Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: VteNJ/4DZFUYVplALB04PURml8u/a8j6WkSQjgArCg8=
Subject key identifier: 3C:59:2D:DC:55:A8:36:2B:4A:DE:D8:70:9D:D2:EF:8F:2C:97:42:97
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019892233C3175357D7F6BC074A22D9654EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0D04
Signing time: Sun 10 Aug 2025 04:00:39 +0000
Manifest this update: Sun 10 Aug 2025 04:00:39 +0000
Manifest next update: Mon 11 Aug 2025 04:00:39 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: RRx1XIl6Cmv8xabJ+HxECYZIi2zJUMNApiDSbWsttP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:3c:31:75:35:7d:7f:6b:c0:74:a2:2d:96:54:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Aug 10 04:00:39 2025 GMT
Not After : Aug 11 04:00:39 2025 GMT
Subject: CN=3c592ddc55a8362b4aded8709dd2ef8f2c974297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:d8:0b:cd:9b:8e:23:48:7a:ab:f7:38:1d:
4f:f2:02:aa:7f:88:0b:76:bc:ef:b9:0e:5f:b0:03:
26:bf:9b:c9:27:dd:b5:64:ea:4d:9b:70:3e:04:ce:
d4:5c:e1:21:6c:61:ab:80:e7:b4:4b:d2:39:c2:ef:
4b:b2:f7:01:57:17:e4:d5:ad:09:06:cc:c2:32:0f:
4d:b2:b8:41:1d:db:7f:b2:4e:53:2e:1c:db:27:a5:
70:fc:1f:a7:74:20:b3:90:b3:e3:0d:4c:ab:16:c5:
7c:39:0d:74:17:0f:9d:25:79:f3:3c:6b:e8:98:a0:
1d:2e:93:41:f5:e5:f5:44:a9:84:91:2d:32:c7:10:
95:dc:b9:8c:33:6a:d1:a9:58:75:44:8f:f5:9e:7f:
d9:4a:0a:f0:3f:fe:e9:cf:0f:de:4f:d3:e9:32:59:
7b:0c:72:3b:24:67:15:f1:ac:a4:cf:a4:c1:3f:be:
e6:ef:c9:b5:23:c2:df:42:45:43:86:03:7b:c6:de:
77:d4:6d:b2:2b:4d:21:9c:40:2f:ca:d2:76:67:f2:
b6:71:ae:97:cd:a1:dd:7e:58:c2:7f:fb:ed:9a:21:
6d:e1:0e:4e:70:45:6a:90:ad:7c:18:b6:ba:83:0d:
7a:e0:0a:f7:68:c8:e8:4d:9a:cd:3b:25:58:0d:da:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:2D:DC:55:A8:36:2B:4A:DE:D8:70:9D:D2:EF:8F:2C:97:42:97
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:66:67:7f:30:5b:5a:fa:af:7b:96:aa:02:40:15:2d:1b:
f0:22:47:00:c9:02:2a:70:cf:b0:16:99:ff:13:d3:07:3b:c6:
ea:92:86:af:64:96:3e:5b:8c:6e:1c:09:5f:4f:2b:8f:58:f2:
37:eb:65:8c:5e:4b:78:62:dd:83:00:a2:34:79:00:f4:ba:43:
b0:4e:47:18:62:13:ea:67:c6:9f:d0:33:7c:b0:ad:23:fc:3e:
29:ec:06:2f:fd:24:5f:0e:10:64:f3:04:50:a5:a2:92:37:59:
0a:cf:59:fe:f0:8c:a0:6d:88:a5:e3:65:92:85:8d:fb:5a:72:
03:e8:f3:5d:ce:06:bb:17:42:cd:70:44:d4:af:6a:30:7c:fa:
7b:c4:c7:94:cd:7e:bc:fd:cf:a5:77:8f:91:ab:ca:d1:3e:1a:
11:e6:e7:72:af:28:c0:2c:28:4a:61:ef:b2:aa:c1:4d:0a:14:
2d:1b:c9:72:68:3d:a2:14:c5:2b:5c:db:26:59:b6:2e:61:ca:
da:3e:3e:b7:7f:3a:28:7a:9a:52:36:5d:01:7f:5b:53:ee:8c:
64:52:13:be:df:2c:65:41:ed:60:e7:07:60:71:bf:f2:74:a7:
91:31:e5:84:01:55:41:2e:2d:84:df:b4:78:a9:54:59:d5:16:
5a:ef:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:12 2025 by rpki-client