Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: G7Hdlm6b3WAklPxO10G4Bdjd/6Z4G5IiyRMKbgtfays=
Subject key identifier: 77:91:63:17:1E:07:F1:DF:FC:F2:54:39:C5:AA:1F:F7:95:C6:73:78
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01984A410B25BC24033E8EDB2871FB84C89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:33 +0000
Manifest this update: Sun 27 Jul 2025 05:00:33 +0000
Manifest next update: Mon 28 Jul 2025 05:00:33 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: eqSWJMW5jj57P89QuNBye5qnGn/PkS/P/7QrKISpkD8=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0b:25:bc:24:03:3e:8e:db:28:71:fb:84:c8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jul 27 05:00:33 2025 GMT
Not After : Jul 28 05:00:33 2025 GMT
Subject: CN=779163171e07f1dffcf25439c5aa1ff795c67378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:b6:b9:ee:76:0b:e6:bd:c4:84:36:1d:45:
fd:78:3e:44:3a:f0:a4:f4:2e:f3:f5:3c:dc:44:34:
e4:10:7d:28:e7:2d:06:13:ac:6d:e2:d6:3e:02:cc:
06:a7:0e:2f:f4:91:b7:bf:8b:da:f8:4f:e0:24:27:
8a:69:fe:64:59:04:c8:9c:5a:83:92:6f:19:4c:df:
a3:eb:64:93:4e:d9:14:61:f6:51:cf:54:0c:22:03:
12:fa:08:f7:1b:2f:4e:85:ba:c3:41:df:a7:38:b5:
d5:f6:f4:91:e0:9a:f2:07:71:cb:ed:95:10:46:55:
80:68:1b:dc:69:41:00:55:ac:11:e6:2c:04:a6:2a:
b3:3a:c7:19:53:68:ec:45:39:3f:75:1e:3f:43:97:
79:d8:eb:2c:00:d8:10:0d:44:2a:25:37:34:f2:d1:
63:62:38:3d:53:14:0c:46:b6:9f:6b:4b:5d:11:16:
9c:f8:99:2b:8d:7b:5e:b5:7c:98:d2:3e:14:db:fc:
47:24:26:ba:d9:55:a9:34:69:23:25:48:3c:88:1c:
61:71:0e:48:fa:09:b0:7a:83:da:39:6d:8e:48:3f:
8a:1b:05:ff:88:05:00:9f:a2:e2:13:bf:ea:76:7b:
42:14:da:18:20:fe:ba:56:44:6f:d8:13:a1:fe:8b:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:63:17:1E:07:F1:DF:FC:F2:54:39:C5:AA:1F:F7:95:C6:73:78
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b6:6f:e7:d3:36:2f:d9:66:be:32:30:7d:1e:b6:5e:c7:79:
87:d7:ef:93:05:1e:7d:37:b1:f7:24:9d:ab:d4:f0:21:29:13:
6e:9b:16:b1:ec:05:01:6a:6c:4f:b7:73:5b:24:6a:c7:b7:e3:
b0:c7:cb:2d:8e:71:de:fe:e9:99:99:f7:9b:da:1c:86:c0:32:
b2:e6:cf:f8:a5:22:ce:f2:e4:ab:cd:67:ad:56:1d:51:c8:b1:
5a:b7:fa:da:81:b4:f8:db:c1:98:99:0f:b6:4f:82:19:f4:64:
cb:23:21:bc:89:ff:25:18:c4:e3:47:82:72:c3:bc:67:62:f5:
ba:84:ee:f6:77:b4:35:cb:f0:ab:ab:52:1a:58:61:e8:1b:8f:
56:61:15:a9:84:ed:62:7b:31:57:82:2d:b4:98:5f:24:b9:42:
19:3d:01:7d:0e:58:ee:b0:7f:20:46:17:9b:1c:a9:e8:ab:fc:
44:2a:f7:d7:75:a8:8f:f8:a4:43:37:a4:5a:1d:19:cd:37:bb:
21:e7:00:93:e7:07:e3:45:d8:88:de:d7:c6:2d:94:03:63:b6:
10:3d:7f:27:d7:a4:e0:13:3f:d0:6f:60:6d:6e:9b:84:98:ab:
2d:2d:bc:f6:fc:2e:1e:23:84:16:5b:27:24:27:ea:ad:b0:79:
66:55:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:22 2025 by rpki-client