Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: vEueq4BuVXDRG54YL9/EfB8FF1CJmgdNaCbTR5NoTAU=
Subject key identifier: 17:AE:4A:8C:EF:2D:10:68:C5:C3:D6:E7:DD:D0:0C:F3:E6:CB:1D:4E
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01976EF516139D9E86F9CBEF291F7BFDF246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 1226
Signing time: Sat 14 Jun 2025 15:00:45 +0000
Manifest this update: Sat 14 Jun 2025 15:00:45 +0000
Manifest next update: Sun 15 Jun 2025 15:00:45 +0000
Files and hashes: 1: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
2: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: 6GTdhnwLumkEh4nsUs5VrPXfKnQuXbC171HkwgyU29c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:16:13:9d:9e:86:f9:cb:ef:29:1f:7b:fd:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jun 14 15:00:45 2025 GMT
Not After : Jun 15 15:00:45 2025 GMT
Subject: CN=17ae4a8cef2d1068c5c3d6e7ddd00cf3e6cb1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:c6:64:65:67:e0:af:e0:41:f2:d5:cb:0d:
7d:29:38:c2:36:ec:f4:b1:44:11:7f:14:17:a6:44:
f4:b7:aa:f0:86:c8:db:ae:62:da:ab:b1:3d:f3:ad:
f8:db:a6:8e:bf:0d:b5:8c:65:49:83:a7:2d:28:f5:
01:90:5e:a3:99:ec:37:f0:ed:1c:31:e9:bb:d5:1d:
f4:d4:13:68:6b:ce:99:47:7f:3a:d3:0b:6c:32:c0:
44:3c:af:3c:d0:20:21:c9:c3:f2:65:d5:90:3d:7f:
aa:31:03:dd:91:a1:d4:30:3a:f2:14:81:b5:b5:10:
08:ed:95:12:04:00:c3:9e:7d:67:c0:ec:57:ba:c6:
cc:1e:b1:b2:c0:e0:78:ba:e0:0c:71:bb:c1:e1:d8:
50:67:ec:76:49:e1:73:bb:04:bb:c3:bf:4d:03:ed:
7b:1a:97:8c:a6:0e:ab:ed:cd:fe:e2:47:02:69:ba:
2e:7b:c6:58:d5:0e:2b:10:e6:bc:b8:a1:ac:18:ad:
37:71:ca:98:d5:e6:1a:b0:c0:5e:a2:e9:2d:f7:a2:
1a:c4:34:91:bc:55:09:23:a8:4b:3b:8a:c4:ec:57:
ca:e0:43:01:28:85:1a:33:83:2c:b8:26:e4:47:69:
c5:97:6c:12:05:2d:ae:df:ae:e0:98:9a:01:35:2f:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:4A:8C:EF:2D:10:68:C5:C3:D6:E7:DD:D0:0C:F3:E6:CB:1D:4E
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:3f:fd:6d:b2:42:48:95:ca:c2:d2:07:39:c2:27:c4:eb:
1c:eb:99:c9:f2:15:df:5d:3e:61:9e:c2:05:13:35:dc:6f:d7:
7f:23:4c:a1:87:8f:73:1b:5a:6a:a5:f1:b1:09:e9:66:5f:7d:
35:ce:85:de:1a:0c:55:02:f2:17:ec:30:7c:c0:a1:c6:0e:d3:
05:20:fd:56:20:39:7a:ec:22:ef:8b:61:63:d4:3f:54:42:ea:
b9:6e:81:51:51:6d:7f:4b:92:0f:e8:23:f6:39:99:db:64:33:
c1:dd:ce:65:00:c6:2f:7c:69:bf:6c:cd:7d:37:80:54:85:f4:
75:c6:f7:47:bd:fc:e0:2b:80:ed:c3:ca:4a:1e:75:61:af:4b:
ae:0b:3a:86:e6:5e:c5:ad:4e:12:28:b4:2e:4b:a5:34:4b:18:
cb:0d:8b:de:14:c6:60:7c:ca:39:57:01:1f:36:04:11:2b:53:
22:66:86:c5:84:ac:d7:c3:e8:ac:b9:0a:97:14:ba:31:32:aa:
6f:da:17:92:1e:22:13:2a:9b:7f:be:d4:a3:45:a2:fa:2e:3b:
e7:47:42:f8:e4:e9:e1:22:57:59:64:4b:ea:77:c7:9f:af:9c:
58:2d:6d:23:13:aa:ac:2e:ea:89:10:8a:e5:30:c0:fc:8b:d6:
19:72:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:14 2025 by rpki-client