Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: Gv6iSsOdssAD15M6ylSKshIMC6CrV9YWlYgtsEmSwDg=
Subject key identifier: 14:4D:BC:09:D5:AE:5C:36:FD:DF:49:B2:F4:A1:9D:05:0B:6C:F6:36
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 01967C4525F90325EFD527C0AB65B5F7B65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 12:00:28 +0000
Manifest this update: Mon 28 Apr 2025 12:00:28 +0000
Manifest next update: Tue 29 Apr 2025 12:00:28 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: MiB72Wj0qxauWfwTa178c0mXBS3x35UNSmtEll3jti8=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:25:f9:03:25:ef:d5:27:c0:ab:65:b5:f7:b6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Apr 28 12:00:28 2025 GMT
Not After : Apr 29 12:00:28 2025 GMT
Subject: CN=144dbc09d5ae5c36fddf49b2f4a19d050b6cf636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:3e:a2:a3:6a:1f:f6:14:7a:ac:8f:55:9b:
af:02:26:27:b8:10:b3:89:f5:45:bc:31:7e:5a:da:
3c:88:10:55:4a:83:c8:e5:1f:5f:d5:d3:52:c4:3e:
0b:74:55:bd:53:28:e3:56:bc:3b:01:9b:ac:2f:a1:
5a:1d:70:3e:cb:88:c2:cb:bb:9e:cc:8c:05:b1:c8:
fe:c7:b4:1d:f8:6d:af:65:17:41:d8:da:f5:db:c6:
5b:db:87:77:c1:52:33:51:8b:df:e0:b2:ba:eb:0d:
76:de:70:15:e7:b0:58:9e:b7:2f:f1:93:d8:79:d6:
2f:15:c2:3a:2a:10:ba:a1:64:e6:7b:f0:08:f4:75:
fb:3a:22:e9:df:18:94:11:4d:e2:13:26:38:48:48:
fb:60:1e:fd:cf:80:3b:d2:26:76:8b:18:20:d0:e2:
76:f8:24:1a:a7:28:22:a8:6b:41:cd:3e:7c:96:93:
b6:93:5e:47:2a:a7:dd:32:7f:87:15:19:65:f1:af:
5c:b2:07:e1:82:ba:e9:4b:33:45:2b:8e:0f:d0:99:
81:04:b8:f1:ce:c4:1f:59:a8:b1:d4:e9:c9:03:14:
00:5d:fd:42:d5:d5:37:62:89:da:85:fc:10:03:81:
1c:6d:28:4a:01:e2:4b:9e:d2:77:dd:fd:ec:c9:53:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:BC:09:D5:AE:5C:36:FD:DF:49:B2:F4:A1:9D:05:0B:6C:F6:36
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:50:5f:02:f5:82:c7:55:47:06:7e:e6:af:a0:bc:0d:bc:
3e:65:22:32:f0:86:8d:99:2d:93:5c:21:ff:ac:7a:8b:c8:85:
9e:f4:04:e8:62:ca:1c:70:ce:7a:75:30:b8:1d:c6:0b:71:62:
65:df:e0:a7:7b:d5:86:f5:b8:1a:43:d4:e7:4b:f4:c1:31:b9:
23:a8:9c:87:81:c6:71:d9:43:49:08:29:fb:7d:14:d2:8a:51:
b7:34:25:cf:4d:a5:b1:82:42:3b:8d:61:32:4d:e2:d4:42:ff:
39:f4:30:e8:3c:17:ff:8b:45:43:3e:c1:63:3e:2e:7f:16:86:
0c:76:c4:1e:51:fc:cc:e4:85:c9:58:f7:5b:24:1d:bb:c4:d6:
dc:71:71:5a:f3:de:d2:6b:1b:d6:17:1c:4d:ed:5d:3a:13:fc:
ed:65:43:a2:4e:e0:bd:78:f6:78:aa:f1:fd:ed:59:57:96:04:
bd:a3:45:3c:b1:23:f2:df:f3:a0:0d:bb:9a:5a:43:5d:bd:e9:
d4:a0:18:08:44:83:9a:1f:3c:d9:d1:fe:07:fc:b5:1a:2c:69:
fa:0e:0f:62:ec:08:d1:ed:3b:01:d0:de:2b:3c:88:f6:bb:fc:
c9:8d:f4:97:fc:73:81:92:de:4c:0e:ca:4f:51:53:68:e9:2f:
2e:dd:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:27:21 2025 by rpki-client