Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: RVRPhWyJe5yZk5yBCHZzHvnx4McmK6pnsrYUNZ9/95k=
Subject key identifier: C2:2E:DA:8B:66:F5:B4:F3:62:99:26:19:7D:BE:FB:77:20:EC:22:7F
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 019880F8FBF95EE19C5F5E43721FB2B46BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 20:00:57 +0000
Manifest this update: Wed 06 Aug 2025 20:00:57 +0000
Manifest next update: Thu 07 Aug 2025 20:00:57 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: mivfQLVPhgZMirgLNOTknxYIfC3xXp18SVRIBIGePuk=)
2: z3WUNqxKMDWur0KI4t-qxJ9N11o.roa (hash: 939Mn6aF9U81uAcv2w44QyTqf1evPpPjx2mvgDn5N/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:fb:f9:5e:e1:9c:5f:5e:43:72:1f:b2:b4:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Aug 6 20:00:57 2025 GMT
Not After : Aug 7 20:00:57 2025 GMT
Subject: CN=c22eda8b66f5b4f3629926197dbefb7720ec227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:3c:3c:c6:01:9b:66:29:76:2e:49:c8:f7:
f7:05:31:bd:a2:8f:81:c8:82:2b:56:39:33:bf:25:
4a:c0:b1:96:19:b6:5f:a9:88:73:6a:d7:b9:b2:90:
90:85:ce:88:55:18:7d:0f:1a:38:88:55:25:65:49:
82:e8:bf:11:7b:bf:83:7b:9b:c5:df:99:d7:1a:3a:
6c:7e:67:05:55:d8:89:e5:ca:3d:1c:5e:7d:61:76:
61:2d:9d:5e:2c:40:f0:a2:22:6a:7d:3a:c2:71:24:
34:b2:85:77:9a:fc:f1:97:06:4a:a1:1b:e4:18:23:
73:c8:2c:e1:d1:d3:84:cd:40:02:a6:8d:74:91:7f:
d6:28:85:14:37:64:dc:b1:21:ef:91:2b:de:a9:49:
7e:4b:bb:f1:16:61:a2:43:a2:26:c1:90:39:c5:37:
31:87:dc:5c:66:af:40:e0:55:c4:3d:82:6c:93:25:
e7:c6:93:88:40:a7:d0:03:4f:05:db:67:95:2f:90:
e6:25:80:d7:9e:c8:0e:ea:ae:56:65:51:8e:90:7d:
59:84:78:88:ab:5b:6d:c7:90:95:eb:34:93:a1:f6:
91:e4:7c:ea:33:11:0a:63:6a:32:c2:d1:d4:b9:07:
c5:f1:29:33:29:ac:b7:fb:20:01:18:a0:35:dd:12:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:DA:8B:66:F5:B4:F3:62:99:26:19:7D:BE:FB:77:20:EC:22:7F
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:e2:52:4d:7d:95:bc:38:66:ad:4a:46:12:65:89:ff:22:
a7:4d:ac:0d:72:6d:24:ba:05:16:68:f3:c6:df:0a:1d:73:d1:
bf:b7:8b:56:7c:e8:5e:86:9f:69:d1:0f:f9:b2:71:a6:67:64:
f1:a8:55:07:c0:d8:bd:6a:87:1d:0a:9a:69:7e:f6:f6:bc:a5:
c7:a2:82:b7:44:14:59:45:d4:60:09:18:90:c2:9a:a2:9a:f4:
46:c1:15:e3:7e:56:a4:00:44:93:7a:dc:98:13:0a:e4:4c:2b:
5e:f7:0d:3a:be:71:be:26:15:a8:4d:c7:79:78:a7:65:1a:7a:
fb:e6:44:18:be:e6:f8:5d:24:08:bd:d4:14:3e:08:37:c2:0d:
51:5b:ea:2f:44:1b:4f:ac:08:f6:ba:ed:7d:ce:3b:38:a1:0e:
63:89:c0:b6:18:e2:d3:0a:5f:0e:60:73:2a:69:80:7d:f2:10:
c8:19:ac:96:71:75:0a:d6:89:dc:19:c5:3f:d6:ee:c3:44:7a:
e1:d8:39:fa:a8:45:e3:60:bf:41:59:dc:7e:86:6e:25:31:3a:
b2:67:c7:b9:b5:45:e1:a0:3e:90:f1:0b:af:35:7f:11:02:4b:
40:dd:25:8c:b1:cf:ae:cc:d8:cd:76:03:cb:70:ca:51:2f:d4:
5d:65:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:29 2025 by rpki-client