Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: Nk5vi485L7WWFTOkvdS8B4LhKd4gsINoHp7v6h3Z7T8=
Subject key identifier: 1B:FA:79:8E:AA:E3:32:E1:59:C1:0C:28:F2:01:33:95:7E:DD:C6:C1
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 01967F0F102FB05EB846A70EF2968E94B47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0BF1
Signing time: Tue 29 Apr 2025 01:00:15 +0000
Manifest this update: Tue 29 Apr 2025 01:00:15 +0000
Manifest next update: Wed 30 Apr 2025 01:00:15 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: XTw+G/E4s7+WCGKQsPrQS5vEjS2HU3R9h2KpJwKAaNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:10:2f:b0:5e:b8:46:a7:0e:f2:96:8e:94:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Apr 29 01:00:15 2025 GMT
Not After : Apr 30 01:00:15 2025 GMT
Subject: CN=1bfa798eaae332e159c10c28f20133957eddc6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:b5:44:b2:e0:01:d2:08:71:49:ee:70:e1:
b4:62:32:ac:3f:4f:77:9b:6f:43:3f:0f:98:92:ba:
f4:b5:95:0d:37:bb:2b:1f:0d:1b:ca:75:d1:f1:f8:
d4:e2:6a:7d:81:07:cd:26:27:af:b2:96:8f:5b:92:
d3:40:0d:b2:df:11:60:bd:58:86:b3:2d:71:8a:67:
8b:b0:5a:c6:76:3e:84:a1:af:9c:de:69:22:02:2e:
87:07:42:84:f3:24:0d:06:0b:8d:f0:1b:7a:67:15:
b5:c8:c4:41:07:c3:d6:4a:ee:7a:d7:43:fc:4c:4b:
cd:5b:36:98:97:6c:f1:92:a1:21:85:04:57:50:43:
40:1b:d8:d0:0f:5b:fa:42:a1:be:d7:2d:ab:b4:2b:
a2:69:94:15:89:74:25:8d:6b:d9:e5:eb:0f:cc:34:
55:11:e4:04:a3:06:5b:3f:8c:1b:6f:27:2b:16:f4:
bc:a0:d8:a6:53:ef:f3:08:df:62:26:6a:25:d3:1c:
bd:c5:c6:85:69:19:85:e1:09:69:c8:aa:5c:13:25:
08:f0:af:a0:76:11:c9:fa:23:cf:68:d6:68:8e:75:
dd:66:30:60:3c:71:6e:46:36:e4:1a:8c:43:68:55:
a1:4f:4d:75:3e:6a:94:07:5b:94:84:89:46:80:4f:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:79:8E:AA:E3:32:E1:59:C1:0C:28:F2:01:33:95:7E:DD:C6:C1
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5f:2f:cf:43:38:9d:a8:79:fd:15:61:05:fa:19:45:49:c6:
60:33:77:d1:f0:cf:29:37:11:03:d7:d8:8c:56:57:ab:83:1c:
bf:04:0c:cc:07:aa:e8:2b:1b:77:62:e6:75:4a:35:34:74:aa:
60:f0:9f:38:cd:d7:db:42:39:47:68:53:c3:41:0b:d1:d2:a9:
f4:37:b6:a3:2d:54:b1:1a:51:21:ad:c5:b1:f0:c4:d9:75:8e:
80:56:a6:a3:50:e9:56:09:db:d0:0c:af:7d:bc:b0:cc:28:9e:
7d:60:63:58:24:b3:35:d9:11:70:f8:d3:98:7e:52:bf:07:94:
8e:0d:fa:0b:b5:08:35:6c:b2:ca:b1:59:c7:66:40:73:bf:33:
f2:1a:fe:4f:d1:c7:25:9d:bb:09:94:20:ec:95:91:45:12:4d:
84:fa:90:16:71:f2:0b:e0:3d:87:23:d5:e2:48:3f:25:16:6f:
c0:da:37:f3:af:a9:53:30:a2:65:db:b4:93:47:c1:d4:d2:f3:
e4:fd:71:01:ba:80:e6:aa:f2:a4:55:c2:8c:71:c0:a9:38:ab:
21:98:87:9e:c6:6d:61:cc:88:89:3e:93:41:a6:e5:63:68:97:
c2:12:ce:26:63:a5:6b:9c:79:a3:f8:c5:65:4f:62:75:36:4c:
65:e5:f7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/DxAvsF64RqcO8paOlLR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj
N2NmYzQwHhcNMjUwNDI5MDEwMDE1WhcNMjUwNDMwMDEwMDE1WjAzMTEwLwYDVQQD
EygxYmZhNzk4ZWFhZTMzMmUxNTljMTBjMjhmMjAxMzM5NTdlZGRjNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAO1RLLgAdIIcUnucOG0YjKsP093
m29DPw+Ykrr0tZUNN7srHw0bynXR8fjU4mp9gQfNJievspaPW5LTQA2y3xFgvViG
sy1ximeLsFrGdj6Eoa+c3mkiAi6HB0KE8yQNBguN8Bt6ZxW1yMRBB8PWSu5610P8
TEvNWzaYl2zxkqEhhQRXUENAG9jQD1v6QqG+1y2rtCuiaZQViXQljWvZ5esPzDRV
EeQEowZbP4wbbycrFvS8oNimU+/zCN9iJmol0xy9xcaFaRmF4QlpyKpcEyUI8K+g
dhHJ+iPPaNZojnXdZjBgPHFuRjbkGoxDaFWhT011PmqUB1uUhIlGgE8oswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv6eY6q4zLhWcEMKPIBM5V+3cbBMB8GA1UdIwQY
MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt
ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm
LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo18vz0M4
nah5/RVhBfoZRUnGYDN30fDPKTcRA9fYjFZXq4McvwQMzAeq6Csbd2LmdUo1NHSq
YPCfOM3X20I5R2hTw0EL0dKp9De2oy1UsRpRIa3FsfDE2XWOgFamo1DpVgnb0Ayv
fbywzCiefWBjWCSzNdkRcPjTmH5SvweUjg36C7UINWyyyrFZx2ZAc78z8hr+T9HH
JZ27CZQg7JWRRRJNhPqQFnHyC+A9hyPV4kg/JRZvwNo386+pUzCiZdu0k0fB1NLz
5P1xAbqA5qrypFXCjHHAqTirIZiHnsZtYcyIiT6TQablY2iXwhLOJmOla5x5o/jF
ZU9idTZMZeX3Sg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:08 2025 by rpki-client