Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: ZhMEYKURImCTjCCZGawWn6gxbvCkJ9hqsDneCAQLOdg=
Subject key identifier: FF:43:8D:BB:F7:71:66:06:CE:FE:58:7B:47:23:6F:3A:EC:D7:D8:2B
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 01977A8B58973289EF8DC36C90BA5752D29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 12A2
Signing time: Mon 16 Jun 2025 21:00:41 +0000
Manifest this update: Mon 16 Jun 2025 21:00:41 +0000
Manifest next update: Tue 17 Jun 2025 21:00:41 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: r1K8IGh0qO0L77GgIVwvGtYVnhIJIQ0/n1MIdAGjnOk=)
2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:58:97:32:89:ef:8d:c3:6c:90:ba:57:52:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Jun 16 21:00:41 2025 GMT
Not After : Jun 17 21:00:41 2025 GMT
Subject: CN=ff438dbbf7716606cefe587b47236f3aecd7d82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:36:f7:a2:65:87:ac:c5:57:a2:78:e4:5b:
fb:62:cb:29:d8:ba:f8:f6:22:7c:24:36:f3:a5:43:
8b:77:77:59:28:a8:dd:fe:d5:fd:08:41:fe:64:42:
13:73:59:24:56:62:03:35:6a:1d:35:02:60:cc:b2:
7d:2a:6b:2f:57:2a:e6:94:4a:ca:98:3e:2c:ec:b7:
86:75:24:5b:70:c8:92:b8:eb:e3:f8:dc:48:c5:13:
d9:f8:4b:99:e3:dc:2f:a0:a8:40:a5:55:f4:76:0d:
08:3a:76:50:19:7f:78:ea:14:54:36:63:c4:98:c9:
c3:88:c4:3c:82:ee:d6:22:cf:14:e6:a7:f2:d1:0b:
34:64:d2:b7:de:7f:db:5d:99:68:7f:d4:7d:1a:1e:
5b:17:fc:9d:81:d8:e2:cb:dd:2e:c4:b5:33:b9:26:
b6:79:99:e3:6a:2b:22:d9:70:b6:33:cf:5e:ae:1e:
fb:4d:e0:0a:62:01:5d:7a:65:56:f0:6b:06:dc:82:
0b:5a:13:05:44:60:ae:73:89:44:c9:c4:a2:84:3c:
b6:5c:16:39:52:2a:fa:a7:fc:03:ed:cc:57:7c:6e:
02:12:70:75:30:c5:7c:47:b0:72:16:b9:06:da:3e:
3c:cb:a3:6e:b9:74:23:d6:2e:9c:18:48:ce:ef:fc:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:8D:BB:F7:71:66:06:CE:FE:58:7B:47:23:6F:3A:EC:D7:D8:2B
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:81:21:4f:d0:b6:ce:e3:de:80:db:33:75:a4:97:f8:8d:88:
fb:73:4f:66:54:5a:b1:de:6d:1c:7f:40:a7:39:78:e5:85:6e:
d7:cd:5e:b5:0d:dd:7c:71:7b:dd:bb:03:d6:4b:a8:b4:48:06:
8f:3f:ff:16:da:dd:f5:61:9e:0c:99:df:e6:5a:d9:b1:c7:ad:
bc:12:54:c0:ba:50:d6:eb:39:e1:f2:2d:52:eb:85:a5:0e:bb:
70:3d:5c:11:12:1c:4f:1b:96:0e:d9:03:2f:7d:27:e3:70:57:
c4:9d:3f:28:0e:df:ee:76:a3:2b:bf:95:8e:ba:70:89:22:09:
1f:72:eb:49:59:15:fe:1c:f9:05:fe:de:ff:dc:b3:76:5d:ba:
c3:cb:81:82:70:1c:df:17:4d:c0:2e:21:60:d2:a0:0c:e9:0a:
48:46:d0:6c:0e:86:30:1d:1f:b7:f9:24:5e:51:7f:32:f3:06:
43:8c:8e:33:4b:55:85:e1:98:35:75:8b:81:94:05:15:66:68:
eb:14:35:69:25:30:c1:14:bb:5a:92:9e:88:c7:b2:2c:a5:9e:
b5:42:0d:02:2a:8d:60:9e:d0:2d:c9:53:7a:28:d5:54:71:54:
e3:c7:f7:8d:da:83:0f:d2:94:eb:be:3b:6f:b9:d7:1d:ad:16:
62:eb:82:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6i1iXMonvjcNskLpXUtKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi
Mzc3MGYwHhcNMjUwNjE2MjEwMDQxWhcNMjUwNjE3MjEwMDQxWjAzMTEwLwYDVQQD
EyhmZjQzOGRiYmY3NzE2NjA2Y2VmZTU4N2I0NzIzNmYzYWVjZDdkODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAo296Jlh6zFV6J45Fv7Yssp2Lr4
9iJ8JDbzpUOLd3dZKKjd/tX9CEH+ZEITc1kkVmIDNWodNQJgzLJ9KmsvVyrmlErK
mD4s7LeGdSRbcMiSuOvj+NxIxRPZ+EuZ49wvoKhApVX0dg0IOnZQGX946hRUNmPE
mMnDiMQ8gu7WIs8U5qfy0Qs0ZNK33n/bXZlof9R9Gh5bF/ydgdjiy90uxLUzuSa2
eZnjaisi2XC2M89erh77TeAKYgFdemVW8GsG3IILWhMFRGCuc4lEycSihDy2XBY5
Uir6p/wD7cxXfG4CEnB1MMV8R7ByFrkG2j48y6NuuXQj1i6cGEjO7/zcIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9Djbv3cWYGzv5Ye0cjbzrs19grMB8GA1UdIwQY
MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct
N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm
LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0oEhT9C2
zuPegNszdaSX+I2I+3NPZlRasd5tHH9Apzl45YVu181etQ3dfHF73bsD1kuotEgG
jz//Ftrd9WGeDJnf5lrZscetvBJUwLpQ1us54fItUuuFpQ67cD1cERIcTxuWDtkD
L30n43BXxJ0/KA7f7najK7+VjrpwiSIJH3LrSVkV/hz5Bf7e/9yzdl26w8uBgnAc
3xdNwC4hYNKgDOkKSEbQbA6GMB0ft/kkXlF/MvMGQ4yOM0tVheGYNXWLgZQFFWZo
6xQ1aSUwwRS7WpKeiMeyLKWetUINAiqNYJ7QLclTeijVVHFU48f3jdqDD9KU6747
b7nXHa0WYuuCGQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:34:27 2025 by rpki-client