Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: hLuJr7hHldCxZTOqtvyl5hicpYkHmDP70a18UsRzdrk=
Subject key identifier: D9:56:94:31:52:11:02:25:2D:18:2A:E0:84:D4:E1:AB:34:46:C4:F3
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019A4DE1DB697EFB45EC27C9F837C4D1AB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: fiBmnoTjcuGWWsXX5+I+1dNflwHxZz0+Iibc4s9h4b0=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:db:69:7e:fb:45:ec:27:c9:f8:37:c4:d1:ab:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=d9569431521102252d182ae084d4e1ab3446c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:ef:1a:2c:5a:1f:d9:bd:67:13:b0:1e:fd:
94:16:f2:02:b8:10:e6:e9:9c:83:98:d5:90:f3:8d:
fb:a2:08:82:bf:1e:45:17:e6:ed:1f:ab:a9:a2:9c:
79:ce:08:db:71:5f:d4:e7:2f:05:8c:dc:41:15:1f:
9f:7d:83:ca:8f:f7:14:e8:c9:a2:c1:3d:93:cb:43:
63:4b:27:2a:e9:6c:0e:0e:a8:45:df:b3:ca:8e:e4:
69:51:92:59:fe:03:47:3b:6c:9b:cf:ac:0d:8d:3b:
4a:2f:a8:94:ac:35:33:07:d1:e2:c9:ff:80:18:8d:
38:08:cb:a5:36:02:5a:42:c1:93:dc:65:34:88:c0:
fa:af:37:c8:35:b6:98:5a:fd:8d:49:25:f1:ad:2a:
7f:d3:d0:8e:50:6f:87:8a:cc:98:58:a3:05:cc:7f:
ed:43:dc:49:5e:3a:04:99:8d:d4:69:b9:d7:a6:54:
f4:cd:74:df:a8:d7:d3:2e:c9:6d:07:ff:d8:76:99:
61:64:d0:bb:03:29:72:eb:03:39:9c:00:59:54:69:
3e:f7:19:a8:b2:03:b4:69:d3:17:68:12:e4:bf:3b:
ab:d1:cb:b3:2e:bb:f6:85:f5:90:3d:2a:bf:07:d4:
2c:7b:0d:9a:b3:98:3d:1b:9d:0c:5a:47:62:47:19:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:94:31:52:11:02:25:2D:18:2A:E0:84:D4:E1:AB:34:46:C4:F3
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:91:24:7d:55:18:fc:0a:1d:c8:dd:31:ee:75:2b:91:60:
fd:1d:97:34:5c:40:06:07:9c:c7:00:97:9e:14:6a:ef:69:56:
fb:50:a1:28:65:3b:7a:9a:01:e2:1a:16:4a:2d:79:f1:46:00:
98:4e:66:0e:8c:2e:ec:d3:2d:99:a7:5d:b3:10:38:04:5a:a2:
71:2a:0d:34:ae:c8:a1:98:26:4a:0f:8b:1f:32:0a:60:68:85:
46:75:3a:08:6b:fa:6f:e0:4b:e4:5b:55:68:79:4f:45:1d:b6:
b8:22:fb:82:a4:7a:8e:18:36:28:91:04:28:27:a6:f6:29:8c:
85:ac:5e:7b:e9:53:fc:bc:e1:d1:9e:ed:e7:e0:d6:c6:3d:1f:
2a:63:5e:a9:60:21:1c:9f:54:6d:0d:a0:f3:a6:bc:14:28:89:
5f:5b:b6:a5:ec:af:51:37:e9:51:3e:95:db:63:3b:d9:29:a3:
4c:02:a3:b6:0f:25:ab:5e:02:46:88:c9:ac:e7:8d:53:ac:1c:
8e:e7:88:b5:f5:13:42:df:0d:3f:aa:24:02:2f:01:7f:dd:0f:
5a:7b:f7:77:a7:e8:16:1c:32:51:f8:fc:0e:85:05:b1:64:9e:
89:e5:1a:8a:c2:1c:bb:a1:d0:65:61:be:a1:5a:cc:8a:bc:0d:
6d:c1:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:55:59 2025 by rpki-client