Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: 2DDqPak6bHhIfHkTy7yeNHPhRxCIPx1U/rl2TMkdU8I=
Subject key identifier: 02:6D:13:97:94:8F:C2:8B:BB:28:C5:03:C4:AC:04:25:90:3C:8D:8B
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 019A725CC523CEF5EA965C91DEF64390CA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: bGEkFJfV6VYEkbufrrc5L14s77Nq/jqvXz9lpifjM7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c5:23:ce:f5:ea:96:5c:91:de:f6:43:90:ca:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=026d1397948fc28bbb28c503c4ac0425903c8d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:b9:74:41:bb:e4:e5:a4:32:38:ac:b0:29:
71:9e:ae:79:fc:97:55:b7:d1:30:c2:e6:60:7e:0f:
86:92:6a:93:b5:39:ac:12:0e:4d:f0:89:46:60:ab:
d9:de:ea:f8:5c:ef:38:eb:3b:ea:99:0c:0a:34:ba:
64:41:41:dd:9c:0d:fe:c6:f1:78:06:6b:f0:a0:f0:
05:87:ef:91:d7:bd:6d:8e:c4:f7:4b:b3:33:6b:e6:
11:ac:cb:95:70:6a:42:65:85:67:5e:a9:ad:bb:cc:
61:6e:fa:37:8b:4e:1f:64:ad:b8:e7:2e:74:17:e7:
5d:33:59:51:39:bf:4e:19:61:53:77:b4:60:19:94:
6b:36:ef:43:6a:a0:45:46:79:a4:97:2b:8a:58:ec:
d3:0a:04:fd:38:8d:50:28:3d:1b:5c:08:90:e1:aa:
e0:b8:03:c9:47:fb:da:ea:50:55:a1:33:f0:b1:7e:
5e:15:4b:a3:18:d5:8c:29:44:5f:b7:b9:ad:a6:c0:
d0:57:57:61:2e:90:db:2e:95:65:86:57:ec:a8:6b:
25:49:52:2e:fd:88:a0:5d:67:e0:8a:6d:a8:df:12:
72:c5:b2:30:78:a0:da:92:bf:0e:a5:3a:97:8c:93:
ed:02:44:6b:ad:e7:40:77:d9:73:ff:0a:71:ef:e6:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:13:97:94:8F:C2:8B:BB:28:C5:03:C4:AC:04:25:90:3C:8D:8B
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:0e:b3:cf:c7:3f:c4:9b:f3:6b:0a:5b:a3:4a:ec:ce:06:
61:26:ee:ae:4b:d5:fd:fb:c2:05:c1:6e:02:69:3b:7a:83:d2:
25:73:0c:07:28:cb:ea:55:1a:df:14:cf:47:fb:44:b2:10:1d:
11:8a:e8:4e:7f:f3:87:50:43:d7:46:7a:c7:33:59:5a:61:3a:
3b:02:27:dc:b6:e3:86:f2:58:0c:ab:f0:80:63:05:98:6c:8b:
a6:af:36:3b:c2:4f:87:28:cc:56:96:c2:a8:a4:db:f2:96:dc:
c6:44:7a:f8:57:0d:7f:97:04:48:4a:7a:cd:6a:93:26:07:ba:
89:64:39:92:ab:5e:d6:e7:85:60:4c:a2:9a:10:c8:37:c1:b7:
f0:8e:98:49:4a:c1:e7:2e:77:a0:7e:25:46:86:5e:54:8d:ef:
81:88:a6:6d:40:47:88:f1:8c:6e:39:c6:5a:a6:57:93:6e:54:
4a:c1:8a:4a:3c:c9:1e:b8:00:cc:ac:d7:3a:96:59:4a:55:8b:
12:5f:8d:40:a5:1f:96:8d:3d:6a:cd:da:a9:9b:60:a1:c7:d8:
e5:81:2e:bc:2b:5a:ee:5d:10:a7:03:1e:ae:db:52:f8:da:c7:
22:a1:85:e3:d7:92:01:e6:43:e4:df:59:9e:cd:3b:ae:2f:a5:
58:19:5e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXMUjzvXqllyR3vZDkMpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWNlYzUwYjA5ZGQ0NmQzODRkMDgxYjUwN2QyM2JhZmVm
NTFjOWMwHhcNMjUxMTExMTAwMTEzWhcNMjUxMTEyMTAwMTEzWjAzMTEwLwYDVQQD
EygwMjZkMTM5Nzk0OGZjMjhiYmIyOGM1MDNjNGFjMDQyNTkwM2M4ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdS5dEG75OWkMjissClxnq55/JdV
t9EwwuZgfg+GkmqTtTmsEg5N8IlGYKvZ3ur4XO846zvqmQwKNLpkQUHdnA3+xvF4
BmvwoPAFh++R171tjsT3S7Mza+YRrMuVcGpCZYVnXqmtu8xhbvo3i04fZK245y50
F+ddM1lROb9OGWFTd7RgGZRrNu9DaqBFRnmklyuKWOzTCgT9OI1QKD0bXAiQ4arg
uAPJR/va6lBVoTPwsX5eFUujGNWMKURft7mtpsDQV1dhLpDbLpVlhlfsqGslSVIu
/YigXWfgim2o3xJyxbIweKDakr8OpTqXjJPtAkRrredAd9lz/wpx7+YPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJtE5eUj8KLuyjFA8SsBCWQPI2LMB8GA1UdIwQY
MBaAFETs7FCwndRtOE0IG1B9I7r+9RycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zMDkxZTgtM2M2MC00MWNjLTg1ZTAt
ZTMyZDZmNmYzY2NjLzEvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zMDkxZTgtM2M2MC00MWNjLTg1ZTAtZTMyZDZmNmYzY2Nj
LzEvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0sOs8/H
P8Sb82sKW6NK7M4GYSburkvV/fvCBcFuAmk7eoPSJXMMByjL6lUa3xTPR/tEshAd
EYroTn/zh1BD10Z6xzNZWmE6OwIn3LbjhvJYDKvwgGMFmGyLpq82O8JPhyjMVpbC
qKTb8pbcxkR6+FcNf5cESEp6zWqTJge6iWQ5kqte1ueFYEyimhDIN8G38I6YSUrB
5y53oH4lRoZeVI3vgYimbUBHiPGMbjnGWqZXk25USsGKSjzJHrgAzKzXOpZZSlWL
El+NQKUflo09as3aqZtgocfY5YEuvCta7l0QpwMerttS+NrHIqGF49eSAeZD5N9Z
ns07ri+lWBleUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client