Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: Flz4gOaLuQxi1eIP+akDlN3noh1YN7TKZLrwYFv0f/8=
Subject key identifier: 92:EF:D7:3A:AA:43:8D:24:47:5E:B7:66:16:AF:78:62:7D:18:F9:88
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 01984A0A29225EA19BB42F4C3318B6006077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 04:00:36 +0000
Manifest this update: Sun 27 Jul 2025 04:00:36 +0000
Manifest next update: Mon 28 Jul 2025 04:00:36 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: 2BCqKYMNOL1Y0OwGxWdN9MfGDP/HA7midYrMyjsQ0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:29:22:5e:a1:9b:b4:2f:4c:33:18:b6:00:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Jul 27 04:00:36 2025 GMT
Not After : Jul 28 04:00:36 2025 GMT
Subject: CN=92efd73aaa438d24475eb76616af78627d18f988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:a7:1b:2d:dc:71:aa:bb:fa:08:2f:ae:10:
dc:f7:95:62:c4:3f:10:95:b1:2c:4e:35:36:1d:95:
34:5e:db:32:7e:29:51:52:81:b7:dd:3a:38:74:dd:
47:c0:f7:4f:49:c9:0b:de:32:fb:a7:b1:bb:28:a0:
37:73:b2:b0:64:9d:a0:95:32:bc:70:32:da:34:aa:
4a:d5:45:01:44:a2:2e:f1:fe:27:74:5d:07:f5:6a:
66:dd:e2:60:c1:81:4d:05:cb:dd:59:ea:23:95:fb:
28:8c:9d:6d:b4:27:7d:cd:81:06:3c:1c:e0:a6:9d:
ff:1e:00:e5:f9:0a:92:37:1b:ca:78:bd:0c:c4:89:
ae:4f:2e:3f:b4:99:45:53:22:a0:3e:df:61:97:ba:
ae:ec:34:70:12:0a:3a:d3:58:45:8f:38:18:ae:a8:
cf:9b:a4:39:b2:48:8c:6a:cd:3d:e5:e9:30:41:7b:
1b:6c:53:70:9c:d3:0c:b1:ba:60:39:b9:d8:d3:fc:
12:45:18:88:fa:4b:61:94:3f:e1:ce:03:eb:46:9d:
96:22:da:51:0b:24:e9:10:a2:91:18:1d:15:6b:36:
a7:72:02:7c:8e:37:de:55:4f:d1:b2:77:7d:a8:99:
47:10:d7:b5:f5:33:d5:2b:55:c3:bd:12:73:bd:7c:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:D7:3A:AA:43:8D:24:47:5E:B7:66:16:AF:78:62:7D:18:F9:88
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:6c:02:ab:fb:b7:1d:07:6e:95:6c:f9:b0:ea:71:ae:70:
58:d5:77:a3:33:54:38:b2:c4:b0:2e:6a:29:8a:87:81:30:e6:
09:b6:72:6c:7e:0c:fc:e7:06:64:32:16:0b:36:a9:76:f7:b0:
3f:da:9d:2a:8e:dc:55:ed:6b:2d:d3:c4:4b:49:53:8a:61:98:
b7:ad:84:90:5a:48:c9:41:ec:fd:3a:b7:56:47:df:d2:da:c4:
ad:d3:1e:e5:f6:cf:e8:da:4c:ee:53:f2:ce:68:bc:41:c4:49:
b8:aa:32:45:9a:df:98:42:30:0f:b5:dd:dc:7d:46:e3:cc:c8:
c5:dc:59:2d:31:a8:3f:ee:20:06:ae:13:d6:11:11:b6:a6:3a:
fe:0b:fb:a6:98:d1:9d:32:8d:1b:b4:53:f6:15:c0:2b:b7:31:
e2:af:34:13:5a:5a:54:66:9a:21:e4:69:db:be:6d:46:06:f5:
d4:bc:19:a0:50:a8:9a:12:5a:5d:1c:e2:fa:7e:be:72:bb:23:
59:de:0e:2d:4f:46:8f:6b:93:7a:54:4e:e0:c6:d2:1f:05:e9:
ae:10:70:9f:8b:4a:ec:ee:54:06:57:15:2e:e4:71:a1:91:6a:
f7:c8:86:93:1a:4f:19:91:67:b7:8a:d7:bf:8f:27:b1:8b:1f:
46:6c:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:09 2025 by rpki-client