Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: q+1CvMlFtuTvDaFEsEf4Sy0gK/IiWocMdNedgGta82o=
Subject key identifier: 68:FD:2C:FD:5F:60:63:E0:A4:AF:26:CB:B4:BB:07:CD:85:D5:87:8B
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 0197711A8D8782D057CA610FF2D8FD14D694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0689
Signing time: Sun 15 Jun 2025 01:00:54 +0000
Manifest this update: Sun 15 Jun 2025 01:00:54 +0000
Manifest next update: Mon 16 Jun 2025 01:00:54 +0000
Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: 6gcLJB7qhV/B3YXpVEouJ/1OjfFkBZS1pTxC6YrtCyQ=)
2: ejcizS9O97cOz2tmfObTCZwdW-4.roa (hash: wllgRCbw1IesItOzWT+KT7KXRGHhzCz/LBiRwpHauW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:8d:87:82:d0:57:ca:61:0f:f2:d8:fd:14:d6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Jun 15 01:00:54 2025 GMT
Not After : Jun 16 01:00:54 2025 GMT
Subject: CN=68fd2cfd5f6063e0a4af26cbb4bb07cd85d5878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:58:4c:ee:38:a4:fd:73:01:24:5e:5c:c5:
04:79:91:de:35:97:fc:91:10:e6:b7:c2:2c:3f:99:
d7:b2:f4:e3:5e:da:91:f3:e7:f0:59:d4:75:a1:4b:
0f:3f:38:bb:2a:54:a7:0d:c1:53:03:b9:79:a9:b9:
f1:97:01:d7:dc:0a:02:c3:ee:94:ea:dd:e3:05:6b:
aa:24:75:12:d0:81:93:df:7f:c5:ed:71:52:4e:e5:
46:f6:08:d3:b6:2e:dc:55:1a:bd:30:7a:dd:ef:59:
a5:f1:7d:15:6b:e7:88:4f:53:df:3f:90:ec:b8:f0:
cd:53:87:df:60:a0:f2:e6:6d:a1:7a:7c:1c:01:57:
a6:ed:da:f9:f6:19:a1:b2:ad:08:80:3c:6d:8f:05:
99:e1:02:1d:7a:1e:32:62:09:a1:65:97:fd:50:c5:
a7:04:0c:ac:e2:4b:45:f6:96:c3:a9:ce:e8:17:7d:
19:ec:fe:d5:10:81:4b:40:d1:bc:35:fb:7f:1d:35:
cd:c0:8a:a4:c3:ea:3c:f4:5f:d8:c7:49:55:c3:a0:
24:f9:59:10:83:72:29:4c:18:32:e9:55:19:fe:01:
32:df:1f:4f:c6:1a:71:2b:74:ce:15:c5:5f:a4:12:
fc:81:4c:83:d2:01:39:e9:68:1b:57:91:f5:85:8c:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:2C:FD:5F:60:63:E0:A4:AF:26:CB:B4:BB:07:CD:85:D5:87:8B
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:1f:43:2f:fc:72:d9:1b:57:bf:aa:72:6b:c1:da:1e:62:
6a:9e:79:76:95:80:8f:54:e3:c8:77:61:93:d2:ea:10:75:96:
e0:b7:be:7a:f0:34:ec:15:99:aa:47:aa:7c:d2:63:8a:8f:25:
ce:45:7b:c3:0f:96:1e:c7:57:02:63:96:e0:27:2d:fe:09:b1:
ce:07:6d:20:fb:92:50:31:62:c6:99:3d:fc:b8:66:30:d2:5f:
d3:79:1f:72:6b:a7:e2:d4:ea:90:ac:15:7d:ed:c0:bb:24:2a:
2f:6e:d5:97:e0:d3:9f:c6:1e:6a:e3:e0:8f:ec:27:7c:05:16:
d3:07:5f:4c:39:49:e6:49:3c:7f:04:8a:8b:8e:12:60:b4:b8:
d9:62:4f:7e:67:f0:e1:79:fc:0d:c1:88:b5:0c:c2:b5:34:44:
41:25:92:49:7c:44:dd:45:79:a2:7d:45:4a:32:b0:6b:28:d3:
89:14:98:6e:18:65:db:34:5d:50:68:5b:a3:2f:a8:44:8e:15:
e3:49:49:1e:55:e7:4e:7f:37:56:9d:ca:f4:05:d0:f0:f6:d8:
71:f1:4d:ec:fe:27:80:75:01:25:35:90:63:ce:4a:9c:1e:f0:
22:c3:eb:fc:0d:91:82:af:d0:e0:04:6b:18:e8:01:c4:94:de:
e7:95:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:50 2025 by rpki-client