Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: fYqpAtQRbITUSyHMWWXBSR6UwdKpOFZhw0O7jpSv0Wo=
Subject key identifier: 3D:F7:89:3D:26:3A:94:55:CD:44:30:DE:6F:17:28:0C:32:43:4F:3D
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019673B00DBF20739E78D11117F64D117CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 11A2
Signing time: Sat 26 Apr 2025 20:00:39 +0000
Manifest this update: Sat 26 Apr 2025 20:00:39 +0000
Manifest next update: Sun 27 Apr 2025 20:00:39 +0000
Files and hashes: 1: 0ez5-37GJP5iy1QIJwf_IO-WQhE.roa (hash: QEZ8/KPLqz/9+BOZvTWpaYfcSae/bnuyUVUksCn5Y6M=)
2: 3t2CVo8lZxK05qVhWuiu4c8sgzo.roa (hash: stXOtWs8A5ImkqXvcLQ61uhzCWwyOQe5BXcDJYFxYKQ=)
3: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: RCfVGBxHm275nodlIz24iB83SBC4M49lmQtNROF2so8=)
5: sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa (hash: 7SLV5glKGePLniqHW9rAB95C/r7wSCzkCmA4YMo9QI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:0d:bf:20:73:9e:78:d1:11:17:f6:4d:11:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Apr 26 20:00:39 2025 GMT
Not After : Apr 27 20:00:39 2025 GMT
Subject: CN=3df7893d263a9455cd4430de6f17280c32434f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:2b:88:41:33:29:8a:cb:cb:ca:89:44:40:
49:8d:18:fb:f3:c3:8a:30:ea:95:6d:0e:33:1e:9f:
e3:a2:6d:49:46:bd:09:17:31:19:c2:53:62:7f:8f:
a6:d1:d1:1a:71:7c:17:e6:96:2d:86:90:76:8e:65:
90:44:f6:f8:a2:7b:83:2c:72:61:e4:16:28:07:68:
ec:e0:43:c7:63:06:fe:30:46:46:5c:fb:10:8a:76:
99:a5:41:60:3b:07:ac:ce:95:43:74:3f:4f:9c:2f:
fc:45:aa:a2:0f:e3:0c:36:f7:93:ca:b0:30:91:d5:
e9:6b:08:5f:cd:4e:6a:32:69:c7:12:77:73:8e:0f:
60:89:af:8d:3a:87:99:39:7b:28:a4:33:c7:35:36:
a8:e0:17:dd:90:6b:1d:ac:55:97:75:4b:21:2c:5d:
9d:fd:45:95:01:00:a1:d4:6a:6f:2b:84:1e:5b:61:
fb:f5:15:45:c9:78:3d:83:29:73:0d:14:b2:26:67:
da:c0:6b:ba:15:2a:62:ce:43:3f:06:ee:8d:0a:54:
01:ad:c2:76:73:0e:81:2f:89:f6:92:ab:9f:6d:50:
e3:55:2e:8e:cf:52:24:20:60:4c:35:8f:07:c5:21:
db:b5:bc:c3:09:c5:88:14:ba:3f:bc:d7:6f:c5:d9:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:89:3D:26:3A:94:55:CD:44:30:DE:6F:17:28:0C:32:43:4F:3D
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:13:47:fe:5e:74:17:8b:d2:66:48:f0:cf:b0:44:37:a4:d4:
b0:e2:ba:e2:08:5e:1e:86:db:86:6f:58:7d:7e:8e:aa:38:cc:
47:61:61:a3:e6:8d:cf:b8:b5:05:74:94:93:48:15:a3:1a:51:
f2:89:6e:6c:c1:7e:f8:db:23:bb:94:ff:d6:05:b4:6c:21:1d:
8e:5a:89:9d:d5:b0:b5:af:a0:6f:57:ee:9f:72:65:ca:32:f7:
02:b1:fd:0d:37:16:0f:28:b2:2b:34:83:10:93:06:18:34:3a:
34:ad:1d:d3:5e:83:4b:d7:36:68:cb:7e:48:d0:d9:ba:d3:27:
ee:02:f7:ba:98:0a:bc:61:97:ba:44:7a:d4:58:7a:23:6f:00:
a4:37:cc:0c:f9:d9:7e:4c:6f:bf:d9:54:83:b0:6e:e8:3d:3b:
37:6a:68:76:ce:a5:6c:5c:7d:bf:79:65:cf:c1:94:04:98:c9:
0f:96:5b:1d:3f:f4:d2:a6:07:71:08:f8:aa:26:ad:1d:f5:6e:
09:a0:d7:b4:32:f4:6c:53:a7:8c:6a:c4:41:65:e0:67:23:b5:
0a:64:f8:45:06:94:b9:96:a9:ef:67:a8:bd:17:a7:31:42:51:
72:50:b7:3c:9e:e1:2a:73:81:ab:1f:6b:8f:aa:26:45:0d:c4:
dd:08:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:55:26 2025 by rpki-client