Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: DNRwvp/5FSffh8CuetWWI6FCcY0wYUKj6NY3xhoaQrU=
Subject key identifier: A2:9A:DC:38:E7:1A:EF:39:0F:6A:06:EF:E9:0C:26:A5:32:A4:15:7A
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 0198D4E00DD38B3C27979A59CD1ACCA4AB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: XtvVnUudYH9KzPbJDHjN/EdoKQOyTyQjrXO+ml3TpZM=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0d:d3:8b:3c:27:97:9a:59:cd:1a:cc:a4:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=a29adc38e71aef390f6a06efe90c26a532a4157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:99:b7:0e:f0:6f:94:15:90:ac:90:1b:18:
40:cb:f5:06:21:05:5a:22:5e:6e:48:be:0d:ba:aa:
d8:0b:4c:9e:3f:eb:63:1c:f5:59:0d:e0:6a:13:01:
48:49:80:70:f1:83:81:f7:fa:d5:3f:82:38:14:3e:
52:96:25:9e:e3:98:f6:52:f7:c2:62:d8:8b:3b:c4:
67:3f:ef:07:c6:24:e7:1b:24:72:b3:b3:58:0c:d2:
b2:99:85:90:5f:7c:46:5c:14:53:98:02:42:0a:3e:
e0:8f:2e:fd:6f:2f:c2:ba:8b:ba:13:6f:e5:23:da:
5f:32:f5:a6:98:dd:3d:4a:2e:d8:f9:46:d3:26:a5:
4f:2f:43:70:02:6d:2f:4b:f6:ac:55:e2:10:83:b8:
64:c7:56:d1:5c:7e:8c:01:3e:12:f5:c3:8e:85:f9:
52:b0:fd:5d:05:a2:ec:aa:38:ce:f6:23:bb:69:74:
f2:48:74:eb:4e:22:ab:cc:71:05:ee:32:54:4f:46:
61:81:30:c6:bd:f2:60:3a:10:08:4f:68:2e:14:c5:
c9:fb:f8:46:97:73:ff:f6:08:a0:8a:0a:af:19:b0:
98:d9:86:05:19:50:33:41:29:87:98:d6:3a:0c:39:
6c:79:0f:07:bc:96:75:1e:07:4b:b4:2b:c8:68:e2:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:DC:38:E7:1A:EF:39:0F:6A:06:EF:E9:0C:26:A5:32:A4:15:7A
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:5b:a0:d6:20:d9:5d:c4:0c:c9:b7:2b:10:39:c4:30:30:73:
9b:e1:06:b0:bd:75:04:0e:5b:42:4e:c6:06:b2:be:48:b8:74:
3d:6e:3d:58:7c:21:62:b2:4b:39:67:a5:75:9a:dc:d2:fa:cb:
3d:ac:0f:9a:df:1e:de:1e:61:5b:6c:42:65:2c:ef:5b:1a:e4:
61:83:12:2f:39:6b:e9:7e:c8:cd:c8:9d:bb:bb:6b:3d:bb:ba:
ac:36:ad:cc:4b:bf:97:dc:5e:8a:d1:c9:1d:f5:7b:c4:7a:2e:
81:c4:5b:41:dd:d8:d8:df:f7:5e:7b:24:7e:25:8c:51:15:57:
bc:13:28:fb:70:25:c1:8a:1d:ef:37:02:24:e0:07:73:a9:97:
38:84:70:04:55:69:1d:65:ca:8c:0d:88:c7:93:39:85:a8:2a:
75:eb:ad:61:72:39:43:98:5f:13:e6:6b:45:03:c9:27:4f:f6:
90:a8:37:4a:2f:f9:30:7e:4a:bc:fd:7f:40:28:05:77:46:67:
3a:94:b6:31:8d:ab:aa:43:d8:3d:21:7e:59:d4:3f:4a:56:84:
a3:17:b2:38:a3:c9:1e:9d:a0:bd:ff:69:2b:49:5f:48:87:c6:
aa:d5:5d:98:bc:cc:6a:7f:ae:bf:a1:8b:46:0c:6d:3a:ce:20:
45:84:8f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4A3Tizwnl5pZzRrMpKuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
EyhhMjlhZGMzOGU3MWFlZjM5MGY2YTA2ZWZlOTBjMjZhNTMyYTQxNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtImZtw7wb5QVkKyQGxhAy/UGIQVa
Il5uSL4NuqrYC0yeP+tjHPVZDeBqEwFISYBw8YOB9/rVP4I4FD5SliWe45j2UvfC
YtiLO8RnP+8HxiTnGyRys7NYDNKymYWQX3xGXBRTmAJCCj7gjy79by/Cuou6E2/l
I9pfMvWmmN09Si7Y+UbTJqVPL0NwAm0vS/asVeIQg7hkx1bRXH6MAT4S9cOOhflS
sP1dBaLsqjjO9iO7aXTySHTrTiKrzHEF7jJUT0ZhgTDGvfJgOhAIT2guFMXJ+/hG
l3P/9gigigqvGbCY2YYFGVAzQSmHmNY6DDlseQ8HvJZ1HgdLtCvIaOLGrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKa3DjnGu85D2oG7+kMJqUypBV6MB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Fug1iDZ
XcQMybcrEDnEMDBzm+EGsL11BA5bQk7GBrK+SLh0PW49WHwhYrJLOWeldZrc0vrL
PawPmt8e3h5hW2xCZSzvWxrkYYMSLzlr6X7Izcidu7trPbu6rDatzEu/l9xeitHJ
HfV7xHougcRbQd3Y2N/3XnskfiWMURVXvBMo+3AlwYod7zcCJOAHc6mXOIRwBFVp
HWXKjA2Ix5M5hagqdeutYXI5Q5hfE+ZrRQPJJ0/2kKg3Si/5MH5KvP1/QCgFd0Zn
OpS2MY2rqkPYPSF+WdQ/SlaEoxeyOKPJHp2gvf9pK0lfSIfGqtVdmLzMan+uv6GL
RgxtOs4gRYSPlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:09 2025 by rpki-client