Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: ZljO4dTQc0XEjWvEqQrYosONLmXuEJfKqOVKYUqbNw4=
Subject key identifier: B8:0E:91:38:E9:44:36:0D:67:64:88:8E:CD:8D:04:E1:ED:F3:B9:14
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 01987DF84A1FCF533D291AD4AE4E66D22C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 156C
Signing time: Wed 06 Aug 2025 06:01:20 +0000
Manifest this update: Wed 06 Aug 2025 06:01:20 +0000
Manifest next update: Thu 07 Aug 2025 06:01:20 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: yClYtdfZVCYRhVJWFca6Um9YM0zAi2/J2EhAzmeS+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:4a:1f:cf:53:3d:29:1a:d4:ae:4e:66:d2:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Aug 6 06:01:20 2025 GMT
Not After : Aug 7 06:01:20 2025 GMT
Subject: CN=b80e9138e944360d6764888ecd8d04e1edf3b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:bf:d9:11:53:d3:bc:5f:04:3a:9d:a5:2a:
20:fc:c5:3d:47:33:f6:f7:1b:7f:fb:e8:be:9d:67:
6f:11:a9:53:a5:d7:4a:11:7f:ca:53:7b:37:1e:50:
96:76:56:c2:c0:2b:7e:cf:f3:ac:a4:77:bf:57:7e:
bb:84:f8:2c:96:4f:01:e7:48:07:60:09:76:84:90:
01:1c:af:73:e4:36:f5:47:d0:21:1c:1f:1e:ce:cb:
77:87:32:3d:85:2c:67:8a:ea:fa:19:76:32:ca:2b:
c4:ae:f4:14:7a:be:29:a4:60:57:d0:39:15:47:a2:
69:1f:bb:4a:d5:b8:4e:8b:82:5d:e7:1e:29:e9:81:
9e:0d:29:4b:f5:fd:c2:d3:2d:7c:f9:a2:88:f8:bf:
cd:c9:bf:33:8d:2c:0d:9e:6d:76:1b:5e:de:a2:d7:
43:d2:bd:f4:ab:4a:66:0d:ce:82:d0:4f:28:fb:5e:
f9:ee:92:f9:a4:70:6b:c0:fa:ab:2b:6d:3c:e3:0c:
2e:12:a8:7e:cd:9e:1e:5a:ef:d7:e9:b1:89:bb:36:
14:cb:50:82:49:f1:30:e8:e8:23:4f:a1:46:dd:81:
cb:da:0c:26:dc:7c:22:fb:5e:7d:72:b3:f6:d9:d9:
1c:9c:92:b6:ce:92:c8:1d:ff:6f:96:03:a0:0b:79:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:91:38:E9:44:36:0D:67:64:88:8E:CD:8D:04:E1:ED:F3:B9:14
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7a:ac:57:56:79:04:7f:34:d9:55:58:22:ef:b2:7b:5a:a3:
93:87:57:90:90:f7:90:99:a3:af:3d:32:ec:16:ae:19:8f:cf:
96:3d:e0:d9:72:a4:c6:55:0e:52:eb:36:48:d4:61:9e:97:77:
9b:7c:6e:91:44:d5:1b:e3:1c:ed:22:65:4b:69:59:5d:0f:9f:
a6:ab:1e:cb:72:e0:7e:8c:63:b8:54:f8:7c:16:fc:60:c8:5d:
d8:1f:55:85:0f:75:c6:2a:83:ec:55:c3:24:3e:c7:d2:d9:56:
17:f6:50:07:35:a3:b7:d8:5e:de:0c:6a:f0:24:26:b1:81:cd:
77:df:17:bb:9c:c1:df:b7:2a:18:dd:b0:53:77:e8:92:1f:58:
4c:57:c1:7d:c1:e9:f2:cf:2f:ba:c3:c3:4a:1a:8e:1b:59:db:
7f:e6:44:77:03:4e:5f:2b:a5:e3:21:18:d5:e5:21:e5:3b:96:
bb:1e:b4:9b:da:20:bb:64:14:92:59:0f:58:40:a8:30:13:de:
62:7d:cb:4c:3c:6d:18:c7:b8:ce:f8:96:c7:b0:db:e4:de:06:
42:07:fa:59:64:6b:b3:cd:7c:cc:5d:e2:b3:d5:4d:65:ac:d7:
7b:92:a1:46:a7:68:22:25:91:69:95:47:b1:16:98:6d:f5:8d:
91:21:b4:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+Eofz1M9KRrUrk5m0ixmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUwODA2MDYwMTIwWhcNMjUwODA3MDYwMTIwWjAzMTEwLwYDVQQD
EyhiODBlOTEzOGU5NDQzNjBkNjc2NDg4OGVjZDhkMDRlMWVkZjNiOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPG/2RFT07xfBDqdpSog/MU9RzP2
9xt/++i+nWdvEalTpddKEX/KU3s3HlCWdlbCwCt+z/OspHe/V367hPgslk8B50gH
YAl2hJABHK9z5Db1R9AhHB8ezst3hzI9hSxniur6GXYyyivErvQUer4ppGBX0DkV
R6JpH7tK1bhOi4Jd5x4p6YGeDSlL9f3C0y18+aKI+L/Nyb8zjSwNnm12G17eotdD
0r30q0pmDc6C0E8o+1757pL5pHBrwPqrK2084wwuEqh+zZ4eWu/X6bGJuzYUy1CC
SfEw6OgjT6FG3YHL2gwm3Hwi+159crP22dkcnJK2zpLIHf9vlgOgC3naewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgOkTjpRDYNZ2SIjs2NBOHt87kUMB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHqsV1Z5
BH802VVYIu+ye1qjk4dXkJD3kJmjrz0y7BauGY/Plj3g2XKkxlUOUus2SNRhnpd3
m3xukUTVG+Mc7SJlS2lZXQ+fpqsey3LgfoxjuFT4fBb8YMhd2B9VhQ91xiqD7FXD
JD7H0tlWF/ZQBzWjt9he3gxq8CQmsYHNd98Xu5zB37cqGN2wU3fokh9YTFfBfcHp
8s8vusPDShqOG1nbf+ZEdwNOXyul4yEY1eUh5TuWux60m9ogu2QUklkPWECoMBPe
Yn3LTDxtGMe4zviWx7Db5N4GQgf6WWRrs818zF3is9VNZazXe5KhRqdoIiWRaZVH
sRaYbfWNkSG0Rw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:09 2025 by rpki-client