Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: LdZj3xlPdf+oNtEKfhBxLaQF34WdZWgBHwhrwVFjzJ4=
Subject key identifier: 67:6F:05:9C:CE:21:FE:27:9E:50:E5:03:65:15:44:2B:FE:31:6C:6C
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 0197CE3AE2BC224E25A25FA076F5C8CB30FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 15C5
Signing time: Thu 03 Jul 2025 03:00:54 +0000
Manifest this update: Thu 03 Jul 2025 03:00:54 +0000
Manifest next update: Fri 04 Jul 2025 03:00:54 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: GwTw4Xh13DikqHIhTvvx8wsYEj85MHFgrg/J3JsQ8yU=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:e2:bc:22:4e:25:a2:5f:a0:76:f5:c8:cb:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Jul 3 03:00:54 2025 GMT
Not After : Jul 4 03:00:54 2025 GMT
Subject: CN=676f059cce21fe279e50e5036515442bfe316c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:5d:33:1c:3b:58:ce:92:51:bd:5d:28:7e:
e3:b8:4c:fd:5f:3a:bc:af:10:b8:5b:4e:88:03:b8:
ee:85:a7:fc:ae:ae:cd:a6:28:4b:7b:c8:7e:ea:87:
e9:ba:21:27:dc:8c:12:3a:7c:83:6d:ed:42:5e:bc:
ba:72:2c:45:59:4e:f9:27:1e:1f:df:b9:43:93:6e:
2a:95:b4:0f:b7:4e:0c:fc:20:58:a0:e6:0e:1a:82:
5e:19:4a:9a:54:a6:f6:77:e0:a6:ee:c5:d8:66:c7:
ba:b6:07:59:be:32:9e:34:b0:43:f8:b2:f0:a8:47:
2e:7a:3e:77:f5:af:73:c4:72:ac:29:95:05:94:66:
fe:e0:9a:04:b9:17:2a:cf:1b:8e:83:67:d4:ee:0d:
20:a2:bd:cb:b0:41:c0:ed:84:c1:f3:0b:ea:fd:7c:
4f:10:b6:f3:71:c9:86:7d:a1:48:98:9d:65:b1:9f:
44:49:fa:1a:49:d8:99:7f:77:14:7b:7c:62:5a:44:
94:2b:22:55:b8:e9:e2:ee:8c:67:86:b0:dd:54:69:
0f:52:84:79:f3:9d:28:b7:ce:39:bc:d5:90:a0:c5:
b5:de:e0:53:a7:53:90:c7:6f:9e:68:4f:8a:02:0f:
1e:cd:c7:36:47:dd:84:c7:f2:d0:d8:9c:38:26:d4:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:05:9C:CE:21:FE:27:9E:50:E5:03:65:15:44:2B:FE:31:6C:6C
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:52:ed:f1:e1:46:28:a1:03:1f:93:3e:f7:3a:04:7c:0e:
a4:15:e5:4d:29:6b:dc:53:0a:02:4e:d9:e8:1f:38:b1:14:09:
55:a6:8c:4c:ec:9a:0c:cc:34:7c:38:23:e1:1a:a2:c0:f4:4f:
cc:9c:99:9b:8c:26:c1:fb:54:85:5f:4d:cf:68:88:69:67:6e:
de:62:19:16:a5:d8:42:ad:d6:a0:7f:2b:b0:4b:b2:8b:c8:2c:
24:fc:12:cf:12:41:86:15:ad:a2:b8:1f:66:79:c6:27:33:f7:
91:fb:69:7d:55:36:31:bf:0a:d5:b1:9a:c7:4d:e8:a9:b2:8c:
d9:ba:74:1a:47:b0:30:2c:9b:7d:0d:16:d2:29:ba:67:47:46:
ee:84:02:4f:0a:50:d1:58:6b:9d:a7:66:90:69:b9:c6:8c:38:
72:14:fb:64:c5:62:7f:ff:ea:7a:c4:f6:12:7a:dd:01:42:ef:
68:43:33:71:89:21:7a:2e:eb:a5:94:b2:e5:73:c3:43:5a:ae:
01:68:1c:f2:fe:3a:45:2e:c6:90:63:28:68:2b:1d:2a:a6:9a:
92:2f:8b:39:28:86:74:03:62:3f:b4:fe:29:8b:53:f7:52:cc:
6a:a2:f1:0d:b8:ef:75:23:5b:8a:4f:ad:66:9f:3c:09:1a:9c:
f7:98:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:29:10 2025 by rpki-client