Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: nV7ZoO1pjjHUU5juuNGWzWNWDrsnEctsc3gOoLVSu3c=
Subject key identifier: 8C:2F:C1:84:60:E2:63:8B:F7:7D:93:86:89:09:7E:7C:2F:B9:70:74
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 0198D85102A1DF9B4B6B44D5BFF3769C49AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 0FFE
Signing time: Sat 23 Aug 2025 19:04:04 +0000
Manifest this update: Sat 23 Aug 2025 19:04:04 +0000
Manifest next update: Sun 24 Aug 2025 19:04:04 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: /IRoPhTMDtZdr91ZOyTZfFF5nfwqu+dkc4/l8hd91I8=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:02:a1:df:9b:4b:6b:44:d5:bf:f3:76:9c:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Aug 23 19:04:04 2025 GMT
Not After : Aug 24 19:04:04 2025 GMT
Subject: CN=8c2fc18460e2638bf77d938689097e7c2fb97074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:3b:a6:95:b6:e4:58:5a:37:f4:c1:51:c1:
b7:41:21:a8:b5:fd:a0:5b:c6:d1:bb:22:2a:13:1f:
ac:02:18:83:27:0e:f2:64:98:5b:43:cd:6b:7f:05:
ce:d1:ae:0d:6c:d2:7b:a5:fa:04:44:ec:0f:bc:b1:
fe:1e:10:0a:4a:25:4b:46:e4:c7:87:7d:56:25:c0:
f8:aa:c9:fd:84:c2:30:9d:a1:d6:b4:2b:c3:22:bb:
b8:e6:73:c5:59:70:9a:27:f6:68:79:e7:25:6b:44:
5b:29:34:a7:47:b4:db:03:36:9b:64:b5:00:52:38:
59:46:d0:a9:87:5a:7e:00:c6:f3:30:be:ff:be:77:
ca:ec:7e:50:d2:63:60:2e:51:09:fd:2f:aa:03:14:
90:6a:6f:20:49:53:96:11:db:a7:f7:d4:74:a0:2d:
83:42:3c:7a:45:c2:3b:bd:da:6d:ba:d0:8e:11:89:
03:bd:9c:3f:10:6f:52:62:4f:bc:50:43:f7:dd:25:
30:90:8f:60:e3:12:7e:de:ad:85:a3:76:da:7b:8c:
b2:2d:f5:14:76:a4:3f:69:0d:d0:4a:01:8f:97:62:
e2:f2:3c:92:04:f6:9e:88:7b:1e:c1:b1:78:b6:a7:
c3:34:8e:5c:0b:bb:5d:13:05:a6:21:fc:40:89:54:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:C1:84:60:E2:63:8B:F7:7D:93:86:89:09:7E:7C:2F:B9:70:74
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bb:d7:75:7d:3c:3b:ca:da:33:4d:c3:f6:a8:ba:9f:3f:e6:
d1:12:da:3b:11:d0:d1:5a:06:24:52:cc:a2:1e:96:99:5f:ed:
e8:54:80:d7:b4:03:cc:6e:65:04:a0:29:b9:83:9b:e9:67:73:
22:1b:95:75:f7:94:07:f1:9c:fe:25:e1:d4:66:94:ee:2e:33:
fc:25:f8:10:ba:01:41:a1:bd:9f:65:f5:42:98:73:a6:d8:95:
15:7a:5f:36:a0:10:64:91:8e:ce:c5:fd:5e:9a:3f:5e:92:15:
c7:b6:85:74:55:32:89:86:f0:bf:5d:d9:01:f3:40:4e:33:fc:
60:50:f9:60:d6:9e:6e:37:2b:2d:4d:bd:d7:8a:cb:5b:03:f1:
fa:8b:c7:6a:94:c3:5b:b0:65:e0:c3:5a:cb:45:a5:d7:08:2c:
81:37:96:f1:1e:d5:b5:9b:33:d2:aa:6f:d9:62:d4:d2:43:9b:
39:61:9d:81:34:07:5c:1b:5d:aa:4b:16:0a:20:4d:49:18:d5:
0c:e7:b9:67:d3:01:5e:a1:c9:1f:47:65:36:8a:b5:42:6a:f7:
c7:37:b1:38:cd:dc:5e:e0:1e:12:59:3b:bb:01:f4:84:9d:54:
3f:f3:4b:f9:34:d0:1a:64:ea:04:f7:04:33:45:a6:e4:b2:96:
94:25:95:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUQKh35tLa0TVv/N2nEmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjUwODIzMTkwNDA0WhcNMjUwODI0MTkwNDA0WjAzMTEwLwYDVQQD
Eyg4YzJmYzE4NDYwZTI2MzhiZjc3ZDkzODY4OTA5N2U3YzJmYjk3MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1I7ppW25FhaN/TBUcG3QSGotf2g
W8bRuyIqEx+sAhiDJw7yZJhbQ81rfwXO0a4NbNJ7pfoEROwPvLH+HhAKSiVLRuTH
h31WJcD4qsn9hMIwnaHWtCvDIru45nPFWXCaJ/Zoeecla0RbKTSnR7TbAzabZLUA
UjhZRtCph1p+AMbzML7/vnfK7H5Q0mNgLlEJ/S+qAxSQam8gSVOWEdun99R0oC2D
Qjx6RcI7vdptutCOEYkDvZw/EG9SYk+8UEP33SUwkI9g4xJ+3q2Fo3bae4yyLfUU
dqQ/aQ3QSgGPl2Li8jySBPaeiHsewbF4tqfDNI5cC7tdEwWmIfxAiVQ/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwvwYRg4mOL932ThokJfnwvuXB0MB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLvXdX08
O8raM03D9qi6nz/m0RLaOxHQ0VoGJFLMoh6WmV/t6FSA17QDzG5lBKApuYOb6Wdz
IhuVdfeUB/Gc/iXh1GaU7i4z/CX4ELoBQaG9n2X1QphzptiVFXpfNqAQZJGOzsX9
Xpo/XpIVx7aFdFUyiYbwv13ZAfNATjP8YFD5YNaebjcrLU2914rLWwPx+ovHapTD
W7Bl4MNay0Wl1wgsgTeW8R7VtZsz0qpv2WLU0kObOWGdgTQHXBtdqksWCiBNSRjV
DOe5Z9MBXqHJH0dlNoq1Qmr3xzexOM3cXuAeElk7uwH0hJ1UP/NL+TTQGmTqBPcE
M0Wm5LKWlCWVAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:24 2025 by rpki-client