Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: vVxAmlUN9SBBeek21gI3AR4WeZhxpRFdhqI1oE6IEWc=
Subject key identifier: F4:5B:D4:8B:BD:A1:E3:69:16:3D:20:F8:F7:DD:4A:26:1D:77:BE:63
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01988167C72392CAB3BAB098A0F720037CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 12B4
Signing time: Wed 06 Aug 2025 22:01:58 +0000
Manifest this update: Wed 06 Aug 2025 22:01:58 +0000
Manifest next update: Thu 07 Aug 2025 22:01:58 +0000
Files and hashes: 1: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
2: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: UcGCrLQmDUdQY+8/a3xWA/4NKXHHu4ylHwypwNYAn0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c7:23:92:ca:b3:ba:b0:98:a0:f7:20:03:7c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Aug 6 22:01:58 2025 GMT
Not After : Aug 7 22:01:58 2025 GMT
Subject: CN=f45bd48bbda1e369163d20f8f7dd4a261d77be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:5e:55:af:60:cb:7b:d0:e6:a3:40:e5:58:
1f:5b:05:15:68:ab:0b:94:f3:57:20:42:35:64:34:
da:9b:fb:56:80:36:ac:57:5d:d1:95:3d:49:e4:82:
c9:45:b5:e0:cb:69:81:33:17:93:fb:50:8b:07:d7:
45:42:5c:d4:55:f4:56:fa:db:51:09:9f:0d:79:ba:
43:91:a1:81:aa:71:70:ac:21:60:d1:40:56:4e:0f:
28:f5:8a:3a:b0:47:d2:d4:ce:d3:3d:ea:60:17:5d:
a8:2c:7f:32:7c:7f:d1:69:56:6f:6e:14:92:25:41:
97:35:56:e3:fd:22:db:1b:61:e7:f7:73:fd:52:08:
f9:8c:a1:04:58:2f:b6:42:22:c6:e0:eb:3c:05:a0:
d9:cb:36:81:97:19:e6:ce:5f:e6:1a:77:1d:a7:33:
39:d7:2c:f7:e3:b5:36:2d:d3:7d:43:b1:7e:c9:da:
75:bb:3d:8c:d7:ea:a3:d6:a2:97:5c:88:5c:16:36:
99:8c:8b:8b:97:ff:97:06:2f:e3:44:6f:1a:a3:90:
c9:a1:f7:52:2e:03:3d:88:fc:41:50:3f:f5:db:e8:
94:e3:14:1e:a4:1d:d4:07:c6:04:2b:09:f8:65:7f:
7d:60:c6:8f:fa:b6:5e:44:61:cb:f5:14:73:b9:e1:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:D4:8B:BD:A1:E3:69:16:3D:20:F8:F7:DD:4A:26:1D:77:BE:63
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:49:be:53:a7:51:2b:d5:b4:d8:15:9d:80:da:7a:33:39:
ea:05:3d:e3:46:c5:74:85:b6:17:e2:3f:63:55:38:56:a6:23:
c1:da:59:da:f4:6e:df:b4:ae:db:c3:1d:a2:0e:41:4a:f0:84:
0b:5f:92:94:53:a1:4e:ba:2d:e0:d9:79:96:57:83:56:3a:e2:
c9:09:51:23:00:87:f6:f7:5e:8c:16:86:a3:5d:fc:33:c8:c4:
13:56:d1:fe:65:6f:ee:2b:3f:8a:3b:13:13:ab:cc:4f:28:4d:
5e:9d:a0:35:be:93:bc:e5:bb:b9:bd:a3:c1:72:31:5d:6f:a1:
5a:6a:98:c0:48:73:16:dc:d0:b2:5a:72:58:d9:76:8a:ed:5f:
45:2e:cc:36:fd:8c:2a:c0:94:1c:64:75:6b:98:3b:a5:f5:7a:
7a:01:4a:20:54:d8:9b:04:56:9f:be:3a:50:fc:85:a8:05:c2:
4a:a9:69:e2:31:7d:23:9f:a9:f5:10:d3:64:32:2b:a1:8d:12:
56:ab:a7:2c:6c:c6:a8:5b:5b:da:c6:be:16:e3:53:bf:92:73:
e4:eb:3e:74:ea:ad:df:3e:3d:31:5c:f2:91:14:0f:89:9e:45:
5f:cf:97:f5:5e:26:81:e1:64:82:e4:7b:71:ac:d0:e3:5e:cf:
11:cb:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:46 2025 by rpki-client