Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: Ul0csw5X3LM71hTtSqEQniM0yiYZSUo7Etig2KNAut0=
Subject key identifier: BA:1D:99:63:91:45:6A:F0:93:54:F8:21:5B:24:B2:B5:9C:BF:16:82
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019883C3F8AD067C6348EAA5CAD34F30D7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 09:01:55 +0000
Manifest this update: Thu 07 Aug 2025 09:01:55 +0000
Manifest next update: Fri 08 Aug 2025 09:01:55 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: 3M+Cihj3tiOByAyqJvVSJgZrMDkWMWqlsgzJQQ2xrQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:f8:ad:06:7c:63:48:ea:a5:ca:d3:4f:30:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Aug 7 09:01:55 2025 GMT
Not After : Aug 8 09:01:55 2025 GMT
Subject: CN=ba1d996391456af09354f8215b24b2b59cbf1682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:94:50:20:31:2b:97:b9:fc:b0:6e:22:d2:
a2:bd:e6:18:82:28:7e:9c:15:12:f3:b4:f3:f4:d9:
5b:cb:9c:6f:55:1d:49:04:4b:06:51:5e:ab:1c:1a:
4d:54:29:47:96:8d:6a:61:b2:47:34:75:b5:6c:7a:
d5:a5:2f:72:1b:23:9c:40:2f:f6:ee:1d:fa:5c:69:
00:50:12:d2:4b:b0:b8:ce:26:e2:4e:d9:da:33:9a:
46:25:e3:6a:e4:25:db:22:e9:8f:45:58:18:39:14:
98:77:b2:7e:25:4d:b3:16:e4:35:99:e8:94:36:b5:
42:48:c7:35:e8:ac:90:b1:62:cb:a4:17:69:47:4b:
83:0b:b9:8a:88:9b:e1:f9:d5:fe:85:0f:70:9a:f5:
ad:56:03:6d:9c:f3:ad:b7:b5:46:ce:61:35:96:5b:
aa:a3:ab:a9:9c:67:f6:be:f9:5e:e0:a9:1c:e6:db:
b7:07:72:25:05:fe:93:93:f2:46:94:7c:d2:e0:44:
7d:df:63:48:56:9f:fc:f7:e8:a7:0e:5a:02:6a:01:
5d:63:3d:43:9f:78:f1:8e:f7:02:05:f9:24:3e:83:
bd:60:4a:7a:6c:80:b9:53:91:86:b2:f7:28:a1:5c:
24:8f:67:71:24:73:a0:49:ca:dc:fb:10:59:3a:0c:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:99:63:91:45:6A:F0:93:54:F8:21:5B:24:B2:B5:9C:BF:16:82
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:98:ca:f0:95:74:fe:06:3e:e0:6f:4f:95:09:64:ac:28:cc:
57:27:27:68:e2:38:b5:39:d3:1c:dd:ec:2c:49:c5:e4:9f:ea:
7c:75:11:60:a0:00:39:d2:85:2c:81:ed:ca:46:39:ea:d8:5e:
36:14:7f:b2:3e:7f:1e:58:9d:df:2f:09:7b:d5:9b:71:af:6d:
3d:44:c5:17:7c:78:96:f9:68:19:be:40:f5:f9:67:86:4b:6e:
a8:db:8b:8b:ba:87:75:91:e8:19:1f:0f:16:9f:53:de:7d:e4:
cd:4f:c5:d1:37:aa:87:13:fb:1b:fa:79:52:f3:25:e1:d7:a6:
41:5f:74:18:f0:51:45:9c:c4:6f:b5:82:3e:43:39:15:80:a0:
47:7a:23:69:fc:17:d6:c9:d4:1d:b2:7e:55:39:a8:85:85:67:
7b:60:d6:af:5e:ec:37:0c:34:93:2f:3b:c2:4f:9f:01:75:49:
20:92:67:69:ac:ef:51:f2:9b:48:00:15:55:35:41:07:64:4b:
f6:41:47:17:ea:db:e3:a8:4a:7a:3f:60:c6:14:28:64:a0:15:
6e:ab:81:eb:d3:86:4c:45:12:58:f4:8b:98:e8:6c:c2:88:30:
12:36:87:d2:c1:8a:bc:fa:35:7e:60:b2:02:17:45:05:e2:38:
28:b7:c6:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw/itBnxjSOqlytNPMNfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz
NWFkZTUwHhcNMjUwODA3MDkwMTU1WhcNMjUwODA4MDkwMTU1WjAzMTEwLwYDVQQD
EyhiYTFkOTk2MzkxNDU2YWYwOTM1NGY4MjE1YjI0YjJiNTljYmYxNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/iUUCAxK5e5/LBuItKiveYYgih+
nBUS87Tz9Nlby5xvVR1JBEsGUV6rHBpNVClHlo1qYbJHNHW1bHrVpS9yGyOcQC/2
7h36XGkAUBLSS7C4zibiTtnaM5pGJeNq5CXbIumPRVgYORSYd7J+JU2zFuQ1meiU
NrVCSMc16KyQsWLLpBdpR0uDC7mKiJvh+dX+hQ9wmvWtVgNtnPOtt7VGzmE1lluq
o6upnGf2vvle4Kkc5tu3B3IlBf6Tk/JGlHzS4ER932NIVp/89+inDloCagFdYz1D
n3jxjvcCBfkkPoO9YEp6bIC5U5GGsvcooVwkj2dxJHOgScrc+xBZOgwYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLodmWORRWrwk1T4IVsksrWcvxaCMB8GA1UdIwQY
MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt
YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm
LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5jK8JV0
/gY+4G9PlQlkrCjMVycnaOI4tTnTHN3sLEnF5J/qfHURYKAAOdKFLIHtykY56the
NhR/sj5/Hlid3y8Je9Wbca9tPUTFF3x4lvloGb5A9flnhktuqNuLi7qHdZHoGR8P
Fp9T3n3kzU/F0TeqhxP7G/p5UvMl4demQV90GPBRRZzEb7WCPkM5FYCgR3ojafwX
1snUHbJ+VTmohYVne2DWr17sNww0ky87wk+fAXVJIJJnaazvUfKbSAAVVTVBB2RL
9kFHF+rb46hKej9gxhQoZKAVbquB69OGTEUSWPSLmOhswogwEjaH0sGKvPo1fmCy
AhdFBeI4KLfGIw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:52:40 2025 by rpki-client