Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: S1THXrh9yZhzJMoKeZEUG0wfQHNiRgfv4qTh/wqIJ4M=
Subject key identifier: 52:28:9E:75:A2:03:73:62:6D:19:38:B7:E3:F4:40:5F:0D:C8:CE:2D
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019690DE534C6112029B547C9F5413A43FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 030A
Signing time: Fri 02 May 2025 12:00:11 +0000
Manifest this update: Fri 02 May 2025 12:00:11 +0000
Manifest next update: Sat 03 May 2025 12:00:11 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: DIrX5M7LAX7ppgNF4MiOx+D0j+g0yvnXmKqjuOOFXFU=)
2: TVn-Y7E7IobUSc1lBZ87Jn2oZSg.roa (hash: Fgfl42WUlPTuS1ibiKRw2bENqH1KQguOsM9djfPJakE=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:53:4c:61:12:02:9b:54:7c:9f:54:13:a4:3f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: May 2 12:00:11 2025 GMT
Not After : May 3 12:00:11 2025 GMT
Subject: CN=52289e75a20373626d1938b7e3f4405f0dc8ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:91:8e:68:3c:a4:f1:94:8f:32:98:9f:c1:
bc:ac:7f:71:16:37:05:f5:7d:53:4f:ab:d2:45:12:
40:ba:74:b1:98:21:ca:1e:a5:25:9d:20:80:0f:d1:
69:0c:e1:61:b4:9a:78:29:49:82:e5:ce:8e:19:30:
6c:12:4f:c0:5e:2e:11:23:ad:69:19:a5:1c:a1:fd:
16:3a:fd:e1:a7:81:08:6a:9a:e7:8f:82:ac:fe:a4:
b0:15:6f:e3:41:5b:db:57:8f:40:ee:92:8b:3c:a6:
04:a9:52:db:52:16:d6:f4:72:3c:a9:b5:56:31:5e:
62:82:ca:ff:eb:26:52:28:a6:45:e2:e7:59:03:c5:
40:12:81:9d:44:99:58:83:67:13:5d:19:69:1d:bd:
51:09:e1:8e:a3:21:2b:dd:85:8f:a8:d4:ca:ed:21:
d2:16:66:1d:4a:d5:94:dc:17:0c:2d:12:38:6a:46:
c3:4d:ab:9b:6c:15:bb:1d:71:a1:16:79:4f:ea:26:
67:5f:5c:3d:ec:6c:68:d9:70:86:53:13:06:2a:03:
d8:0b:c1:c9:f1:a2:e3:dd:ad:f4:c1:e4:80:98:4a:
6d:1c:be:4c:58:5a:42:09:8c:b8:49:8f:20:e8:a1:
72:f2:9f:d2:02:0b:b5:97:f1:03:8a:98:4b:3b:6c:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:9E:75:A2:03:73:62:6D:19:38:B7:E3:F4:40:5F:0D:C8:CE:2D
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:88:cc:b8:ca:e3:4d:ab:6b:0a:70:e1:59:c4:5b:f6:bb:
ed:63:f8:e7:1a:97:41:46:ee:57:94:c8:70:4d:2e:e8:9a:e3:
8b:82:8f:ae:cb:8e:ca:8d:87:8d:96:d1:e8:74:7d:a8:11:b6:
00:7b:1f:90:da:c1:ab:a1:af:dc:93:20:a6:e1:74:4b:91:a9:
ff:ba:d3:bd:4d:d6:72:19:dc:d1:0c:88:70:fc:e8:9c:81:8a:
9c:05:87:ee:c0:ce:b1:16:ab:b3:b9:9e:db:1b:f2:ee:1d:5c:
1a:fb:c8:55:af:2a:ac:54:ab:66:0d:58:e4:bd:53:62:f2:6f:
5a:7e:65:f9:bb:91:05:b6:98:69:72:ec:37:07:d4:c2:75:07:
33:51:7d:7a:56:90:c7:9d:b2:70:83:9c:28:2d:67:a8:80:d0:
33:90:4f:e1:76:ed:55:7f:63:19:87:cc:a4:96:8e:63:f2:a1:
e8:b5:44:d2:3d:77:f1:8d:52:5f:84:01:b5:28:3c:3b:d5:df:
2b:cf:d8:3b:15:22:ab:77:a7:3d:63:5f:dd:73:5b:6a:9c:55:
28:d2:a0:7c:a8:48:1c:78:7d:63:ab:df:c1:9f:83:6d:49:f3:
50:5b:0e:02:59:e2:b9:f4:96:0d:c5:10:e7:45:47:e1:c2:2f:
07:41:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:48:57 2025 by rpki-client