Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: vwA58ZkAZJIKXg+4uWcgBebQzEI35teFGT20MNZjjkA=
Subject key identifier: 8F:4F:F4:02:B1:73:08:E5:65:71:97:80:14:BE:C0:2C:BF:F2:D4:8B
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 0196BA11D18E87ECC93E00ED391064D6D284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 12:00:51 +0000
Manifest this update: Sat 10 May 2025 12:00:51 +0000
Manifest next update: Sun 11 May 2025 12:00:51 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: RsCdsrKw+kggoF/LlR2aBYgBzhSsdR4SfyGm+liTXsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:d1:8e:87:ec:c9:3e:00:ed:39:10:64:d6:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: May 10 12:00:51 2025 GMT
Not After : May 11 12:00:51 2025 GMT
Subject: CN=8f4ff402b17308e56571978014bec02cbff2d48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:b7:eb:b5:f5:e5:f6:18:52:c9:ad:01:ad:
f7:56:5d:df:60:de:df:da:be:aa:b4:a6:10:79:53:
c0:9f:ab:fa:2b:f4:42:5b:34:cb:c6:03:39:22:a9:
df:76:53:c0:bd:e1:57:2e:d2:25:84:21:0e:bc:96:
f5:eb:33:ff:34:2b:ed:d3:c5:04:c6:57:9a:f2:f3:
fa:47:59:28:77:ec:78:2f:f9:5d:68:af:71:5d:b6:
80:e8:a0:dc:f3:f3:a0:f4:ae:1f:15:50:e2:17:86:
5a:82:85:75:bb:68:ea:f4:ef:99:d3:fc:f8:6e:fc:
4f:b8:e8:75:b9:18:f5:fe:84:69:98:aa:63:d2:8a:
60:c6:19:e4:78:1d:c8:f6:6d:e2:1c:b1:39:2f:d5:
d6:26:a3:09:10:26:95:82:37:88:d4:3e:a1:b7:3a:
1d:18:72:b3:ca:5e:95:b0:93:5b:20:8f:99:07:03:
0a:b5:90:b6:00:66:a3:40:c7:f3:40:2c:1c:bf:9f:
83:bd:d3:8b:4f:86:b2:cb:39:78:dc:ee:ee:54:d9:
7f:9d:07:44:a5:bf:12:d0:5b:97:8c:1e:95:cc:41:
a9:6a:54:37:80:95:c2:96:55:d7:6a:64:00:2d:1a:
6d:e8:a6:d4:62:a1:11:04:df:46:62:22:cb:4c:75:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:F4:02:B1:73:08:E5:65:71:97:80:14:BE:C0:2C:BF:F2:D4:8B
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:e6:95:ab:28:4d:50:af:18:c1:fe:d0:f3:1e:f8:3b:c5:
36:40:be:e9:47:2e:6e:a2:0b:41:46:86:4e:49:db:24:62:bb:
59:a9:cc:5b:6f:17:f6:01:0f:ea:1f:2d:bb:87:79:b1:f9:52:
e9:9f:e9:f7:fc:76:43:68:38:cc:14:e1:f5:2c:f4:4e:fb:c0:
58:7d:12:13:82:ee:05:be:86:4a:69:80:3a:a7:27:fc:55:e3:
07:67:40:5f:ea:f5:84:77:5b:2c:67:d5:91:de:70:3e:35:5f:
0d:c2:76:08:4a:cc:31:a1:2f:3b:10:09:f9:49:08:ca:91:d5:
2b:58:3f:dd:1b:7a:5f:ee:ab:ac:c4:a9:82:e6:21:83:54:f3:
f0:d4:fe:91:af:e2:d1:ee:a5:3c:83:9e:61:82:af:f6:4e:48:
40:da:76:37:57:0f:03:dc:71:97:87:0a:e9:d4:7c:9a:d5:4f:
3a:54:03:4f:d3:97:35:38:44:24:5d:12:63:d6:3a:04:14:5d:
9d:48:a2:12:83:31:2b:9e:77:8b:21:cb:0f:93:60:02:c4:9e:
b9:d9:0e:4f:ad:28:e6:75:86:35:bc:19:eb:43:9a:c4:1b:5a:
82:dc:dd:03:59:f7:fd:26:92:84:43:27:dd:3b:b4:ec:4c:dc:
eb:72:f8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EdGOh+zJPgDtORBk1tKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz
NWFkZTUwHhcNMjUwNTEwMTIwMDUxWhcNMjUwNTExMTIwMDUxWjAzMTEwLwYDVQQD
Eyg4ZjRmZjQwMmIxNzMwOGU1NjU3MTk3ODAxNGJlYzAyY2JmZjJkNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGa367X15fYYUsmtAa33Vl3fYN7f
2r6qtKYQeVPAn6v6K/RCWzTLxgM5IqnfdlPAveFXLtIlhCEOvJb16zP/NCvt08UE
xlea8vP6R1kod+x4L/ldaK9xXbaA6KDc8/Og9K4fFVDiF4ZagoV1u2jq9O+Z0/z4
bvxPuOh1uRj1/oRpmKpj0opgxhnkeB3I9m3iHLE5L9XWJqMJECaVgjeI1D6htzod
GHKzyl6VsJNbII+ZBwMKtZC2AGajQMfzQCwcv5+DvdOLT4ayyzl43O7uVNl/nQdE
pb8S0FuXjB6VzEGpalQ3gJXCllXXamQALRpt6KbUYqERBN9GYiLLTHVB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9P9AKxcwjlZXGXgBS+wCy/8tSLMB8GA1UdIwQY
MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt
YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm
LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjrmlaso
TVCvGMH+0PMe+DvFNkC+6UcubqILQUaGTknbJGK7WanMW28X9gEP6h8tu4d5sflS
6Z/p9/x2Q2g4zBTh9Sz0TvvAWH0SE4LuBb6GSmmAOqcn/FXjB2dAX+r1hHdbLGfV
kd5wPjVfDcJ2CErMMaEvOxAJ+UkIypHVK1g/3Rt6X+6rrMSpguYhg1Tz8NT+ka/i
0e6lPIOeYYKv9k5IQNp2N1cPA9xxl4cK6dR8mtVPOlQDT9OXNThEJF0SY9Y6BBRd
nUiiEoMxK553iyHLD5NgAsSeudkOT60o5nWGNbwZ60OaxBtagtzdA1n3/SaShEMn
3Tu07Ezc63L4YA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:24:40 2025 by rpki-client