cf:7f:
43:eb:f0:a2:26:00:02:8c:0a:f6:35:68:7d:18:53:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:BE:3C:4C:6A:93:EA:15:01:E0:3A:D2:0D:BC:2D:A2:A8:6F:33
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ea:f0:1b:6a:61:67:a0:79:9b:ee:d9:ea:9f:31:64:9a:8a:
5d:75:e6:c3:68:e5:d3:a7:4a:6a:5d:b4:dc:5f:63:a0:23:ba:
c9:46:b2:dd:40:e8:e8:39:c7:37:52:60:55:48:4b:91:53:3a:
50:b1:8c:ad:df:ab:09:47:f9:53:b3:c2:5e:54:f2:a3:42:13:
5d:4d:6c:23:e3:b2:bb:0e:79:21:39:17:b8:a4:49:6c:bd:1b:
0c:86:40:61:1a:7d:16:9f:83:17:7e:9e:93:f2:28:d5:1b:0c:
f6:f9:a1:35:29:2d:ee:74:2b:93:ca:0c:22:7f:78:0e:59:70:
0f:31:ee:ee:1a:51:ba:dd:5f:d2:d2:e1:47:68:00:ef:55:e5:
ac:8d:71:b4:50:85:b6:c7:f0:0e:20:b7:2f:7d:90:a3:8b:98:
c1:f2:c5:1d:a8:02:86:d4:a2:72:a3:ae:47:a2:ad:11:58:c2:
a6:04:18:73:c8:dc:16:9a:e8:ea:e9:1e:2b:1c:de:2f:2f:90:
18:13:12:3d:ab:7b:81:86:4b:00:ab:a2:94:5c:e9:0c:42:f4:
58:1b:d1:5e:b0:90:be:a6:60:a2:ed:16:90:18:79:81:23:c7:
01:39:ca:79:26:4c:bc:66:d8:71:58:8b:4d:8b:40:50:1e:e6:
64:8a:ea:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlf45ffZDv0xAX+Mr0QSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjUwODIzMDUwMjE3WhcNMjUwODI0MDUwMjE3WjAzMTEwLwYDVQQD
Eyg5NDIwYmUzYzRjNmE5M2VhMTUwMWUwM2FkMjBkYmMyZGEyYTg2ZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Lo/ZI19TL6CE/4O64d6xFBq6az
NkqX2Uq/9aoOU1e4ZLJrYoUr5EFuR4MOsexjj9YT9OmtvGvZusLsE+/UsGAoT1Rr
/gCa2CCif+yBzQ6qNT0PRTPB8d8j3sC1V0zDJn0olyexJicESDdg9QTecdtuPYJY
6eu/aloo65ofh/oFYmtIbm/BAf8iVt4wHntofXSi5+f5/JnZzguK30HidxBXEVa9
sjGMdRv8UG2t2zryWG1XISfu4uXcHEYseL8Js2vHLXib+DbBS+lMBz0U7WT2Nfus
HZ20z12rXy4k6JkK4baZTDLBUCDVV+lxz39D6/CiJgACjAr2NWh9GFMe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQgvjxMapPqFQHgOtINvC2iqG8zMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALurwG2ph
Z6B5m+7Z6p8xZJqKXXXmw2jl06dKal203F9joCO6yUay3UDo6DnHN1JgVUhLkVM6
ULGMrd+rCUf5U7PCXlTyo0ITXU1sI+Oyuw55ITkXuKRJbL0bDIZAYRp9Fp+DF36e
k/Io1RsM9vmhNSkt7nQrk8oMIn94DllwDzHu7hpRut1f0tLhR2gA71XlrI1xtFCF
tsfwDiC3L32Qo4uYwfLFHagChtSicqOuR6KtEVjCpgQYc8jcFpro6ukeKxzeLy+Q
GBMSPat7gYZLAKuilFzpDEL0WBvRXrCQvqZgou0WkBh5gSPHATnKeSZMvGbYcViL
TYtAUB7mZIrqpQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:07 2025 by rpki-client