Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: bXAs2UKx8kAY/7dm/sJyyEpr4Ui/bePeJQPlz9rdysY=
Subject key identifier: 20:FB:04:F4:06:70:80:FE:50:78:49:DF:FD:45:6C:DB:78:72:2E:D2
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 0199FAD85C3A8A58A8C46467E26DEFCE8769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: HgqtyQdFMiXalqKE6CL13G+L1WEZ/Npk4AF5LlHb7pU=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5c:3a:8a:58:a8:c4:64:67:e2:6d:ef:ce:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=20fb04f4067080fe507849dffd456cdb78722ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:4f:2c:c8:49:4a:2a:0c:53:c1:45:90:ba:
63:f2:e7:87:7b:14:ea:d2:e8:cb:b0:86:42:67:5b:
27:04:2a:8d:e0:44:ee:1c:55:5c:2e:58:6b:ab:79:
be:df:80:fb:74:86:af:91:1a:b7:22:df:68:a4:1f:
a4:6c:89:4a:dc:b2:0e:94:a3:dc:09:28:04:b2:8d:
2f:d3:30:87:87:06:39:09:35:10:2c:30:c1:d6:47:
ac:61:d0:bf:7a:60:ea:9b:86:fb:4d:58:7d:05:6d:
6f:c6:61:5e:92:d0:97:a3:fe:80:66:37:ec:31:41:
a9:f8:22:f6:01:0b:07:f4:7e:2b:df:dd:b1:82:d2:
44:e7:a3:c9:ed:ce:7d:81:da:63:8c:43:22:15:6f:
e8:07:0e:83:a9:9b:1e:57:a5:c9:e4:bb:7e:2d:f9:
4c:28:94:45:43:e8:ec:b4:7e:ff:cb:3c:71:4c:17:
c3:dc:0f:8f:9a:b4:6e:00:15:99:bd:5a:ed:4c:93:
b5:64:77:42:94:fe:53:90:f8:82:73:54:76:f5:17:
f1:16:e0:f4:a0:5c:db:79:5d:cd:43:44:57:1c:80:
e3:e7:b9:ed:01:a5:1f:82:26:01:b0:88:d8:ff:4c:
76:49:90:b7:bf:f6:b0:ff:9c:e9:07:81:7e:a3:3c:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:04:F4:06:70:80:FE:50:78:49:DF:FD:45:6C:DB:78:72:2E:D2
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e9:ce:69:52:d1:23:84:ad:6a:67:99:1b:df:b9:2c:65:fe:
b1:2c:5e:a9:01:88:d9:00:a7:94:a8:8f:cf:41:1e:29:20:52:
9d:ff:2d:6a:f2:91:6c:54:fb:ca:0c:1c:55:97:83:8d:60:3e:
c0:25:23:e9:a4:51:d2:b8:60:58:cb:44:d3:2d:8b:be:04:e5:
36:0b:a5:71:0e:88:79:0f:fa:df:6e:8b:b0:30:02:75:48:1b:
10:ea:bf:31:49:f1:57:74:a2:54:18:eb:00:14:29:fc:2d:57:
ea:4d:76:3a:5c:92:a3:ad:05:58:c9:63:d2:6e:43:1f:9e:f3:
7d:02:b5:94:f1:3f:49:38:ac:a0:34:28:0f:04:53:4e:eb:4c:
dd:25:10:6f:91:0d:3b:9a:e3:57:3c:c8:04:09:e8:82:b1:d1:
0a:86:19:96:19:a8:5d:11:95:16:d2:a3:4b:12:2a:b8:1d:6f:
2b:94:96:d0:b1:33:c0:d9:34:ca:b1:da:40:78:f5:b6:97:83:
96:40:0e:b4:54:43:f7:58:08:e4:d6:8f:ca:8a:e7:b1:d4:df:
34:4a:21:e3:4f:3d:ef:c8:bb:ca:7d:30:f1:9f:dc:61:06:9c:
96:76:08:c5:e7:2a:cf:ca:bf:17:d3:54:16:b3:ba:bc:98:b4:
41:e6:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:14 2025 by rpki-client