Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: +35xhF9Wto21dftRYAVoNMiEjlWVVH6M6532XTtbUG8=
Subject key identifier: BA:A0:33:78:42:B0:7F:A2:91:C8:8A:4D:21:F7:5D:9B:C7:0B:CA:EF
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019769CF09BF7C68BD8723DAF9D64DE32801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: hse0AnClmnx2X88+iBpexNcERyiRIq2vOlQbG0wAdoE=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:09:bf:7c:68:bd:87:23:da:f9:d6:4d:e3:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=baa0337842b07fa291c88a4d21f75d9bc70bcaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:70:7c:d9:97:49:d9:eb:50:9a:55:ad:6b:
2a:5d:f9:35:6f:dc:d0:3f:2b:03:c3:a0:a1:ab:93:
be:75:e6:16:c7:11:93:b0:8d:1c:69:87:05:8a:1c:
29:63:cf:4a:a5:42:c9:e9:67:11:d0:0d:14:19:ef:
84:6e:14:77:38:c9:16:26:be:11:6a:d9:f5:99:64:
52:54:2d:ef:90:09:68:b2:ab:67:54:55:b4:99:35:
9e:92:66:31:5c:b2:9b:65:3a:ab:81:23:45:f2:d0:
15:0a:94:13:cd:15:e7:97:76:1d:54:44:7e:30:23:
f5:46:e7:5f:0e:b1:2b:2d:f5:8e:e6:79:17:41:da:
21:22:eb:8d:33:a4:fe:56:29:5a:fc:54:43:f1:56:
e0:91:0d:ea:a9:0e:49:21:e2:f1:25:98:8c:47:9c:
01:9d:f3:49:48:6d:0a:b9:2d:82:2b:d8:6e:81:f6:
7c:cb:1d:0d:d2:5c:90:9d:f7:64:eb:13:1f:e8:2c:
74:eb:66:e0:24:8a:ac:e3:7c:48:c7:c7:2d:45:95:
26:bc:24:ba:eb:b8:a2:ba:45:ae:23:d2:e3:59:ee:
22:f2:8f:db:46:8c:0d:f2:5a:d9:bf:f9:6e:de:4e:
ec:23:2e:cc:50:1d:6c:fa:2c:97:2e:35:d4:93:d2:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:33:78:42:B0:7F:A2:91:C8:8A:4D:21:F7:5D:9B:C7:0B:CA:EF
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:c7:29:c8:be:77:75:46:7f:db:b7:f1:be:d9:56:2e:f4:
88:87:23:b0:45:66:9b:38:7a:f1:71:f6:2c:57:a9:b2:5d:18:
1c:96:6d:04:85:39:75:d9:b1:71:f6:b3:f0:9e:bf:08:eb:86:
4e:d9:27:79:4f:81:61:c9:0f:f3:2a:c4:b6:c7:f2:74:c8:a9:
a6:85:11:62:23:39:4a:4f:4f:8a:7b:f9:0b:e2:40:44:c6:67:
87:ba:ad:1b:30:04:9f:8a:ea:b9:19:07:ab:ea:73:db:27:0a:
99:d1:82:32:32:1c:9e:26:1b:c3:3c:a1:33:94:c4:e6:92:36:
b5:49:77:b9:74:ef:9d:2e:4e:5a:c3:14:a9:00:0d:18:49:f8:
98:c6:4c:46:b4:84:65:e2:d1:6e:a9:bf:76:5f:92:cf:16:2e:
aa:51:b5:11:6a:a0:ea:82:eb:7f:bc:60:7d:5f:78:a5:73:38:
ad:71:8b:ee:0a:8f:61:13:eb:fa:64:5b:03:74:d0:2e:85:0d:
99:e9:90:5f:16:a1:e7:8b:44:30:7e:b7:21:e9:cd:42:78:b4:
02:1b:fd:d2:c6:ea:8f:3c:3d:ed:16:a0:bf:36:89:3b:11:70:
80:74:8a:05:6e:3c:b3:31:52:73:bb:f8:a9:e3:27:75:34:07:
a4:5f:04:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzwm/fGi9hyPa+dZN4ygBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjUwNjEzMTUwMTA1WhcNMjUwNjE0MTUwMTA1WjAzMTEwLwYDVQQD
EyhiYWEwMzM3ODQyYjA3ZmEyOTFjODhhNGQyMWY3NWQ5YmM3MGJjYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL5wfNmXSdnrUJpVrWsqXfk1b9zQ
PysDw6Chq5O+deYWxxGTsI0caYcFihwpY89KpULJ6WcR0A0UGe+EbhR3OMkWJr4R
atn1mWRSVC3vkAlosqtnVFW0mTWekmYxXLKbZTqrgSNF8tAVCpQTzRXnl3YdVER+
MCP1RudfDrErLfWO5nkXQdohIuuNM6T+Vila/FRD8VbgkQ3qqQ5JIeLxJZiMR5wB
nfNJSG0KuS2CK9hugfZ8yx0N0lyQnfdk6xMf6Cx062bgJIqs43xIx8ctRZUmvCS6
67iiukWuI9LjWe4i8o/bRowN8lrZv/lu3k7sIy7MUB1s+iyXLjXUk9I2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqgM3hCsH+ikciKTSH3XZvHC8rvMB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3LHKci+
d3VGf9u38b7ZVi70iIcjsEVmmzh68XH2LFepsl0YHJZtBIU5ddmxcfaz8J6/COuG
TtkneU+BYckP8yrEtsfydMippoURYiM5Sk9Pinv5C+JARMZnh7qtGzAEn4rquRkH
q+pz2ycKmdGCMjIcniYbwzyhM5TE5pI2tUl3uXTvnS5OWsMUqQANGEn4mMZMRrSE
ZeLRbqm/dl+SzxYuqlG1EWqg6oLrf7xgfV94pXM4rXGL7gqPYRPr+mRbA3TQLoUN
memQXxah54tEMH63IenNQni0Ahv90sbqjzw97RagvzaJOxFwgHSKBW48szFSc7v4
qeMndTQHpF8E+Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:01 2025 by rpki-client