Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: +7DTEUd29vUtyheCjFyyv0n49LLq6jJ0eM5eMLo3yCU=
Subject key identifier: 0D:85:09:DC:9A:16:22:84:4E:FA:BC:12:12:F4:33:5E:B4:35:32:1D
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 0197B70F22D89CBE8058418DA5274FE39B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: upkUbxZTN/8ZRHlGdrHahRGEfNaZTeUAEWBExo4mYPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:22:d8:9c:be:80:58:41:8d:a5:27:4f:e3:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=0d8509dc9a1622844efabc1212f4335eb435321d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:af:f9:58:5e:96:74:70:7b:cd:69:61:ac:
26:40:5b:7f:31:67:79:e8:d8:93:d4:94:0b:e8:69:
bc:2d:f2:ef:81:54:84:8c:1d:ce:54:b0:6b:43:72:
29:b1:07:bc:c7:cd:6a:41:7f:53:a7:f1:f7:b3:8a:
7b:6c:e0:89:ed:33:13:31:a3:34:72:5e:82:d9:2a:
ad:d0:14:fb:29:6a:3b:ee:f9:7e:d5:d2:2a:b6:7d:
e1:e9:ea:56:0c:df:23:06:7e:7a:13:f1:48:f1:d8:
ce:05:96:c0:bb:8e:68:a2:d3:af:f7:f3:1d:5b:f8:
02:c1:c3:c1:48:64:94:38:cf:cb:45:43:af:36:e4:
42:b5:69:a0:93:2d:b0:92:eb:79:25:f5:55:39:99:
ea:4c:3f:58:77:d8:22:2a:5a:e1:38:5b:e5:a4:d2:
41:c9:5a:00:b8:b2:6f:8c:01:27:e4:68:b2:7e:ad:
ef:9e:e8:d6:16:16:c6:3c:04:64:65:d7:30:a9:63:
88:04:b8:07:10:67:a7:87:9c:62:31:3a:3e:8b:a4:
45:3e:0a:57:e1:0b:2a:0f:1c:61:77:9e:13:2e:ec:
5d:29:7b:b5:e4:0c:ba:b7:a2:de:52:82:19:cf:dc:
7e:16:6d:6a:c7:6d:05:ca:5a:77:26:12:f5:4e:eb:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:09:DC:9A:16:22:84:4E:FA:BC:12:12:F4:33:5E:B4:35:32:1D
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6e:0b:cc:d8:fe:ac:53:ea:ab:97:f9:fb:5e:45:db:eb:61:
c8:bf:42:44:f3:f0:5b:be:58:40:88:58:66:95:6e:08:04:0e:
05:54:68:3a:64:c9:51:ff:8f:29:da:00:0b:e7:e3:3a:9c:75:
ae:71:72:86:12:f9:a2:80:77:6a:e6:67:c5:e8:a5:bb:d9:fc:
e9:f8:2e:2b:cc:1e:d9:3f:ff:4f:db:20:95:e4:be:1e:e5:7e:
30:d3:38:d9:87:f2:2f:e0:51:3f:1b:fd:bc:20:f8:b8:7d:b8:
0b:9f:61:93:6f:f8:2f:22:62:d4:b5:d9:91:74:f6:23:18:5a:
6e:ce:c4:eb:43:2c:34:a9:d6:a3:ed:94:db:9d:b1:7b:67:b4:
a8:4d:20:96:2a:9d:4c:49:32:43:0a:57:40:cd:4a:a2:d6:8d:
6b:19:14:06:af:54:6d:ee:55:06:db:5f:6c:22:9d:77:b9:41:
f4:31:51:ed:de:f8:4c:93:9c:68:0d:af:2a:75:29:51:c1:b9:
90:8b:4a:f7:49:8d:d9:7a:b6:d6:af:f1:d9:36:21:89:73:57:
51:52:e1:0c:3b:1c:65:43:ad:2c:c9:cf:39:bb:93:cb:d9:bf:
6b:f0:f8:46:e2:df:67:d9:d7:8e:c5:83:97:db:2e:45:cf:4b:
7b:5b:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:02 2025 by rpki-client