Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: vNpbl8D7zFERONdUOXGZ71ICIcnOpZgmYScVku7klFw=
Subject key identifier: 88:F1:2D:CD:9A:97:1C:B8:22:B5:F2:B6:11:DC:51:C4:CF:F7:0D:F1
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0196C8DFDC6F4420F5657CE3D153EA06999F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0327
Signing time: Tue 13 May 2025 09:00:36 +0000
Manifest this update: Tue 13 May 2025 09:00:36 +0000
Manifest next update: Wed 14 May 2025 09:00:36 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: W6uQ2jlb/YOPxTaBTrk3sgF853BZepsn/j8SZbaw/Y0=)
2: TVn-Y7E7IobUSc1lBZ87Jn2oZSg.roa (hash: Fgfl42WUlPTuS1ibiKRw2bENqH1KQguOsM9djfPJakE=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:dc:6f:44:20:f5:65:7c:e3:d1:53:ea:06:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: May 13 09:00:36 2025 GMT
Not After : May 14 09:00:36 2025 GMT
Subject: CN=88f12dcd9a971cb822b5f2b611dc51c4cff70df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:2a:be:6d:e7:be:55:1b:35:92:66:09:5d:
be:53:0a:01:01:cc:f5:1e:d5:2f:8b:ab:78:58:e7:
a4:e3:1e:bd:88:33:61:5f:b9:58:e5:6c:20:a1:fa:
e8:b0:30:49:3b:cd:0d:f1:c4:9a:23:d7:e8:84:fe:
0a:99:e9:cd:a3:f9:9c:c3:0f:0f:da:4b:e4:32:b1:
0f:b4:25:50:fc:6a:33:85:34:0a:53:43:f3:e3:3a:
f8:88:e3:29:bc:cf:cc:af:30:b6:45:71:00:eb:f8:
66:9d:df:1b:0a:29:6c:a2:c5:cf:a0:de:71:eb:54:
45:0e:b3:4a:7b:39:e9:2d:5a:36:b0:cd:5e:28:0e:
9c:ec:11:e1:b6:db:16:a1:e1:f3:ae:9d:52:f8:a5:
b4:92:88:1e:55:b4:e1:66:12:7d:5c:2a:c6:87:44:
0e:38:50:9e:82:04:ec:2c:fc:d5:d7:76:2f:f0:bc:
fa:88:0a:b1:7c:90:61:ad:60:65:2f:96:f8:0d:4c:
c1:fe:fd:44:3a:af:83:b2:fd:bc:23:cc:62:a0:f8:
ae:8b:fe:a6:66:b0:ac:d1:72:68:27:7f:b2:de:95:
35:cb:a5:60:8b:a6:b0:9a:a8:22:b1:3c:cf:ce:b8:
e1:f4:a8:46:fe:3a:1a:ea:84:44:79:8e:29:d2:25:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:2D:CD:9A:97:1C:B8:22:B5:F2:B6:11:DC:51:C4:CF:F7:0D:F1
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:32:06:91:ae:6b:ad:64:29:fe:c3:8a:02:43:e8:4e:1f:bc:
49:27:e5:06:0d:89:1a:12:73:57:4e:56:e2:7b:fb:ed:aa:5b:
a6:3a:9b:99:25:9d:f9:34:7e:0e:4a:20:eb:02:c6:87:5d:8c:
ba:21:05:bd:43:0f:55:0a:05:4d:12:ba:d5:80:3f:99:d4:15:
3c:1c:aa:da:78:e9:26:56:ac:2e:d3:fd:48:0a:01:85:12:6b:
7a:9e:89:c3:d4:a0:63:67:a1:7c:2f:25:39:f6:dd:6a:5b:6a:
55:84:42:4c:2b:97:65:d1:35:92:9f:35:9e:94:69:75:ee:a3:
c5:2f:2d:34:1d:8a:43:61:5d:be:17:5c:12:38:4b:c8:d4:5e:
5b:09:33:9e:55:12:9e:8f:96:f8:0b:c0:f8:76:1d:5e:ab:ef:
44:1f:ba:61:9f:c4:31:28:7d:ba:eb:f6:fd:f9:ef:3e:77:19:
8d:15:f0:35:63:95:02:17:ff:2c:4f:18:16:6a:bd:c7:ea:25:
86:ee:1c:92:9d:57:2a:82:da:f5:b4:3a:04:68:63:56:25:19:
66:7a:fc:13:f0:6f:3c:3b:ed:22:1a:60:ce:7e:da:e7:3b:90:
20:fd:0c:77:75:c5:7b:57:56:da:c5:c7:c0:53:33:4f:37:5f:
3a:44:00:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI39xvRCD1ZXzj0VPqBpmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjUwNTEzMDkwMDM2WhcNMjUwNTE0MDkwMDM2WjAzMTEwLwYDVQQD
Eyg4OGYxMmRjZDlhOTcxY2I4MjJiNWYyYjYxMWRjNTFjNGNmZjcwZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DMqvm3nvlUbNZJmCV2+UwoBAcz1
HtUvi6t4WOek4x69iDNhX7lY5WwgofrosDBJO80N8cSaI9fohP4KmenNo/mcww8P
2kvkMrEPtCVQ/GozhTQKU0Pz4zr4iOMpvM/MrzC2RXEA6/hmnd8bCilsosXPoN5x
61RFDrNKeznpLVo2sM1eKA6c7BHhttsWoeHzrp1S+KW0kogeVbThZhJ9XCrGh0QO
OFCeggTsLPzV13Yv8Lz6iAqxfJBhrWBlL5b4DUzB/v1EOq+Dsv28I8xioPiui/6m
ZrCs0XJoJ3+y3pU1y6Vgi6awmqgisTzPzrjh9KhG/joa6oREeY4p0iU8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjxLc2alxy4IrXythHcUcTP9w3xMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyzIGka5r
rWQp/sOKAkPoTh+8SSflBg2JGhJzV05W4nv77apbpjqbmSWd+TR+Dkog6wLGh12M
uiEFvUMPVQoFTRK61YA/mdQVPByq2njpJlasLtP9SAoBhRJrep6Jw9SgY2ehfC8l
OfbdaltqVYRCTCuXZdE1kp81npRpde6jxS8tNB2KQ2FdvhdcEjhLyNReWwkznlUS
no+W+AvA+HYdXqvvRB+6YZ/EMSh9uuv2/fnvPncZjRXwNWOVAhf/LE8YFmq9x+ol
hu4ckp1XKoLa9bQ6BGhjViUZZnr8E/BvPDvtIhpgzn7a5zuQIP0Md3XFe1dW2sXH
wFMzTzdfOkQATw==
-----END CERTIFICATE-----
Generated at Tue May 13 18:37:20 2025 by rpki-client