Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: v7TrBXG91ySrCmlDoeFz6NSLgJ9CxE5k3WaH6jucH9Q=
Subject key identifier: 07:DD:87:10:40:DA:75:59:AA:09:9E:C9:F6:0C:BA:55:5D:3A:6F:02
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 0199FE469AA43A754E29EBC898F167C8DF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 1633
Signing time: Sun 19 Oct 2025 21:01:03 +0000
Manifest this update: Sun 19 Oct 2025 21:01:03 +0000
Manifest next update: Mon 20 Oct 2025 21:01:03 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: gDVcEAX/BzzRsKN4rOpv0OLHcFMatrR854Lz7yiuA8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9a:a4:3a:75:4e:29:eb:c8:98:f1:67:c8:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Oct 19 21:01:03 2025 GMT
Not After : Oct 20 21:01:03 2025 GMT
Subject: CN=07dd871040da7559aa099ec9f60cba555d3a6f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:e8:0b:a4:03:18:53:77:83:51:6b:07:87:
54:b3:d8:e3:df:f7:51:59:e7:93:a2:42:14:64:0a:
89:4a:92:bf:74:e5:46:db:5c:cf:2c:51:4c:88:80:
9d:24:9d:36:b0:ce:5f:d1:dc:df:c7:bc:8f:42:a7:
1d:0e:96:b6:69:89:9e:ed:69:73:47:ae:93:00:5f:
34:ea:a8:a1:80:7d:e8:b0:2f:c6:33:5e:bd:34:00:
c7:e9:8e:6e:64:a7:1d:10:74:35:e9:5e:f4:cf:67:
14:8e:f3:df:4e:ae:56:58:91:96:42:ac:ba:e3:56:
ce:38:da:be:a0:f9:19:c4:39:23:ae:c8:fe:25:6d:
c7:61:c6:67:72:5f:b0:54:91:24:a5:c0:a5:90:b7:
0d:b7:2d:9b:28:9b:2c:23:67:45:9d:e5:12:ff:3f:
e0:aa:80:98:6e:ca:bd:d0:14:6e:ab:3e:c0:24:5a:
95:10:c9:bf:51:67:33:01:59:9a:77:74:71:88:59:
84:2e:e0:b7:28:80:c2:5d:9e:7e:5f:2d:41:be:5f:
81:73:55:2b:a2:c2:ea:9f:f3:9b:b5:8c:c6:d0:af:
b4:2f:c7:27:e6:36:97:eb:7e:21:67:27:b9:dc:18:
db:bc:46:12:a5:7c:8a:f8:98:bc:75:98:84:57:a7:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:87:10:40:DA:75:59:AA:09:9E:C9:F6:0C:BA:55:5D:3A:6F:02
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d7:92:d5:a0:94:3f:e3:a4:89:16:56:6b:dc:76:ef:53:7d:
0a:76:a1:2e:53:61:7c:1b:b4:be:c8:7e:50:ec:ee:20:10:87:
ab:d4:2b:ea:36:97:46:57:ca:d5:bd:28:d2:23:77:d8:a7:3e:
6b:8a:87:23:8b:82:56:be:28:8c:45:a3:f5:43:cd:31:3c:6f:
ce:2f:28:1e:40:7c:62:e0:51:76:08:2e:ed:a4:38:8d:61:12:
ad:05:a2:26:1b:80:2f:58:37:1a:7a:5a:7e:81:50:b8:26:54:
f8:fc:a0:09:17:8e:66:fb:46:1d:6d:88:61:be:61:39:1c:8d:
af:6c:c1:f5:63:60:86:f8:96:68:49:fa:97:e3:a3:be:d9:58:
4a:49:46:78:79:a0:26:b7:fc:78:2f:9f:04:f8:a5:7f:e1:46:
5a:02:64:06:5c:73:cb:41:4c:76:67:67:5a:aa:f9:e4:33:72:
b1:60:0a:73:53:06:43:87:e6:63:44:64:77:53:4d:a8:df:de:
8e:eb:7e:dd:9b:b1:5f:03:01:e4:1a:9b:ee:36:55:36:a6:10:
80:fd:41:08:bf:cb:d4:29:0a:2c:c0:02:12:13:7f:98:11:09:
44:de:f9:ab:11:76:10:e2:d5:b0:f6:e8:21:38:df:15:33:c4:
15:27:bd:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RpqkOnVOKevImPFnyN9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUxMDE5MjEwMTAzWhcNMjUxMDIwMjEwMTAzWjAzMTEwLwYDVQQD
EygwN2RkODcxMDQwZGE3NTU5YWEwOTllYzlmNjBjYmE1NTVkM2E2ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w/oC6QDGFN3g1FrB4dUs9jj3/dR
WeeTokIUZAqJSpK/dOVG21zPLFFMiICdJJ02sM5f0dzfx7yPQqcdDpa2aYme7Wlz
R66TAF806qihgH3osC/GM169NADH6Y5uZKcdEHQ16V70z2cUjvPfTq5WWJGWQqy6
41bOONq+oPkZxDkjrsj+JW3HYcZncl+wVJEkpcClkLcNty2bKJssI2dFneUS/z/g
qoCYbsq90BRuqz7AJFqVEMm/UWczAVmad3RxiFmELuC3KIDCXZ5+Xy1Bvl+Bc1Ur
osLqn/ObtYzG0K+0L8cn5jaX634hZye53BjbvEYSpXyK+Ji8dZiEV6dwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfdhxBA2nVZqgmeyfYMulVdOm8CMB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdteS1aCU
P+OkiRZWa9x271N9CnahLlNhfBu0vsh+UOzuIBCHq9Qr6jaXRlfK1b0o0iN32Kc+
a4qHI4uCVr4ojEWj9UPNMTxvzi8oHkB8YuBRdggu7aQ4jWESrQWiJhuAL1g3Gnpa
foFQuCZU+PygCReOZvtGHW2IYb5hORyNr2zB9WNghviWaEn6l+OjvtlYSklGeHmg
Jrf8eC+fBPilf+FGWgJkBlxzy0FMdmdnWqr55DNysWAKc1MGQ4fmY0Rkd1NNqN/e
jut+3ZuxXwMB5Bqb7jZVNqYQgP1BCL/L1CkKLMACEhN/mBEJRN75qxF2EOLVsPbo
ITjfFTPEFSe9dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:07 2025 by rpki-client