Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: 6ZN/c71NrEVsItLh0tWDQNptLioWcAUmaYKokHru/n8=
Subject key identifier: 2F:1D:9D:A7:18:90:20:4B:C7:8C:9A:2F:BB:94:59:76:3E:94:7B:F1
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 01988F59A72A870780E824FFF7B4250081FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 15:01:13 +0000
Manifest this update: Sat 09 Aug 2025 15:01:13 +0000
Manifest next update: Sun 10 Aug 2025 15:01:13 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: ku/uwlgZ2ShOHurWLClODkSKDLkvFwirXWGH1g3NqBg=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:a7:2a:87:07:80:e8:24:ff:f7:b4:25:00:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Aug 9 15:01:13 2025 GMT
Not After : Aug 10 15:01:13 2025 GMT
Subject: CN=2f1d9da71890204bc78c9a2fbb9459763e947bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:ca:07:b1:d6:ef:34:c6:e3:0e:64:19:99:
d4:6b:65:4e:c4:dd:b5:4c:22:c4:05:05:73:9e:ae:
59:33:23:63:7a:be:7b:56:af:95:91:a8:c4:6a:60:
ed:88:66:95:66:e6:51:9b:b5:95:75:19:dd:90:eb:
93:f7:db:26:e7:22:91:1e:41:54:e0:de:fa:de:b6:
5d:d0:4c:4e:9a:a0:a5:41:a4:6a:67:0f:45:d8:87:
d1:c0:f8:b6:b8:3f:47:34:f6:ad:57:e3:ff:0c:19:
09:15:78:ee:1c:61:70:da:7e:45:a9:1d:94:f2:c4:
ee:11:be:54:fd:27:0a:c9:42:0a:b3:a9:12:8f:f0:
7d:50:a9:48:a8:ea:b2:b7:7d:37:c2:e0:29:3c:8d:
e8:20:19:69:93:b0:5b:0f:29:32:c6:f6:ad:9f:1c:
5a:f4:16:05:2d:0b:9a:1d:6b:c2:77:9e:cd:b1:1d:
12:fe:c4:5e:fa:a9:0c:df:ab:7a:d8:b0:42:1b:3a:
0c:b1:92:3d:24:33:50:56:81:19:47:27:fb:a9:86:
d1:59:ad:b8:9b:13:b9:9c:21:e8:60:f5:73:5d:59:
d9:f3:41:18:af:de:86:5e:89:61:35:63:8c:a9:be:
56:a4:24:29:99:2d:3b:fe:71:94:46:cf:78:71:9e:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:9D:A7:18:90:20:4B:C7:8C:9A:2F:BB:94:59:76:3E:94:7B:F1
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:b6:0e:be:39:5b:e4:19:64:36:78:6f:7e:93:82:1d:f6:
31:c3:ef:40:4c:de:57:19:d3:b4:79:f0:04:2b:75:d0:c3:45:
87:14:11:41:b3:6a:c1:6f:10:f5:24:db:98:66:8f:d1:6f:67:
c4:78:6c:da:87:91:52:12:da:35:cd:7a:d6:0e:82:e4:b9:2b:
cb:3c:32:dd:e3:e5:ce:50:a1:f4:51:ba:a2:cb:fa:34:99:52:
c4:c1:13:e8:38:d7:6c:77:7f:dc:4f:3d:dd:c0:2e:90:29:ce:
ab:8d:d0:66:d0:bd:a7:d7:d8:a9:f4:40:59:5d:89:2c:99:73:
17:4d:8f:84:31:bf:09:82:92:5e:52:87:88:28:72:09:6d:43:
ec:f6:83:d6:87:e2:a0:e1:25:e6:bc:1d:41:4e:d8:1b:fb:f8:
76:9c:cc:8b:56:49:c7:4b:63:05:08:20:95:91:6a:86:24:54:
dd:e8:dc:98:3a:2c:39:82:63:e2:28:41:46:8e:c7:57:44:a0:
41:d6:e5:ac:08:a0:8f:8d:88:6d:31:3b:33:33:b9:46:32:79:
1a:5d:77:74:ff:5a:42:21:f8:e8:81:84:55:f4:19:5c:d9:df:
60:72:b3:52:7c:5a:f3:7b:19:58:ce:6c:c8:be:e4:f3:75:fc:
fe:51:52:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPWacqhweA6CT/97QlAIH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk
MTU3YWUwHhcNMjUwODA5MTUwMTEzWhcNMjUwODEwMTUwMTEzWjAzMTEwLwYDVQQD
EygyZjFkOWRhNzE4OTAyMDRiYzc4YzlhMmZiYjk0NTk3NjNlOTQ3YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLKB7HW7zTG4w5kGZnUa2VOxN21
TCLEBQVznq5ZMyNjer57Vq+VkajEamDtiGaVZuZRm7WVdRndkOuT99sm5yKRHkFU
4N763rZd0ExOmqClQaRqZw9F2IfRwPi2uD9HNPatV+P/DBkJFXjuHGFw2n5FqR2U
8sTuEb5U/ScKyUIKs6kSj/B9UKlIqOqyt303wuApPI3oIBlpk7BbDykyxvatnxxa
9BYFLQuaHWvCd57NsR0S/sRe+qkM36t62LBCGzoMsZI9JDNQVoEZRyf7qYbRWa24
mxO5nCHoYPVzXVnZ80EYr96GXolhNWOMqb5WpCQpmS07/nGURs94cZ54hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8dnacYkCBLx4yaL7uUWXY+lHvxMB8GA1UdIwQY
MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut
ZmZhYWEyOTlhZjYxLzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx
LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfO2Dr45
W+QZZDZ4b36Tgh32McPvQEzeVxnTtHnwBCt10MNFhxQRQbNqwW8Q9STbmGaP0W9n
xHhs2oeRUhLaNc161g6C5Lkryzwy3ePlzlCh9FG6osv6NJlSxMET6DjXbHd/3E89
3cAukCnOq43QZtC9p9fYqfRAWV2JLJlzF02PhDG/CYKSXlKHiChyCW1D7PaD1ofi
oOEl5rwdQU7YG/v4dpzMi1ZJx0tjBQgglZFqhiRU3ejcmDosOYJj4ihBRo7HV0Sg
QdblrAigj42IbTE7MzO5RjJ5Gl13dP9aQiH46IGEVfQZXNnfYHKzUnxa83sZWM5s
yL7k83X8/lFSaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:43 2025 by rpki-client