Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier: 7sCHiaTTurl4p0yy33eQsx6FIT5LRgszuhTyJRY128Q=
Subject key identifier: 1E:05:4E:D6:DC:66:86:3D:59:61:5A:E0:B3:DE:C3:AE:D4:4E:23:39
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial: 0199FC590E668B01918CFAF2774400E30E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: pktSOARjpvjBB/MgLrjadv1VYyXAoUApHgLNb7mJC+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0e:66:8b:01:91:8c:fa:f2:77:44:00:e3:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=1e054ed6dc66863d59615ae0b3dec3aed44e2339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:b8:89:23:5a:04:11:5e:48:3b:44:17:07:
76:0f:af:37:72:40:42:b5:81:98:59:bf:28:68:5e:
d0:1d:d6:58:69:d7:30:33:ee:6e:a6:88:d0:64:5f:
5e:26:50:eb:ab:f6:0e:fd:70:b7:a2:b1:14:99:f8:
98:ba:03:d0:f4:15:59:41:01:9f:d9:32:a0:6b:5f:
7b:94:5b:d7:cd:8f:44:b4:e2:0d:79:f1:22:aa:4d:
3a:09:16:5a:c9:05:1c:dc:57:8c:8a:88:49:aa:eb:
f7:08:98:80:cb:75:ac:c4:36:a4:2a:1a:7c:32:9b:
00:bf:4b:fd:39:c5:40:cc:71:18:5a:60:76:b9:7f:
88:8d:b8:6b:2a:e6:87:8b:15:9f:99:39:fd:3b:7a:
90:66:23:ce:6c:8e:20:ca:b2:77:71:0c:b7:3c:2e:
05:43:15:12:eb:09:72:9f:b8:9b:b0:30:c2:5a:9d:
b6:67:1f:6b:2d:b0:f3:e8:a2:2c:ec:f6:ad:7f:36:
20:b7:b0:2d:a3:38:48:be:12:0f:00:e7:84:7b:6e:
43:90:5e:44:62:4b:c9:b1:32:f4:49:80:8b:2f:ee:
9d:35:0d:71:94:44:de:a3:d1:5f:7e:ec:7b:04:86:
00:10:31:0e:0a:88:df:96:08:a8:4f:19:6b:ac:e6:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:4E:D6:DC:66:86:3D:59:61:5A:E0:B3:DE:C3:AE:D4:4E:23:39
X509v3 Authority Key Identifier:
keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:4c:33:4c:7a:d3:44:30:29:4d:72:5a:d4:15:f2:26:08:
dd:cd:9c:53:54:d8:8c:91:22:99:01:8e:a3:f0:7a:d2:7a:28:
7d:04:2e:0b:ec:64:a2:48:b4:73:07:ac:b8:3d:d1:b7:6f:23:
63:7e:ad:c3:f1:56:e3:55:d9:bc:9d:03:b3:72:2f:3e:a1:9a:
18:7c:d0:16:68:ef:dd:4d:52:83:ef:da:d1:65:be:96:aa:30:
87:7d:b2:d3:ee:41:e9:1a:5f:12:6f:18:f9:0a:f4:d9:40:a2:
7a:1f:81:30:0c:6d:8e:9a:58:4a:27:f1:2d:ef:79:fe:8a:2e:
9e:4e:a2:3b:b7:7e:8f:72:78:15:2a:fb:78:38:0a:65:dc:d6:
24:90:47:06:57:14:e4:e9:6d:8c:dc:63:a8:68:5c:fb:00:0b:
c9:61:f5:4d:40:6c:01:a0:49:b3:c7:73:3e:c0:ab:71:5e:93:
3b:c8:c1:30:dd:1e:b2:4e:75:be:fe:07:ec:73:ac:27:92:63:
83:0a:b1:e7:71:89:23:05:5b:25:04:42:ed:71:8e:6e:93:04:
3b:ef:21:15:57:d2:26:b7:5c:bc:75:33:b0:56:88:a4:94:bc:
e0:bd:58:b7:55:f7:00:d5:20:c2:0d:6f:a1:f1:68:63:be:71:
5f:8f:24:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQ5miwGRjPryd0QA4w4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWNlZGU3ZTBmZmJkMzA4YWNiOTExMjEzNjhkZjhkNmNi
MmU5NjEwHhcNMjUxMDE5MTIwMTU4WhcNMjUxMDIwMTIwMTU4WjAzMTEwLwYDVQQD
EygxZTA1NGVkNmRjNjY4NjNkNTk2MTVhZTBiM2RlYzNhZWQ0NGUyMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm24iSNaBBFeSDtEFwd2D683ckBC
tYGYWb8oaF7QHdZYadcwM+5upojQZF9eJlDrq/YO/XC3orEUmfiYugPQ9BVZQQGf
2TKga197lFvXzY9EtOINefEiqk06CRZayQUc3FeMiohJquv3CJiAy3WsxDakKhp8
MpsAv0v9OcVAzHEYWmB2uX+IjbhrKuaHixWfmTn9O3qQZiPObI4gyrJ3cQy3PC4F
QxUS6wlyn7ibsDDCWp22Zx9rLbDz6KIs7PatfzYgt7AtozhIvhIPAOeEe25DkF5E
YkvJsTL0SYCLL+6dNQ1xlETeo9Fffux7BIYAEDEOCojflgioTxlrrOZySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4FTtbcZoY9WWFa4LPew67UTiM5MB8GA1UdIwQY
MBaAFETs7efg/70wisuREhNo341ssulhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUt
ODA5MzBiMjg0YTY5LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUtODA5MzBiMjg0YTY5
LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8hMM0x6
00QwKU1yWtQV8iYI3c2cU1TYjJEimQGOo/B60noofQQuC+xkoki0cwesuD3Rt28j
Y36tw/FW41XZvJ0Ds3IvPqGaGHzQFmjv3U1Sg+/a0WW+lqowh32y0+5B6RpfEm8Y
+Qr02UCieh+BMAxtjppYSifxLe95/oounk6iO7d+j3J4FSr7eDgKZdzWJJBHBlcU
5OltjNxjqGhc+wALyWH1TUBsAaBJs8dzPsCrcV6TO8jBMN0esk51vv4H7HOsJ5Jj
gwqx53GJIwVbJQRC7XGObpMEO+8hFVfSJrdcvHUzsFaIpJS84L1Yt1X3ANUgwg1v
ofFoY75xX48k9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client