Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: N0cNea2kBNyC9TL6Nn/dEM6D9mkLmbI7lomyhaGgyHM=
Subject key identifier: 78:EE:07:8E:79:8E:02:78:85:72:61:C0:EF:E5:B5:4C:69:3B:F8:01
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 019A52D1C5F6FC4B7BC7753CA667A172F499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 141B
Signing time: Wed 05 Nov 2025 07:01:10 +0000
Manifest this update: Wed 05 Nov 2025 07:01:10 +0000
Manifest next update: Thu 06 Nov 2025 07:01:10 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: Z2jBidRZKLs1CycAPJqs2e0+kMGDwCvRkedprSUf4x8=)
2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c5:f6:fc:4b:7b:c7:75:3c:a6:67:a1:72:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Nov 5 07:01:10 2025 GMT
Not After : Nov 6 07:01:10 2025 GMT
Subject: CN=78ee078e798e0278857261c0efe5b54c693bf801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:f1:f5:46:2d:d6:3c:e4:d5:81:52:4f:1b:
54:fc:1d:b9:68:6a:45:e9:70:d1:cc:62:98:04:63:
6d:35:38:95:4a:9c:ed:45:24:a6:c7:69:78:03:76:
bd:8a:5e:e0:b7:ca:dd:57:ce:94:95:41:9e:86:2f:
97:85:f6:2e:97:bc:c5:44:1f:d5:c6:72:3d:1b:7b:
97:9a:e7:54:2a:7d:eb:a2:c7:a3:16:36:f5:07:e0:
38:ab:37:82:70:fd:0a:3a:e7:cd:3d:56:1d:73:e4:
23:93:ab:97:bd:6c:63:12:99:a6:be:c3:a1:0c:c6:
f8:c6:a3:40:40:16:16:3c:ff:3b:18:43:51:d7:cb:
27:f3:77:69:b8:f9:5f:a1:c6:3d:b6:00:a5:bc:68:
8f:3c:d6:bd:1f:ca:df:06:ba:b9:cc:ea:59:67:e2:
0c:28:53:df:ef:b1:8a:2e:05:f8:ee:1b:c9:07:98:
78:51:7e:f2:c1:17:d9:25:12:e2:3a:e6:1c:61:3a:
47:42:fc:76:c3:37:c4:7f:5d:ff:65:73:40:4f:ec:
8c:ec:ce:9f:57:ea:3d:a5:8c:27:99:1e:ad:bb:cf:
5f:72:2a:e3:22:a4:c9:64:39:6b:bb:34:99:56:48:
f6:a5:50:1c:68:15:8f:fe:b6:b6:bb:e8:bb:b4:89:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:07:8E:79:8E:02:78:85:72:61:C0:EF:E5:B5:4C:69:3B:F8:01
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:12:f4:e6:3f:6d:47:30:81:8f:26:7a:68:a1:17:9b:ba:29:
d1:5e:13:41:b3:b8:9d:d9:f7:61:e4:01:fd:02:db:7f:90:04:
64:42:6a:79:8e:63:7a:43:76:50:5d:b5:b7:cf:7d:a2:d7:1c:
49:1d:a8:4f:19:52:4d:b2:f5:b6:f2:48:99:59:eb:d1:91:4b:
c4:83:24:a6:37:5b:fc:cf:74:58:5a:1b:0a:53:9d:5d:3c:69:
06:7e:6e:a4:81:a3:f7:a2:5c:70:76:23:52:03:03:19:95:5d:
a2:fc:db:dc:bc:67:ca:37:7f:90:0e:75:12:37:4f:af:de:b6:
5b:0d:26:df:3a:56:3a:55:5e:1a:53:d0:06:2e:50:2a:3c:4d:
e7:1a:47:6a:fc:08:2a:ec:db:75:87:18:39:14:6c:7c:11:2d:
e8:fc:d3:f1:6a:df:9f:51:ff:4a:df:49:6a:86:79:7f:5d:77:
51:2f:6a:52:a8:76:e0:4f:bb:43:94:df:a7:d1:97:9c:4c:02:
d2:8d:78:69:fa:cf:14:85:83:44:f2:4c:db:38:1b:91:03:ed:
19:11:a1:90:47:24:12:b6:da:cd:6d:8a:ef:19:e1:a0:2a:1f:
32:1a:99:72:54:2f:80:8a:db:3e:a2:33:b3:89:f5:4a:30:62:
d4:76:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:46 2025 by rpki-client