Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: s9Tt6sItAwtIxPNrtZx5ViLbOfOiSjBGFEMiErvSrys=
Subject key identifier: 47:2F:42:FD:F5:8F:59:7F:9B:76:F6:8D:D6:03:BA:EB:00:82:AA:E6
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 0197C424FF3BC1EB985A979A998BB5AE94D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 04:00:48 +0000
Manifest this update: Tue 01 Jul 2025 04:00:48 +0000
Manifest next update: Wed 02 Jul 2025 04:00:48 +0000
Files and hashes: 1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: bGqXdeYXdNMoRmhULlZu3G/CQeaG8mORTXwBP11CTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:24:ff:3b:c1:eb:98:5a:97:9a:99:8b:b5:ae:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Jul 1 04:00:48 2025 GMT
Not After : Jul 2 04:00:48 2025 GMT
Subject: CN=472f42fdf58f597f9b76f68dd603baeb0082aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:1e:66:20:ee:24:71:50:89:a4:6d:89:3d:
b4:6b:61:ee:af:e7:27:d0:9c:70:dc:70:ca:25:26:
a7:df:01:fc:d6:d7:86:74:d4:b5:f7:b3:2f:66:69:
fd:76:cf:61:1e:63:31:5d:b2:5e:08:b9:1a:ef:5f:
5d:c2:58:c7:f0:cd:96:95:ac:60:9c:73:33:d9:c8:
5f:de:d4:41:d3:d1:34:4e:f7:74:7b:f4:0c:c1:06:
2b:4c:70:17:ee:68:3c:bd:ff:e8:da:57:54:12:f2:
93:a7:02:65:41:f6:2a:23:ee:9e:ef:22:27:bc:a5:
e1:b6:30:a4:58:6d:7f:e2:5e:85:ba:66:88:98:49:
1d:77:55:f5:5c:ef:49:33:73:5b:72:83:c8:86:93:
06:4b:96:a3:58:0c:c4:33:56:6c:a4:9e:49:bd:14:
bd:15:b3:52:f5:c0:e0:9e:a7:c8:d7:47:90:1c:f3:
da:58:09:73:e0:66:69:d8:03:9a:b7:8b:04:de:76:
ba:09:79:b7:92:45:9d:86:60:89:61:72:a7:94:1a:
88:b8:f6:3b:81:b0:b2:d6:b3:b8:5d:82:f9:df:52:
a2:ac:79:b8:ce:c3:41:a4:aa:d0:d2:70:cb:79:a4:
16:a3:02:43:04:cc:c3:a9:19:b0:35:07:af:46:8c:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:42:FD:F5:8F:59:7F:9B:76:F6:8D:D6:03:BA:EB:00:82:AA:E6
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0f:dd:67:63:74:ad:77:13:48:41:ae:31:42:31:8e:95:a7:
f5:b5:19:8e:32:fd:a1:41:53:62:bd:86:ee:41:9c:21:46:17:
4c:37:1b:54:5d:5e:c5:f3:b6:e6:50:6c:c5:e3:ad:4f:80:af:
f1:99:c1:a4:81:9b:49:d6:60:aa:1d:61:25:83:88:4f:de:4d:
e6:51:c4:61:aa:bc:7d:11:c3:d4:30:45:11:81:ae:14:91:2f:
67:44:0b:9d:31:20:71:37:82:38:cc:73:43:f8:5f:d3:c9:7f:
27:66:09:01:dd:ae:10:e7:77:fd:41:ae:7e:1c:80:c6:4b:82:
6f:c6:cb:b3:d9:1d:9a:db:84:ba:f4:de:50:e4:1d:17:97:c5:
1d:65:8c:33:0a:12:74:11:84:ba:d5:4b:61:ff:56:0f:eb:12:
b5:24:26:0d:8f:c6:13:49:23:f9:bc:ae:23:03:23:4d:a4:41:
c4:24:84:c1:d7:8b:f6:23:9d:3e:41:fc:c2:82:aa:7d:57:de:
eb:30:81:65:b8:9e:9a:4c:d4:10:22:66:70:74:8d:dd:88:6a:
2e:cb:f2:9c:53:7f:c6:e6:ba:bb:06:f9:e3:2b:e2:4d:cc:6e:
7e:27:23:da:0d:5c:b3:0a:ce:c2:36:c9:40:97:46:90:fe:89:
f3:18:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:20 2025 by rpki-client