Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: 15TN2Q+ReXBhqLSB5J8lUGz4jM7LekobHAynIAZ5z+0=
Subject key identifier: DF:41:1C:E5:AB:43:45:26:42:04:D0:D0:D4:E1:60:83:BA:53:B3:96
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 0199FD33F7C9383C6C215F7826A7FEB22A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0DC0
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: mTahC21VHa+lUIGoRtOczs4rVWcVtL9x/CKQ3ty/ifU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f7:c9:38:3c:6c:21:5f:78:26:a7:fe:b2:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=df411ce5ab4345264204d0d0d4e16083ba53b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:a0:a5:3d:d3:41:db:a6:e6:5c:07:79:98:
a4:8a:e1:b4:9b:c4:ac:26:de:52:ab:b8:cc:3b:7a:
f2:c8:de:04:aa:5b:3b:02:b6:82:6d:70:46:63:eb:
9f:4b:e8:f9:cc:ab:4c:4b:07:9b:b8:67:a2:b1:01:
fa:fb:1f:0c:2c:0a:48:b9:b9:fb:4a:99:e2:d2:92:
73:3b:a1:16:1b:29:2a:75:68:56:c2:da:29:69:2f:
a6:4a:fc:16:51:95:33:1f:2f:a6:1f:84:cf:b7:6f:
c6:66:2d:1d:1d:d6:de:53:1c:21:c9:b6:81:90:f2:
3f:ce:a0:70:0a:61:6e:f0:58:e6:8a:83:38:f4:f6:
0a:4b:8e:2c:31:3a:e1:16:ff:22:ef:ca:86:64:59:
0c:24:03:da:b8:c2:b8:01:c6:8b:3c:c1:af:ff:48:
d4:c0:b4:e7:b9:b2:69:2c:28:35:56:63:66:49:88:
5d:b3:43:97:58:d4:4f:79:34:93:7a:c3:11:80:1a:
e2:02:93:f6:c7:a0:d0:3f:3d:7f:5d:50:c1:70:21:
f7:47:b7:7c:38:85:5f:e6:51:ed:f1:5a:e5:b4:b4:
64:02:f1:c2:0e:78:50:64:74:b7:19:5c:d3:15:c6:
1e:38:48:70:98:29:5d:8b:6b:4d:7a:61:46:ba:95:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:1C:E5:AB:43:45:26:42:04:D0:D0:D4:E1:60:83:BA:53:B3:96
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1b:97:eb:3e:e2:c2:fa:47:9c:cc:71:ed:62:77:e6:9e:71:
d2:59:44:93:1c:8b:d4:bf:8c:2b:1d:bb:7b:7f:cb:c6:cf:31:
08:60:0b:bf:da:f9:0a:b4:9b:49:e2:3c:be:36:76:65:e8:2d:
ad:ff:e1:43:52:72:33:93:17:42:a8:5b:79:20:49:03:b8:1a:
7c:5d:69:4a:c5:4f:dc:3a:f4:f0:58:ad:03:36:e9:8b:1f:23:
25:fb:cb:6f:81:7b:fa:41:e8:c0:1c:36:fd:66:eb:f2:c5:fa:
18:63:41:74:3a:32:4e:57:ed:b1:e5:f5:86:de:a7:c0:ff:22:
cb:4c:34:16:2b:93:07:11:25:87:bf:e7:01:44:d4:32:4c:a8:
ac:2b:a9:db:75:08:6f:07:0d:46:56:14:14:24:4b:43:49:8f:
45:0c:dc:48:5b:9a:21:a0:b7:a7:16:f5:45:b0:47:8f:53:9d:
a7:50:d0:4b:fb:f1:10:96:5d:08:f9:e1:3f:09:ad:cd:86:c0:
99:2f:36:5d:72:24:e7:8c:01:5f:48:2c:a8:f3:87:62:e7:02:
5c:8d:c2:79:fe:dc:7e:33:e5:18:74:3a:bc:f9:5d:ff:10:79:
b6:80:0e:10:92:14:96:18:75:55:5b:0c:eb:49:0c:3e:69:1d:
47:89:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:28 2025 by rpki-client