Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: cWM1wrpLmUgrGgVQdVdgQW4R5oe9KY4Y0lSpahRI2u4=
Subject key identifier: 86:5C:E4:8B:39:78:C0:3A:EC:59:A4:7E:5E:00:51:AE:7D:FC:1E:4B
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 0198D8BCF3C2759C7470173E29534B4BCEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 21:01:58 +0000
Manifest this update: Sat 23 Aug 2025 21:01:58 +0000
Manifest next update: Sun 24 Aug 2025 21:01:58 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: yWaswe3gcpfs2bdhSTYGclji72a6MRsonj4MXz+EIOs=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:f3:c2:75:9c:74:70:17:3e:29:53:4b:4b:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Aug 23 21:01:58 2025 GMT
Not After : Aug 24 21:01:58 2025 GMT
Subject: CN=865ce48b3978c03aec59a47e5e0051ae7dfc1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:00:19:61:06:e1:37:75:cf:61:f3:d0:f9:
b3:0d:c1:52:ee:ba:11:20:68:32:2e:41:ee:b8:c2:
21:10:28:d9:43:ce:71:b7:d8:e0:ca:e8:dc:39:d9:
78:c8:d3:34:d7:dd:f5:ef:6d:64:71:1a:a8:00:97:
ef:9d:06:71:47:b3:98:f3:74:55:8e:00:d7:ca:d6:
3e:4c:61:8f:bc:6e:80:5e:a4:72:29:e4:96:49:89:
e9:fc:75:3f:04:bd:b5:f1:ba:54:3b:7d:d5:6b:05:
e9:24:e2:6f:f1:0d:a0:a4:82:81:7f:f7:d1:85:ad:
69:59:bb:00:db:02:84:94:43:48:ec:31:35:b8:f0:
15:c0:40:65:04:6d:73:24:22:92:86:10:7d:f9:23:
ba:10:a5:c4:00:22:38:57:c3:c7:d1:20:f2:53:46:
ec:00:0d:6d:77:79:53:65:a9:b7:f4:bd:e6:34:51:
43:e3:66:e2:3a:e1:a6:22:a8:ed:f2:65:d0:2f:32:
be:48:17:61:51:a7:3e:68:b9:f4:80:86:97:30:a3:
38:72:67:82:e1:e6:2a:9a:8a:3e:4e:d3:62:71:8d:
16:71:44:b5:0b:87:a1:1d:cf:d8:48:94:c3:30:51:
64:09:44:7c:66:fa:cc:2e:0a:3c:c8:c6:d3:fe:69:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5C:E4:8B:39:78:C0:3A:EC:59:A4:7E:5E:00:51:AE:7D:FC:1E:4B
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:68:da:9a:a5:34:6f:e6:ea:49:ac:19:64:7e:1f:b6:ee:
fd:fd:be:45:d4:2f:02:de:0d:d1:81:14:c9:bc:a7:45:13:41:
7a:37:2a:c8:87:31:c2:07:87:37:32:94:45:8a:4c:7a:87:3c:
de:1d:2b:6a:50:6d:6b:f5:a5:6d:d6:e5:87:a4:6f:65:64:11:
34:cc:27:60:5d:b8:b0:17:15:56:ed:8c:a5:39:ea:4c:7d:b3:
5a:ee:74:56:4a:6f:db:10:ea:27:5a:12:b8:3e:12:f2:d0:ea:
69:7f:da:d0:41:84:27:f6:60:76:f9:2c:2b:77:3a:ac:03:9c:
c0:0a:e5:ab:23:d7:ee:8e:77:60:e9:b3:b8:2b:4a:b8:94:9d:
3a:63:72:8e:ab:c1:70:b3:1d:e6:3e:bf:f6:1b:da:d2:4b:22:
70:ee:6b:8f:fe:a1:2b:c5:72:b6:8d:29:e6:8d:00:1d:ae:8c:
43:aa:bf:d8:e7:74:57:33:f8:2c:fc:32:59:d6:61:70:63:8a:
20:9b:ea:6c:4c:90:cc:52:2b:07:57:14:37:bf:63:9a:7f:ca:
79:9c:b9:da:bb:6d:8f:b2:68:c0:a5:41:ac:cd:6f:d6:40:db:
5e:92:f6:2b:79:27:c6:8a:3d:0e:40:c4:57:ed:cd:85:86:4b:
16:74:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:06 2025 by rpki-client