Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: zEW/d+wIXZhEK9GtpNsF9+Jg/t53f++G5QUAan9Rf+I=
Subject key identifier: 41:41:7B:B2:50:6A:3E:2B:C2:AB:CF:77:DA:EA:39:30:43:24:B1:F0
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 0197C0B6EAB5B3D7259FC9F9524C257C9E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 150A
Signing time: Mon 30 Jun 2025 12:01:42 +0000
Manifest this update: Mon 30 Jun 2025 12:01:42 +0000
Manifest next update: Tue 01 Jul 2025 12:01:42 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: JIaey+7HGXjTmqZsgymNS0ArHm2oX4AQY3cTxjN2jpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:ea:b5:b3:d7:25:9f:c9:f9:52:4c:25:7c:9e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Jun 30 12:01:42 2025 GMT
Not After : Jul 1 12:01:42 2025 GMT
Subject: CN=41417bb2506a3e2bc2abcf77daea39304324b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:7c:1b:2e:a2:fb:d9:41:7e:ae:49:ec:1b:
88:c1:0c:47:48:9f:4b:92:b1:a6:d9:db:02:ff:4b:
f9:8f:3c:36:f6:31:fe:5f:dc:c6:59:17:d3:e4:54:
f3:34:26:cb:88:59:0f:2c:08:55:0b:99:39:45:11:
2c:f7:a5:b4:1d:b8:3b:88:f0:ea:e1:0c:41:45:f6:
40:c3:f9:62:b9:e0:e5:28:f1:12:17:d5:11:d4:19:
83:3c:9b:d5:bc:4b:fe:69:14:8c:0b:f2:6b:1e:fb:
58:a7:cf:8b:53:43:cf:ec:4a:50:75:54:76:78:fd:
15:2f:f3:5f:d6:93:8a:b9:d3:11:98:e5:6c:bd:32:
8b:1d:68:12:d3:91:62:db:ad:73:01:e3:b6:be:fc:
31:57:81:15:17:6e:0a:50:53:4d:96:0e:7d:53:c2:
88:ea:b7:29:53:2b:27:50:e9:a2:ec:14:01:28:64:
c2:bf:f0:13:b6:99:29:08:f4:bf:77:b1:98:aa:db:
70:46:92:62:87:b3:42:14:c6:ed:75:0b:50:37:df:
cc:ed:0e:15:e8:be:d3:44:8a:e5:2d:56:3f:08:d8:
1e:9f:b5:4f:4e:f7:56:cf:4f:6c:70:4e:cc:de:5f:
28:eb:0b:fb:62:b3:c2:6d:b5:a2:d2:fe:54:7f:82:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:7B:B2:50:6A:3E:2B:C2:AB:CF:77:DA:EA:39:30:43:24:B1:F0
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:a3:c8:7a:54:ce:72:cc:ec:a8:eb:90:42:1b:8a:8a:62:
30:13:99:70:9f:2f:2f:ff:47:5d:b2:4c:f7:f6:0d:d5:8a:93:
8b:00:a9:20:72:78:ec:e9:41:7b:d2:21:0a:47:7c:fe:4a:c0:
6f:a5:b5:18:3a:c6:93:fa:94:34:10:2e:70:06:ee:96:d5:fb:
a7:fb:bd:9d:b1:a4:da:26:f9:a8:f7:8d:fc:c3:48:11:28:a5:
ab:cd:44:03:21:ab:40:23:5e:3f:60:41:4c:58:a0:4e:0e:87:
93:98:cc:e2:e2:58:8a:82:c2:4a:68:80:d3:9f:ab:e0:3b:89:
8e:3a:2b:48:0b:48:68:64:13:28:14:24:a3:0d:05:0e:16:e6:
5c:63:e9:83:34:c1:f1:65:9f:6d:7c:98:5c:a7:06:a9:b9:46:
ea:86:fe:79:c3:53:9f:72:6e:c2:e9:f3:ca:a0:92:6a:07:86:
50:95:cb:14:f6:05:20:48:5f:56:42:20:21:d6:31:c4:b7:46:
01:07:dd:d9:d9:51:ae:15:a4:ce:59:82:a8:d1:9c:19:1a:67:
67:c5:b3:e5:21:20:71:40:8c:99:1e:f1:d4:9b:37:3c:b6:75:
bf:cc:22:24:a7:87:3f:c5:88:c2:26:c5:67:84:00:22:96:0c:
87:10:bc:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtuq1s9cln8n5UkwlfJ5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUwNjMwMTIwMTQyWhcNMjUwNzAxMTIwMTQyWjAzMTEwLwYDVQQD
Eyg0MTQxN2JiMjUwNmEzZTJiYzJhYmNmNzdkYWVhMzkzMDQzMjRiMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YV8Gy6i+9lBfq5J7BuIwQxHSJ9L
krGm2dsC/0v5jzw29jH+X9zGWRfT5FTzNCbLiFkPLAhVC5k5RREs96W0Hbg7iPDq
4QxBRfZAw/liueDlKPESF9UR1BmDPJvVvEv+aRSMC/JrHvtYp8+LU0PP7EpQdVR2
eP0VL/Nf1pOKudMRmOVsvTKLHWgS05Fi261zAeO2vvwxV4EVF24KUFNNlg59U8KI
6rcpUysnUOmi7BQBKGTCv/ATtpkpCPS/d7GYqttwRpJih7NCFMbtdQtQN9/M7Q4V
6L7TRIrlLVY/CNgen7VPTvdWz09scE7M3l8o6wv7YrPCbbWi0v5Uf4KFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFBe7JQaj4rwqvPd9rqOTBDJLHwMB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGmjyHpU
znLM7KjrkEIbiopiMBOZcJ8vL/9HXbJM9/YN1YqTiwCpIHJ47OlBe9IhCkd8/krA
b6W1GDrGk/qUNBAucAbultX7p/u9nbGk2ib5qPeN/MNIESilq81EAyGrQCNeP2BB
TFigTg6Hk5jM4uJYioLCSmiA05+r4DuJjjorSAtIaGQTKBQkow0FDhbmXGPpgzTB
8WWfbXyYXKcGqblG6ob+ecNTn3JuwunzyqCSageGUJXLFPYFIEhfVkIgIdYxxLdG
AQfd2dlRrhWkzlmCqNGcGRpnZ8Wz5SEgcUCMmR7x1Js3PLZ1v8wiJKeHP8WIwibF
Z4QAIpYMhxC88g==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:21:10 2025 by rpki-client