Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: XjfH/ukYSdseMjF/QjenLvbGR6ayMRYX4axc+TOtcf8=
Subject key identifier: 7D:85:B8:8B:7C:32:60:CB:B0:EC:49:FF:AC:A4:3C:35:78:A9:EE:AD
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019785461BC5EF8509848863E952529982F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0389
Signing time: Wed 18 Jun 2025 23:00:53 +0000
Manifest this update: Wed 18 Jun 2025 23:00:53 +0000
Manifest next update: Thu 19 Jun 2025 23:00:53 +0000
Files and hashes: 1: 0fTzrR0FgT99fPQppUr0MJauodA.roa (hash: vrJgtNANw3B/qMAsMw5g4uVNE+VfKXWhBzBneo91BaY=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: ioJhw82Pr4YFGSlYpYjt2kAu6t/qkZ4dU8ztVwasq8M=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:46:1b:c5:ef:85:09:84:88:63:e9:52:52:99:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jun 18 23:00:53 2025 GMT
Not After : Jun 19 23:00:53 2025 GMT
Subject: CN=7d85b88b7c3260cbb0ec49ffaca43c3578a9eead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:89:d2:81:47:f7:a8:80:eb:23:c7:63:d0:
a1:e9:fc:91:e1:19:46:36:fe:81:92:23:5e:c2:26:
c0:69:9f:99:55:a4:5c:53:b6:b8:d6:9d:87:93:62:
45:1f:20:3f:76:d9:8c:27:20:da:cc:79:e7:56:c7:
dd:38:2e:b5:77:8e:2f:55:e8:1e:ce:f7:b5:dd:88:
ca:0a:9c:1e:ed:a2:1e:5a:69:8b:1a:b1:8f:c3:09:
07:1f:30:66:07:77:a8:45:e0:0f:5f:64:50:ea:73:
1f:e9:89:b3:c5:30:01:30:51:f1:c3:d4:e4:94:83:
44:74:c3:71:9d:e0:9e:d3:6b:c3:e6:27:58:77:42:
2d:22:c0:54:f4:a2:21:15:e2:1e:d2:98:d7:75:bb:
0a:25:fb:01:b7:c4:f0:4d:a0:c8:70:6a:64:f5:69:
1e:7e:e8:2e:71:4c:3f:c1:ad:bc:56:ea:57:64:54:
d3:c4:ac:55:84:5e:db:77:cb:12:48:5a:d9:7f:f7:
9c:a5:46:cc:36:74:d2:f8:69:48:72:7a:81:f0:a7:
4e:9e:11:7b:85:9b:fe:83:80:98:21:66:91:7f:0c:
d8:8a:04:65:e7:1c:24:cf:a2:ef:bc:92:c1:c6:e4:
77:aa:38:bc:e9:17:07:00:36:8a:ea:c5:3d:12:ae:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:B8:8B:7C:32:60:CB:B0:EC:49:FF:AC:A4:3C:35:78:A9:EE:AD
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:ce:5c:27:fd:91:b9:28:fb:e3:9d:a8:58:dd:fe:d7:d8:
1a:c4:27:f7:51:09:99:61:4c:b0:22:12:7d:7b:4f:d5:96:0b:
a9:17:1f:11:3d:69:51:4a:12:bd:90:6f:de:3f:d2:6b:53:fd:
89:6d:64:b9:13:65:df:37:97:ff:ea:88:31:51:e6:a6:ad:d5:
6a:56:c0:f2:b8:40:7f:84:fe:0d:9c:bc:06:33:04:72:ec:7f:
c9:0f:c4:9c:75:4e:15:bb:0b:dd:89:c4:c6:ce:96:94:82:7c:
6c:ff:15:94:50:dd:0d:7c:9b:47:1d:80:fb:bc:0b:94:f9:0a:
d5:61:99:cd:c1:9b:c1:f8:08:b3:e1:5b:67:e5:fd:49:13:6e:
c2:f5:5b:50:45:ec:7f:8d:20:e3:12:93:24:40:09:9e:29:36:
ff:19:37:f6:37:dc:cb:cf:f7:e0:36:ba:7b:89:a4:b7:aa:f3:
8a:9d:fe:2c:3e:93:10:f6:9d:6a:20:e8:aa:d5:ae:e5:8f:9a:
b2:7d:3d:e1:9e:f5:64:7c:3e:e3:4e:f2:b1:a5:b7:60:9b:38:
aa:c3:d9:a4:3d:05:b0:78:34:e2:bc:8d:79:f3:7d:b0:7e:8f:
7d:79:56:a3:62:5a:79:df:9e:93:d8:83:2d:5c:f3:06:8a:0a:
79:81:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:20:12 2025 by rpki-client