Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: 4cXHavkguLopSuZkEgBaR+t2vUUP+gPmuMEQrOcoIAs=
Subject key identifier: 1D:40:FA:B6:52:F5:E5:0C:32:5F:F9:7F:C3:FF:17:AD:89:B7:06:6F
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01988D6B84B621FF700EF50D6C54CB84CBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0412
Signing time: Sat 09 Aug 2025 06:01:30 +0000
Manifest this update: Sat 09 Aug 2025 06:01:30 +0000
Manifest next update: Sun 10 Aug 2025 06:01:30 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: enc5+bDv4Pqo+tuziVO2sJAWAYL0tbbW32I3wlRRYZw=)
2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:84:b6:21:ff:70:0e:f5:0d:6c:54:cb:84:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Aug 9 06:01:30 2025 GMT
Not After : Aug 10 06:01:30 2025 GMT
Subject: CN=1d40fab652f5e50c325ff97fc3ff17ad89b7066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:8b:43:6d:f2:4f:c9:52:16:8f:75:7e:5a:
c7:4b:5b:e4:8f:b8:e7:14:dd:e1:a9:17:72:cd:db:
cd:04:06:cb:ea:3e:ad:84:47:47:c5:aa:f2:a0:89:
3d:9d:b9:3e:d4:f2:0c:a8:55:58:9f:d2:e5:40:c3:
64:21:5e:97:01:42:0c:08:d1:9e:a1:ff:4c:8e:2f:
62:df:c7:e4:33:0b:e7:aa:35:33:1e:16:4b:ca:23:
29:55:09:26:eb:69:ae:2d:bc:bf:23:41:a5:43:fe:
c0:ff:b9:66:0e:83:79:3d:81:b9:31:eb:2d:71:eb:
6e:6d:36:e8:c5:83:00:c5:36:a0:fc:af:a2:3f:a9:
ac:bd:ce:dc:41:a7:8f:00:f8:c3:b7:87:d6:41:8c:
88:10:11:8f:cb:bc:0f:fc:07:51:e2:df:3f:c2:fe:
96:1e:e8:64:97:bd:c9:c1:83:49:5c:42:14:67:79:
c8:c3:8c:9c:57:71:27:ea:8e:ca:b6:f7:6b:d7:e4:
b8:b6:1c:5d:49:61:f3:15:da:a8:9c:af:07:f3:97:
35:69:62:76:43:ca:d7:31:69:a0:49:1f:4d:d8:df:
ab:55:fa:88:71:27:81:c1:a9:01:6c:4f:b6:84:e6:
ec:c8:2c:be:23:cb:98:b6:98:80:8a:33:d1:2b:fd:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:40:FA:B6:52:F5:E5:0C:32:5F:F9:7F:C3:FF:17:AD:89:B7:06:6F
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:db:60:57:37:95:7c:ec:f6:61:c4:cc:80:0d:3d:9a:0a:8a:
f7:3e:6f:a7:bd:33:b4:9a:91:e4:74:80:0b:a1:d1:e3:e5:a6:
bd:8d:1f:85:61:e8:1a:17:84:71:05:a4:cc:ea:b8:7d:5d:19:
54:06:8c:af:65:06:3b:9b:a7:fd:36:a7:4a:cc:10:e4:52:d0:
5c:88:e5:77:7a:cd:e0:b4:c7:21:8d:87:c9:65:e3:a8:fa:0e:
cc:74:42:f5:eb:26:47:d8:af:88:55:5c:e1:cf:6f:8b:1d:77:
3d:f1:9d:77:75:14:3e:b3:6d:af:f4:41:bb:3b:3a:0d:31:ec:
3c:b1:58:e7:b2:01:8c:9f:52:ff:df:77:ee:29:1d:dc:2e:a8:
0f:bf:4a:b0:db:f5:e2:0a:91:72:0b:01:ce:f4:eb:47:a6:0d:
94:30:b9:a7:69:14:6b:0c:53:0e:68:40:af:2d:ae:aa:dd:36:
cd:40:06:cc:76:f9:37:e6:d4:08:a2:47:17:45:63:d0:7c:48:
0f:3e:8a:17:f4:67:42:cb:10:fd:23:23:2a:b7:b2:f1:4b:19:
be:7e:97:38:b4:ee:c3:73:63:ac:f2:4c:69:38:17:0d:a0:cc:
d4:a9:40:db:19:7f:f3:14:ed:61:fd:a2:d2:c9:b7:d4:6d:d1:
63:07:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:43 2025 by rpki-client