Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: +My8tuKIbl3BsqfCWlLmX3UKGdwwNNw21ZcD5EShuzE=
Subject key identifier: 1E:C6:A1:99:E5:30:9B:76:15:E9:64:0C:AA:8E:39:BD:78:E8:F2:44
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0197B77C900F52F88E2A1AB39D224AD7FDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 03A3
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: 0fTzrR0FgT99fPQppUr0MJauodA.roa (hash: vrJgtNANw3B/qMAsMw5g4uVNE+VfKXWhBzBneo91BaY=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: xy+ncNZAxkWUirLn1FFGW6WCe69Vg2ILSrl5PEWOokU=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:90:0f:52:f8:8e:2a:1a:b3:9d:22:4a:d7:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=1ec6a199e5309b7615e9640caa8e39bd78e8f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:c5:3e:67:b1:01:3f:46:8e:ee:8a:38:c8:
e0:13:ab:b8:23:45:6c:e6:68:da:4f:c2:f6:00:df:
ef:7b:f1:69:98:22:a5:d1:54:ff:41:2c:86:56:46:
11:04:e8:39:b1:be:18:c4:bc:03:97:23:06:c0:b7:
21:dd:45:7e:53:0e:4c:28:31:e2:bf:fa:8c:c3:f0:
08:d2:df:87:ab:44:6b:80:e0:91:1e:3b:8b:fd:98:
47:93:c9:be:0d:30:c5:d2:4a:29:43:fc:cc:01:7d:
91:94:4b:99:7c:fe:fe:1e:ea:d1:1a:c6:79:29:81:
52:35:40:fb:c8:ce:ec:bd:a7:20:4c:cd:29:84:c9:
ea:26:9f:e4:e4:a8:82:e1:3d:0a:de:7c:9d:df:8a:
73:70:3a:16:a8:e8:fd:ce:46:4f:00:75:0a:ab:6c:
cd:23:0e:6f:7b:de:36:a9:51:fc:99:11:d6:ce:83:
fe:67:3d:65:19:7a:83:b6:0e:f7:95:92:81:58:81:
be:f6:11:d2:26:7c:b0:7a:b7:cb:fd:2e:a3:28:d2:
e1:6c:cb:d2:8d:46:77:8a:fa:ee:35:63:d7:2d:d0:
8c:66:0e:d5:2c:44:1b:6d:77:bc:b2:04:b6:bb:37:
fc:7d:54:95:fe:79:24:18:0f:99:e3:32:4c:dc:a9:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:A1:99:E5:30:9B:76:15:E9:64:0C:AA:8E:39:BD:78:E8:F2:44
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e1:3d:eb:bc:e6:d9:6a:30:b2:5b:60:01:61:78:cb:27:8b:
2a:73:16:64:5d:00:54:5a:67:1e:e5:6f:c5:bd:92:6d:ba:78:
08:0e:37:7c:7c:e5:79:82:b5:67:95:97:9a:59:f7:70:4b:b7:
54:27:3b:57:be:be:6b:5c:56:03:77:28:27:27:50:ca:6f:03:
27:18:95:f6:37:3a:f0:14:cf:53:82:9f:38:0d:f9:36:d1:4b:
27:c3:76:c2:82:09:57:ca:93:34:1f:23:6a:76:64:73:29:5d:
d2:2d:90:58:10:24:b9:31:c3:e6:76:eb:12:98:b2:bf:02:32:
ad:3d:6c:4e:fc:00:ec:f8:c0:b7:9d:05:ab:f8:23:25:85:f2:
7e:81:d4:a5:a1:19:9e:a1:c2:51:21:f2:e4:ac:85:1e:e5:03:
51:7c:00:61:f4:3a:49:91:9e:13:f6:7b:a0:d7:da:f9:04:79:
8c:f6:66:54:0c:d5:f1:5f:6c:f1:cd:99:d5:94:8c:3b:b3:e8:
50:11:2b:34:b9:44:b7:ab:c5:92:bc:70:2f:57:f1:db:a1:fe:
6b:da:62:c7:52:66:94:09:9a:e7:33:7f:03:7c:fa:e6:6c:4c:
f1:20:39:15:18:e2:ad:87:73:1c:be:a1:f3:85:12:66:40:b4:
73:0b:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:54 2025 by rpki-client