Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: lQCUlKHq8Lblw2tnZRry9ZNu4pUMxstkePa0k5S9qGI=
Subject key identifier: E3:59:F3:18:CC:7B:B4:DE:3C:79:0C:29:0F:67:D0:92:7A:C5:C4:3C
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0199FC21B1CACC2DEA70EA4FBB603F5936C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 04D0
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: 1kfqC2N79t/113RvsZRR7717CczS5aO6aJsT2A56zaE=)
2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
3: dX64oYdO84sYoaZssnfnNSnjjZ8.roa (hash: gsXE0J7PM3QNxgRheiXzLzqDJ2lY8wkV0/36i7HSBdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b1:ca:cc:2d:ea:70:ea:4f:bb:60:3f:59:36:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=e359f318cc7bb4de3c790c290f67d0927ac5c43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:4f:f4:2d:1d:de:ec:ca:4c:8f:e5:21:a2:
c8:90:7e:d3:f0:c1:44:24:c7:53:f1:3c:98:16:54:
a9:a8:14:20:fd:62:66:72:c4:33:c1:f5:27:0a:d6:
03:85:56:e6:8a:f0:c6:42:7a:eb:01:49:27:a7:d5:
56:77:c1:70:b4:02:76:aa:a9:7d:c3:e8:9c:76:2a:
c6:ec:1d:f0:5d:d1:16:5f:5c:d2:f8:89:b3:0c:9c:
03:91:b2:78:d9:62:cc:47:17:71:91:75:a8:73:db:
e2:73:45:34:eb:d9:45:8a:b7:bc:1c:7e:ea:0d:de:
e2:ab:1e:86:7c:9b:81:ae:68:cc:a9:44:7f:07:f7:
89:79:31:80:54:93:96:4a:24:52:2c:1b:81:8e:93:
11:74:4a:11:fd:b9:16:42:3f:c1:d3:29:38:b6:45:
84:de:44:e2:ec:87:00:ed:74:72:25:49:58:f2:e9:
67:53:f3:4a:76:27:08:cb:31:ae:96:c2:21:ac:f0:
d5:9a:ef:9f:03:72:90:02:fc:aa:92:49:fb:31:c1:
6d:76:83:b2:84:5c:1a:19:4a:21:a9:d4:1a:13:9b:
25:56:57:84:ea:fc:0d:df:60:bd:c1:05:9c:01:63:
21:9c:65:30:eb:0f:50:07:12:9e:fd:59:ec:18:f3:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:F3:18:CC:7B:B4:DE:3C:79:0C:29:0F:67:D0:92:7A:C5:C4:3C
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:4b:e9:58:06:85:71:68:af:ee:e7:48:c0:d7:64:26:00:
c9:ea:fa:31:68:fb:c0:82:d1:a8:13:55:97:64:ad:f0:2a:e3:
d5:0e:33:cf:52:c1:c6:a8:9e:da:28:2b:13:50:33:01:84:29:
73:d7:01:06:cc:ef:e5:9f:59:bd:a0:55:5f:31:cc:6b:be:f6:
0a:f2:ea:82:47:22:cc:91:2d:ea:2b:92:62:0d:d9:b6:e2:06:
94:44:d1:df:73:d8:40:df:94:dc:d1:f3:09:e0:d0:e2:42:14:
26:7c:5c:74:f8:86:4d:b0:ba:ed:c2:9f:78:0b:47:95:61:87:
fc:93:d1:76:15:10:7f:a7:aa:eb:39:fe:b7:58:e0:b0:d8:6a:
5b:a2:84:86:97:98:c2:8b:73:2d:31:c5:d0:89:cf:34:3b:75:
f7:fa:0a:a8:5b:cf:9b:dc:f6:91:90:3d:93:fe:78:ee:4b:e6:
de:79:9d:84:f8:4a:a9:0f:f4:74:ec:83:2c:bc:f5:16:4a:10:
b9:95:45:d7:04:7f:b5:ab:56:31:ec:89:4f:fa:39:83:d0:10:
1f:2f:14:02:c1:7d:87:4f:02:38:36:cb:7f:14:11:7c:4e:42:
4f:25:01:0b:30:c2:86:f1:59:64:b4:b9:39:4d:d7:d2:db:56:
3c:d6:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:28 2025 by rpki-client