Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: Z24ZtYnV4IkQkg6Khu3QLj0jwKbE/yPh+Q1XSPuOpEA=
Subject key identifier: 43:03:22:3B:00:7D:4F:80:B4:D3:93:A3:01:31:CF:11:90:4C:D9:05
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 0196A4D366B7B2F83707BC213EC74F7F2E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 09:00:39 +0000
Manifest this update: Tue 06 May 2025 09:00:39 +0000
Manifest next update: Wed 07 May 2025 09:00:39 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: AgktF4nt/i18Y0DoX+1R4bA56G3b3Ebr1uWNjgDYLBo=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:66:b7:b2:f8:37:07:bc:21:3e:c7:4f:7f:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: May 6 09:00:39 2025 GMT
Not After : May 7 09:00:39 2025 GMT
Subject: CN=4303223b007d4f80b4d393a30131cf11904cd905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:1c:ea:5f:60:a1:4a:c4:1c:99:fa:55:eb:
a9:93:12:67:50:af:e7:a9:77:3e:82:75:f7:fd:b4:
90:56:f8:55:b1:47:f1:7b:42:47:54:b4:f9:62:52:
c2:a9:c2:2f:df:da:e3:89:92:29:d1:96:d5:5a:e9:
3d:d1:be:9c:a4:f1:d9:1d:ff:f6:d3:9e:47:c4:0e:
72:9c:fb:bb:ea:1c:d0:04:51:a1:56:eb:3c:38:31:
58:84:56:d6:c7:fb:c1:29:ea:0e:1c:cb:20:58:40:
f6:86:95:a9:42:a1:28:b5:16:0e:fc:e5:f3:83:ff:
03:a6:a0:83:df:18:6a:19:1c:65:68:8d:dd:b4:b8:
a5:2f:52:44:06:84:df:d0:2e:85:06:2a:77:38:f5:
b8:3b:0e:78:fa:c7:6f:06:df:91:c4:95:ac:3a:c7:
f4:d8:59:c0:14:9b:9b:5d:87:9d:20:83:eb:36:19:
f1:4c:c6:a5:47:72:b1:22:9f:96:1a:c9:24:97:cf:
b7:1f:81:ee:ef:b8:98:a6:eb:54:b8:b7:eb:21:7c:
e4:93:59:e4:e1:95:ae:94:9f:24:5c:a3:db:d0:72:
9c:c9:bb:83:21:92:d9:8c:54:e6:33:cd:94:a9:40:
ce:46:fa:02:8d:db:62:f1:c7:67:85:82:9b:94:92:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:22:3B:00:7D:4F:80:B4:D3:93:A3:01:31:CF:11:90:4C:D9:05
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:c2:c2:77:60:ae:f8:c4:65:5a:d8:91:80:a3:50:8d:0e:fa:
65:16:cd:72:59:51:80:f8:f5:18:d8:5f:34:31:7b:1f:d9:a1:
a1:25:f5:aa:41:c6:df:b3:90:84:8c:33:88:fe:9e:83:3d:4b:
35:d2:80:0d:16:cc:c1:87:44:e2:6c:65:43:34:e1:52:d8:75:
bb:28:08:2d:94:a8:98:e3:42:5c:38:f0:9b:21:da:0b:db:15:
99:a1:15:66:f7:b8:e1:c8:ec:bd:f9:d7:8a:91:24:2f:54:4c:
9c:05:bf:2f:d2:b8:48:ef:92:6c:dc:01:11:33:46:31:8a:de:
20:ee:77:06:7d:cd:a5:32:57:56:78:d4:34:7f:82:e4:75:c0:
ff:d0:6e:3f:53:9b:51:08:e9:5f:cb:5f:ef:6d:cc:ed:7d:70:
44:6d:3b:10:61:18:89:44:1e:84:c5:f0:83:aa:fa:50:50:2c:
5c:3c:99:62:ee:48:fb:82:95:ae:0b:da:6e:11:19:72:5a:03:
1a:d1:99:81:a4:e4:43:9c:85:ee:1e:23:55:7f:f0:f8:fb:75:
98:0d:1e:8a:d9:7f:61:2f:f8:64:9a:20:9f:b8:5a:67:87:c8:
3f:8f:fe:2d:1b:d0:99:13:02:da:70:5a:c7:31:5a:58:c7:22:
bd:94:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:45:06 2025 by rpki-client