Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: BXD8I4xWJZ+i1lPgWzoi8F1by/Jf5JRHFAEuJZuiLtc=
Subject key identifier: 31:55:73:4E:2D:31:67:EE:84:53:B1:C2:30:D4:07:DA:B1:51:0D:8C
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 0198D439BFD25AD1C367446732069C8C0ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 00:00:11 +0000
Manifest this update: Sat 23 Aug 2025 00:00:11 +0000
Manifest next update: Sun 24 Aug 2025 00:00:11 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: 82o6YU/cymAtgEu9fleN6ei/ZsK2W76E4xAvHeL26Ec=)
2: USWcvgNcEilORVKmACRuhwkRBOc.roa (hash: ddQ+Ypi58Q8pIAp3pcektRPTSu+2sdx4cjmGyvh7AqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:bf:d2:5a:d1:c3:67:44:67:32:06:9c:8c:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Aug 23 00:00:11 2025 GMT
Not After : Aug 24 00:00:11 2025 GMT
Subject: CN=3155734e2d3167ee8453b1c230d407dab1510d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:86:9f:d0:ce:91:91:22:78:c5:0e:6a:a7:
53:d6:83:05:d4:de:62:4c:b6:a9:dc:db:db:59:58:
e5:47:e3:a0:78:32:7f:fb:38:32:ac:6f:32:53:72:
0a:0a:1d:b5:51:84:cc:78:f6:67:ac:0d:57:23:08:
83:41:87:44:4e:9c:cc:72:92:4b:bc:07:a4:a0:80:
de:8c:c8:22:04:7f:04:b0:a6:10:c0:33:d0:b3:77:
b4:34:38:56:06:ba:6e:d3:d4:0b:81:61:0e:bd:90:
11:c3:3e:cb:d5:6e:01:b1:d9:d3:96:87:39:0c:ae:
5b:4b:e6:9d:eb:7a:0b:99:d9:e0:db:28:f8:6f:f5:
ad:c1:f9:d0:1d:7c:0b:d3:fe:62:83:2a:85:5c:bc:
6d:c3:78:b1:ed:c2:de:fb:ca:a5:4a:6d:7d:c4:f0:
f6:17:ec:04:46:53:a0:01:4c:7e:f7:09:f6:53:c2:
df:9b:7a:6e:fc:20:ce:f8:08:2d:ee:65:6d:e0:a2:
2c:a8:50:c9:07:c4:d0:72:55:57:49:3e:1d:c4:23:
41:a8:f8:b9:2d:4b:c0:7f:d3:56:df:06:53:32:0c:
16:38:33:84:d8:f9:52:e2:d5:3d:f7:34:33:7b:c0:
18:01:94:66:64:49:b9:91:01:d0:0a:4e:f1:7d:09:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:73:4E:2D:31:67:EE:84:53:B1:C2:30:D4:07:DA:B1:51:0D:8C
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:44:75:17:b8:d4:1b:24:f8:b3:b6:f4:1c:5e:1b:bf:6d:
d4:53:6b:31:89:16:54:35:ba:94:3a:59:f1:89:70:c4:df:5b:
aa:96:45:98:0f:54:b8:93:55:5b:b0:52:9e:e1:87:4e:28:1c:
2a:14:90:4d:b0:93:20:89:15:80:ea:fb:9e:95:f0:18:ca:3b:
74:78:1b:2f:1e:b5:62:71:7f:25:d5:ba:d8:3f:64:25:bf:f8:
f0:9b:2b:85:c6:2d:ab:08:6b:1d:fd:21:11:ca:fb:b8:c5:3e:
34:bc:8e:31:7b:36:f9:8b:27:cd:c8:73:58:69:3c:8b:98:00:
62:26:38:14:75:10:8d:f7:38:b2:81:fe:08:b9:06:c7:b3:67:
c5:0e:cf:cc:62:84:07:0b:86:24:8e:10:7b:e8:0b:91:3a:b6:
49:41:ae:23:d9:9e:34:cd:22:a1:fa:5f:ac:82:cd:82:24:2a:
18:62:f8:ea:f9:22:b9:76:0f:75:50:9c:0c:18:d7:1a:13:f8:
ef:3b:6b:73:87:b4:1c:de:5a:7c:21:62:16:d3:49:a4:e1:5a:
a9:e9:56:a7:70:c3:f9:6e:ec:f1:7a:f1:e1:3d:35:57:7f:e6:
90:43:c8:13:6f:59:e4:a7:05:b7:88:6a:3d:b6:84:01:1e:82:
09:44:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:49 2025 by rpki-client