Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: XLX84lfoAPpqybUwdqClwEgHmUEn4kqkrcc68NCW4uU=
Subject key identifier: 8D:B3:39:D7:1D:32:1A:BE:97:B5:BD:DE:EC:3A:95:88:3C:66:89:76
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0197B8906CA1FAD868917A06803D513AC1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 124C
Signing time: Sat 28 Jun 2025 22:02:42 +0000
Manifest this update: Sat 28 Jun 2025 22:02:42 +0000
Manifest next update: Sun 29 Jun 2025 22:02:42 +0000
Files and hashes: 1: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
2: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: 8A+FJfeQMMmN8CFABS6T1HtdJMmH/DusUZjHeJXrGpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:6c:a1:fa:d8:68:91:7a:06:80:3d:51:3a:c1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jun 28 22:02:42 2025 GMT
Not After : Jun 29 22:02:42 2025 GMT
Subject: CN=8db339d71d321abe97b5bddeec3a95883c668976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:2c:dd:63:c4:da:24:1b:d3:a0:ef:b7:d2:
f8:df:3d:dc:b5:3c:48:b7:31:05:44:c1:cc:7b:e2:
c7:a1:a5:fe:32:c2:c2:06:e1:70:40:8d:ca:f2:1d:
66:7b:b7:f7:25:29:8b:b9:ee:42:27:a1:4c:4b:06:
01:37:1b:76:96:8c:dc:a2:70:49:d3:b2:28:06:c5:
b3:a7:9d:cc:76:93:21:0e:23:df:ff:69:d0:38:a1:
ad:ae:43:49:ff:30:47:3d:b3:c0:1f:65:1d:23:c7:
99:6f:12:0d:9f:4a:c2:22:78:1f:c6:8f:d2:a9:cc:
28:a6:02:81:d6:02:73:f8:30:0d:03:92:ea:d7:b7:
41:9f:91:68:ec:8e:cb:36:92:c4:f4:c5:3b:c8:5d:
d9:ca:91:fa:68:c9:94:2d:7f:95:86:c3:56:81:93:
ea:a5:23:dc:4c:34:0f:59:47:65:ae:9b:24:bc:7f:
4c:69:53:aa:34:d2:1b:ca:e1:32:d4:3b:ca:27:ec:
76:7e:54:52:9a:90:c6:9c:1a:0e:51:b2:c0:cb:ab:
b0:d0:25:4b:f6:35:30:f0:fe:f3:0c:0b:fd:19:fe:
87:9f:52:04:43:9f:fa:bd:09:66:35:3a:29:2a:e6:
6f:3a:f1:90:0e:2b:9d:05:ce:9b:83:9c:41:34:32:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:39:D7:1D:32:1A:BE:97:B5:BD:DE:EC:3A:95:88:3C:66:89:76
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:11:0c:50:0c:9c:9c:dd:ea:2a:22:89:23:0f:7b:d2:85:
31:02:86:12:64:f3:6e:37:53:3e:cc:d4:92:de:3c:b9:1b:83:
3a:4a:2b:11:6e:7d:c0:18:86:27:ea:e6:83:23:a8:ea:ef:a8:
fc:af:86:8a:43:6d:4d:be:b7:f5:7b:56:08:55:84:28:b4:3c:
90:a4:40:e1:0b:9b:00:09:0b:af:c7:bc:64:06:53:25:34:73:
7d:a7:05:79:4c:45:36:71:11:97:0e:1c:83:b2:dd:7e:66:d0:
60:f3:fe:aa:84:00:6a:a9:fe:6b:b2:6f:f4:8d:a8:87:58:a9:
1b:0e:ca:29:de:a1:dc:bd:8a:44:6b:80:23:dc:e3:65:25:36:
c5:de:d0:44:c6:5f:58:e9:b6:39:d0:b8:06:aa:be:0d:0d:92:
65:31:f0:8e:85:c6:5f:8c:c4:1c:5b:39:73:3c:a0:47:b8:7f:
27:5a:ac:e7:b7:d2:0b:6f:79:0b:b4:8a:3b:e4:d0:c0:96:23:
4f:f8:38:bb:46:e7:d7:a0:db:0a:42:a0:d5:5f:b2:86:d2:c5:
6e:21:c1:be:08:19:cb:53:61:52:fc:f4:7b:0c:d4:88:f2:3f:
07:a9:d2:a4:3c:88:2d:fc:77:76:e1:be:cf:9c:ac:73:d3:59:
ef:55:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:11 2025 by rpki-client