Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: gzY4ivphfr8TG1Eoewf2OHodO+sd8IPAKFwHKh9Hvjw=
Subject key identifier: 50:EA:14:A6:34:6A:06:5A:00:C1:3F:2D:24:DA:5F:AF:40:19:42:1E
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 0197B77C74833BAD99AC77BAD39D02768691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: vXmO0ZLggnZ/hLQdYLCEAaMHZ84iSYZr0BUtTYpYMxw=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:74:83:3b:ad:99:ac:77:ba:d3:9d:02:76:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=50ea14a6346a065a00c13f2d24da5faf4019421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:61:1e:84:c2:31:5c:1f:2b:a3:f4:2f:ed:
31:22:75:94:c3:34:33:48:40:b0:fa:6b:bd:a7:d9:
98:2a:97:51:2c:3b:6c:87:f9:21:07:02:bd:4e:5b:
9c:8c:be:84:4b:4a:f1:05:b9:14:6c:9c:e4:20:27:
30:9a:77:97:8f:47:5e:6e:35:ef:d5:cf:fe:5c:62:
d2:3b:75:70:c8:91:0c:21:46:6d:c8:c7:16:0c:26:
ad:ce:a4:08:2a:9f:ed:5d:3b:95:6b:dc:04:8f:4c:
16:6b:4c:8b:94:92:41:a6:fd:42:d1:73:ec:a1:40:
a3:2a:76:5f:14:ac:d0:d7:84:ce:91:61:39:b4:21:
95:ce:6d:e4:6e:4f:c3:2e:39:6e:5d:9d:38:17:cf:
91:5f:5a:71:ee:c8:36:d2:fc:6f:29:bc:1f:8b:7b:
7b:32:65:9e:b9:96:a9:9f:a4:25:9e:ef:06:2b:cd:
85:6b:01:c5:f6:23:b9:20:98:56:5e:44:23:89:b1:
9f:15:cf:23:29:25:e7:14:6a:98:67:8c:ec:85:20:
e6:06:7b:2b:4e:59:63:49:9a:a5:d0:c9:9b:1c:7e:
22:f9:05:f5:53:a8:d6:4d:97:97:8b:f2:c8:3c:ac:
ac:73:02:79:3e:9f:02:07:7c:5b:a3:c6:88:1f:d9:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:14:A6:34:6A:06:5A:00:C1:3F:2D:24:DA:5F:AF:40:19:42:1E
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0d:3f:18:18:54:3b:24:81:81:9e:55:6d:e7:94:27:04:97:
a9:b0:e1:ff:be:47:56:12:4b:56:ad:f6:62:c6:f1:fa:2a:4f:
be:96:de:97:f4:e8:b1:ab:dc:a1:70:b9:20:5d:e5:f0:a9:8e:
e3:27:3b:27:8b:1b:a6:5d:a7:9f:a5:83:09:e5:d6:87:25:8a:
0f:0f:46:16:00:9c:85:18:d3:ce:74:03:34:7e:2f:79:a2:cd:
4b:ff:14:f3:48:70:8d:d8:56:88:96:68:bd:01:89:87:35:d7:
d9:f0:fe:4f:6f:49:8d:64:d5:df:d3:2b:7d:0e:77:cb:75:75:
25:b3:76:2e:30:66:f6:e7:1d:52:68:fb:a0:8f:6d:43:3e:20:
d6:09:6f:ec:49:2d:29:a0:69:31:b1:d1:73:9c:0f:23:a5:26:
ee:09:cd:7e:26:c2:92:db:13:43:e9:6f:56:b9:da:de:b3:73:
09:ea:b9:1a:9a:28:46:6f:5a:34:76:67:d2:b2:6e:e9:02:f9:
50:1d:30:0b:5f:00:be:ed:d9:7f:b6:bd:a5:b0:14:cd:4f:77:
35:5c:58:0a:92:64:f6:8b:05:61:f9:dd:fb:bc:84:31:6d:b2:
86:7f:99:82:b0:5c:82:92:62:c1:6d:62:61:3d:a6:f8:59:85:
f9:c4:1c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHSDO62ZrHe6050CdoaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjUwNjI4MTcwMTE2WhcNMjUwNjI5MTcwMTE2WjAzMTEwLwYDVQQD
Eyg1MGVhMTRhNjM0NmEwNjVhMDBjMTNmMmQyNGRhNWZhZjQwMTk0MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5hHoTCMVwfK6P0L+0xInWUwzQz
SECw+mu9p9mYKpdRLDtsh/khBwK9TlucjL6ES0rxBbkUbJzkICcwmneXj0debjXv
1c/+XGLSO3VwyJEMIUZtyMcWDCatzqQIKp/tXTuVa9wEj0wWa0yLlJJBpv1C0XPs
oUCjKnZfFKzQ14TOkWE5tCGVzm3kbk/DLjluXZ04F8+RX1px7sg20vxvKbwfi3t7
MmWeuZapn6Qlnu8GK82FawHF9iO5IJhWXkQjibGfFc8jKSXnFGqYZ4zshSDmBnsr
TlljSZql0MmbHH4i+QX1U6jWTZeXi/LIPKyscwJ5Pp8CB3xbo8aIH9n+twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDqFKY0agZaAME/LSTaX69AGUIeMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw0/GBhU
OySBgZ5VbeeUJwSXqbDh/75HVhJLVq32Ysbx+ipPvpbel/TosavcoXC5IF3l8KmO
4yc7J4sbpl2nn6WDCeXWhyWKDw9GFgCchRjTznQDNH4veaLNS/8U80hwjdhWiJZo
vQGJhzXX2fD+T29JjWTV39MrfQ53y3V1JbN2LjBm9ucdUmj7oI9tQz4g1glv7Ekt
KaBpMbHRc5wPI6Um7gnNfibCktsTQ+lvVrna3rNzCeq5GpooRm9aNHZn0rJu6QL5
UB0wC18Avu3Zf7a9pbAUzU93NVxYCpJk9osFYfnd+7yEMW2yhn+ZgrBcgpJiwW1i
YT2m+FmF+cQccA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:31 2025 by rpki-client