Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: ow0U8F73KK7m+JLyVtn5xFt3AA6u+daaJ8uOT5xVBjg=
Subject key identifier: 88:2E:90:36:0F:32:AD:F7:DF:BE:C2:60:B5:A2:87:AD:53:67:80:97
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0198D69845DBFF8D156380B31AEC66E9C94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0438
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: +V2VGGJBu/9X7agwJKHBsYkRATnWQ0l+kuaMPsIr+8o=)
2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
3: dX64oYdO84sYoaZssnfnNSnjjZ8.roa (hash: gsXE0J7PM3QNxgRheiXzLzqDJ2lY8wkV0/36i7HSBdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:45:db:ff:8d:15:63:80:b3:1a:ec:66:e9:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=882e90360f32adf7dfbec260b5a287ad53678097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:2a:9e:42:82:31:90:06:8b:23:a7:e0:9e:
fb:a3:e5:5c:cf:2c:da:2c:b5:35:95:38:0a:e4:d7:
0d:30:51:85:8e:1b:82:f6:50:d2:0f:60:b7:9e:21:
27:82:4c:1b:95:59:e0:17:33:ff:72:36:a6:0f:a7:
ff:ca:0e:bb:c1:d7:46:12:89:5f:f8:14:e8:59:23:
d6:5c:55:e7:4b:02:85:45:5b:06:a7:a4:9d:65:8d:
b8:df:11:0e:f7:2f:ca:6a:12:07:36:fb:7e:00:e4:
40:d4:94:36:c6:f9:1e:b7:ae:61:a7:54:58:d8:52:
a5:0b:6a:e8:72:41:76:e2:87:c7:a2:4d:f0:6e:d5:
48:88:ee:6a:36:e9:64:e0:f7:b6:fa:3b:a9:7a:95:
52:f3:46:03:34:18:d9:f8:32:e1:fe:cf:cb:a2:a5:
c4:4f:6a:13:dc:28:a5:4a:3f:a9:a8:80:e9:03:61:
02:61:66:40:a1:c7:34:5f:57:6d:a7:a8:ea:ce:be:
15:92:5c:6e:38:1c:27:fc:22:f5:2d:57:aa:82:01:
b5:df:d0:39:59:a5:dd:93:00:49:18:87:a4:dd:cf:
94:0a:8b:25:ac:b9:e8:84:b1:04:a3:0c:d2:74:17:
62:81:d2:8a:e2:89:69:ef:74:2a:c2:a8:53:88:59:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:90:36:0F:32:AD:F7:DF:BE:C2:60:B5:A2:87:AD:53:67:80:97
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:30:b5:43:5b:f5:51:42:20:74:58:b4:11:bb:82:60:4c:
45:66:59:8a:26:e4:28:34:1a:b7:b0:04:c7:5b:0d:bc:e6:94:
55:c1:d1:6d:ae:f9:00:9c:ce:72:05:58:b0:7d:00:ca:02:0b:
41:41:29:3c:60:00:a3:9d:f6:51:bd:73:e5:af:1d:d4:c6:59:
97:bd:3f:56:9a:c1:57:18:a2:cc:b1:27:3c:fb:f3:26:61:14:
ae:4a:58:45:47:a4:c3:46:e4:80:11:f2:2f:6d:1a:4b:b5:4a:
16:94:bf:bc:84:62:68:ee:4f:38:c2:fe:32:d3:5d:7b:51:c4:
0c:b7:46:cf:9f:92:f0:59:80:a5:4b:15:6a:c7:e6:66:ec:62:
8e:0b:1f:98:b1:20:06:79:f1:35:26:44:26:b9:20:43:68:cc:
1c:b4:e5:f4:34:5b:d1:6d:80:da:c2:40:4d:e4:d3:16:a4:28:
57:72:97:04:de:02:08:0f:ce:2b:6a:6e:12:92:8e:18:10:f8:
2f:58:f5:66:4c:d7:80:ff:45:cb:65:d5:89:45:9f:86:62:cd:
e9:1a:fc:4e:6b:34:8b:c9:9a:45:33:ae:a5:c7:fd:8d:ea:6b:
e6:be:7a:30:b4:8f:03:3f:55:70:af:b6:da:85:dc:2a:c3:62:
cf:6b:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:22 2025 by rpki-client