Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: HQImGJsJuFClg6LznCkvXCPizRB4aSs0+LXqITjouGc=
Subject key identifier: 4E:10:4C:D9:13:D3:5C:2E:31:3E:F3:86:39:DE:C3:DC:98:8A:EB:0C
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 0198D4E0033DA27EE78A20FD72393FF5B1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 1599
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: UsKDl0RZ+llgsDfQBz/jnzP3zjVHi9iZSdWFR4JgJdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:03:3d:a2:7e:e7:8a:20:fd:72:39:3f:f5:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=4e104cd913d35c2e313ef38639dec3dc988aeb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:7e:4d:85:a3:32:fa:b9:fc:ea:2f:63:2c:
ad:fd:7e:0e:86:d3:e1:1d:85:8f:b0:5a:a7:ad:e2:
22:18:c9:d8:8e:f6:c5:0f:98:db:1d:64:b3:c7:ae:
a5:46:4e:47:96:5c:9a:5b:01:3a:d3:d9:a8:ea:a6:
35:b3:47:87:a9:7b:3e:f8:7e:bf:a9:e1:90:92:b9:
33:c7:99:3e:d7:9a:39:ff:09:14:a9:51:5b:ee:b9:
94:23:94:79:cb:44:ea:9f:34:7e:7d:ae:77:f3:ae:
bb:cf:45:7a:cb:6e:54:a2:ef:8c:52:08:6a:62:69:
0c:44:f4:43:8a:24:b4:00:b9:55:95:0a:5c:cb:15:
ea:4e:5e:88:e0:93:1a:75:4a:95:8e:5f:ef:f4:06:
89:60:89:a4:21:8e:69:e7:c9:f7:0a:f7:d9:0f:ac:
d3:5f:b9:47:88:38:6b:ba:2a:f0:42:83:c5:dd:56:
3a:49:c8:4f:c3:9a:e7:8a:fc:6d:0c:57:78:a7:6c:
14:56:0e:b9:de:57:8d:91:ba:30:23:b0:f3:8f:2f:
67:c4:e8:88:7b:71:ac:4b:d8:46:10:80:76:37:35:
ed:a4:23:4f:db:4f:29:19:6d:bb:c9:4e:5d:bd:db:
2b:7a:40:c4:41:e9:b4:9e:8b:30:c5:77:e6:20:5f:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:4C:D9:13:D3:5C:2E:31:3E:F3:86:39:DE:C3:DC:98:8A:EB:0C
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:8d:c6:ff:0d:c4:4a:38:5f:5f:0c:5c:b6:86:24:da:5e:
62:41:ec:ff:89:e9:b4:e0:78:8d:ef:5e:19:f7:c6:ed:df:82:
09:be:1e:ae:d3:aa:14:52:ec:67:3a:e9:b4:d3:a5:d0:84:49:
80:f7:58:3f:46:54:f5:8a:de:42:0d:c0:9b:b9:14:b9:3a:0a:
8b:6c:a0:e6:dc:07:ce:e0:39:e0:f7:ff:4d:67:02:65:7f:a7:
96:3b:3c:5a:a2:c6:cd:bf:8e:c1:05:ec:eb:99:05:14:ec:88:
70:54:68:71:fe:af:48:41:63:fe:6d:53:da:33:28:35:48:ff:
e9:72:e7:60:63:8e:62:ae:b0:aa:4b:7e:d4:54:73:3c:85:a8:
b1:77:c9:56:53:0e:c7:1a:d1:38:81:b6:1e:00:08:c8:30:5c:
e8:7c:50:96:9d:16:fd:48:85:d7:d0:49:f9:81:c5:ee:63:53:
85:21:8d:63:75:ea:a3:54:91:d0:65:23:e7:da:5f:26:86:0b:
6f:0e:bc:a9:cb:5d:9b:17:f2:c0:c9:a8:ec:d0:19:06:31:8e:
97:fe:d2:bb:08:00:c0:6b:3b:3b:8b:66:6a:00:4f:d8:cc:ff:
3e:a6:6c:29:66:f7:cb:5d:f7:82:28:4c:01:0d:89:7f:65:c2:
e8:e9:f6:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4AM9on7niiD9cjk/9bHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
Eyg0ZTEwNGNkOTEzZDM1YzJlMzEzZWYzODYzOWRlYzNkYzk4OGFlYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmB+TYWjMvq5/OovYyyt/X4OhtPh
HYWPsFqnreIiGMnYjvbFD5jbHWSzx66lRk5HllyaWwE609mo6qY1s0eHqXs++H6/
qeGQkrkzx5k+15o5/wkUqVFb7rmUI5R5y0TqnzR+fa538667z0V6y25Uou+MUghq
YmkMRPRDiiS0ALlVlQpcyxXqTl6I4JMadUqVjl/v9AaJYImkIY5p58n3CvfZD6zT
X7lHiDhruirwQoPF3VY6SchPw5rnivxtDFd4p2wUVg653leNkbowI7Dzjy9nxOiI
e3GsS9hGEIB2NzXtpCNP208pGW27yU5dvdsrekDEQem0noswxXfmIF9/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4QTNkT01wuMT7zhjnew9yYiusMMB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhiNxv8N
xEo4X18MXLaGJNpeYkHs/4nptOB4je9eGffG7d+CCb4ertOqFFLsZzrptNOl0IRJ
gPdYP0ZU9YreQg3Am7kUuToKi2yg5twHzuA54Pf/TWcCZX+nljs8WqLGzb+OwQXs
65kFFOyIcFRocf6vSEFj/m1T2jMoNUj/6XLnYGOOYq6wqkt+1FRzPIWosXfJVlMO
xxrROIG2HgAIyDBc6HxQlp0W/UiF19BJ+YHF7mNThSGNY3Xqo1SR0GUj59pfJoYL
bw68qctdmxfywMmo7NAZBjGOl/7SuwgAwGs7O4tmagBP2Mz/PqZsKWb3y133gihM
AQ2Jf2XC6On2YQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:00 2025 by rpki-client