Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: a8fDuHo63Nc3Y2daOga4+JJZ33LKdSGnQHS0dHVH/S0=
Subject key identifier: 51:E4:A8:CC:58:EA:8A:27:C1:F8:77:66:D4:5B:9D:06:87:DC:48:EE
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 0198D998E39E19A626259D92561551CF882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0D29
Signing time: Sun 24 Aug 2025 01:02:12 +0000
Manifest this update: Sun 24 Aug 2025 01:02:12 +0000
Manifest next update: Mon 25 Aug 2025 01:02:12 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: QEoAcIGsnlN0vNQ9JTEDdfUmpfgn0y2MyqXSC/3i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:e3:9e:19:a6:26:25:9d:92:56:15:51:cf:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Aug 24 01:02:12 2025 GMT
Not After : Aug 25 01:02:12 2025 GMT
Subject: CN=51e4a8cc58ea8a27c1f87766d45b9d0687dc48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:23:ee:95:a8:32:7b:45:74:94:a8:82:69:
60:2e:b8:96:0f:4e:4d:01:87:6c:1e:f2:48:cf:76:
52:47:75:2b:58:b0:d8:80:c5:ab:9c:93:b7:20:32:
81:1c:60:40:1b:a0:d8:f4:85:34:70:8c:ab:e6:77:
55:bb:96:74:9c:1a:1a:14:ea:1f:a0:cb:68:43:97:
a6:3c:53:d5:08:73:42:03:fb:2e:f0:7d:2f:99:80:
41:f5:c0:69:85:58:e4:ba:98:d3:de:82:c0:5f:30:
88:72:f3:fb:76:4a:b5:07:3b:61:53:bb:22:0a:ba:
b5:c6:c9:0f:43:fa:55:9b:44:d3:a6:74:2c:7a:1f:
e6:db:b4:07:f2:e7:82:bb:3a:35:7f:50:2a:b5:7e:
bb:40:5d:ef:37:44:c6:9c:75:c0:96:10:4d:15:c6:
a0:f6:72:56:b2:6d:b0:26:e7:4b:b0:fa:ec:b3:05:
ab:5a:03:26:af:c7:77:dc:5b:02:a9:74:2e:62:ca:
76:1f:07:f5:39:80:db:9d:07:5b:ae:dd:83:b8:80:
d0:11:42:20:e3:01:79:3c:70:1c:f5:e0:20:ff:6e:
47:cc:5e:c3:fa:20:85:7e:57:7d:b2:eb:05:2b:57:
12:2f:6a:60:88:94:49:00:fe:60:4d:82:a6:73:61:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:A8:CC:58:EA:8A:27:C1:F8:77:66:D4:5B:9D:06:87:DC:48:EE
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b1:f1:93:82:e0:e4:ec:ee:14:97:d0:0a:69:b5:96:de:28:
ab:29:d5:01:91:e5:8e:5e:2b:c3:f2:e0:ec:4f:43:13:af:97:
4e:39:2b:d0:88:94:6e:5e:01:3b:e6:b1:70:11:57:24:6c:13:
88:be:ec:34:2d:d9:bb:dd:7f:f2:0d:c0:2d:37:8d:da:3d:02:
24:b5:35:04:5a:a1:a1:54:35:dc:51:dd:3e:a0:b6:27:af:7c:
f3:44:12:2a:26:7f:bb:4f:d1:57:1c:92:7a:25:3e:e3:a2:3f:
d5:fc:24:80:7f:4b:22:14:a1:52:c9:91:07:6e:cd:34:40:d0:
8b:61:41:df:f6:01:63:5e:92:15:25:7b:f5:fc:a0:ec:bd:ee:
d5:fa:03:3d:af:37:a1:88:e3:71:f2:ef:fa:5e:f3:b8:78:fc:
83:ab:16:b6:ca:c3:4f:2c:eb:eb:2c:2b:f7:ad:16:65:b1:c8:
81:dc:61:29:50:16:15:10:e8:fc:18:45:8a:6d:88:1b:1f:d7:
db:23:8f:fe:11:a5:e9:40:86:3e:94:a9:59:a0:3c:b1:bd:91:
d9:a8:82:fd:fc:81:0c:f4:b0:fa:74:82:a8:e4:b4:8f:83:d7:
67:f7:19:15:53:56:9c:e5:08:bb:7a:e9:83:67:22:bb:51:b0:
7c:2c:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:30 2025 by rpki-client