Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: W+xXfEaOhxXBQVEqdPIVWaSqTIJcNU9JJONlaCbamII=
Subject key identifier: DE:08:70:66:4C:59:29:1E:68:94:2F:06:D4:9D:5A:6A:44:02:E8:26
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0198D472C553DA30F543DC41717A8F0E8AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 12DF
Signing time: Sat 23 Aug 2025 01:02:28 +0000
Manifest this update: Sat 23 Aug 2025 01:02:28 +0000
Manifest next update: Sun 24 Aug 2025 01:02:28 +0000
Files and hashes: 1: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
2: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: /GJKAINCqN1TGoKVtTuhHyH4rEEI2w2/S3Z+HzLgQ5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c5:53:da:30:f5:43:dc:41:71:7a:8f:0e:8a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Aug 23 01:02:28 2025 GMT
Not After : Aug 24 01:02:28 2025 GMT
Subject: CN=de0870664c59291e68942f06d49d5a6a4402e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:f8:09:f2:59:75:52:f1:ae:6a:4c:1d:ed:
db:e2:be:1d:5f:4f:6d:00:5e:ca:35:ee:6a:90:d7:
ad:99:94:a4:23:72:41:db:15:eb:41:03:d8:d9:db:
ae:8b:04:32:c7:98:39:43:d7:3a:ed:c6:ce:79:d9:
c3:8b:21:2e:7c:0d:e4:ef:1b:6c:83:5d:11:97:18:
22:ef:c6:17:82:e7:34:d4:c7:ba:8b:1c:d9:b7:a2:
ab:d3:3e:91:11:2d:53:b4:cd:70:b7:92:17:2e:df:
c9:70:c6:15:27:42:e8:4a:15:82:ce:0d:58:85:2a:
df:e3:29:2e:f0:59:8e:08:b0:8c:d9:2a:cd:1a:ef:
7e:ee:6c:e7:2f:eb:fb:1d:71:72:32:b5:2d:f8:f0:
38:c0:7f:70:37:c5:c2:2c:6b:8a:e0:7a:38:94:ba:
54:bf:ab:2a:4d:41:db:9f:a5:da:5c:80:32:f6:2b:
3e:9c:58:c2:ac:28:43:7d:c4:29:3a:69:c2:df:49:
aa:de:0c:49:f4:5a:8e:6f:ef:6f:96:4a:a9:a5:bc:
13:c7:59:cd:e0:14:94:08:ee:e2:e2:e0:c2:e0:28:
c4:87:af:63:5b:37:02:22:d0:8f:51:8c:5e:7a:1e:
10:03:39:2d:67:29:b9:73:14:c7:e7:2a:e4:ca:0e:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:70:66:4C:59:29:1E:68:94:2F:06:D4:9D:5A:6A:44:02:E8:26
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:16:35:d3:3e:72:45:08:c5:90:76:ca:fd:77:aa:85:fc:
48:f4:17:89:42:e5:a3:7b:db:d7:d1:01:48:13:f5:f2:c2:88:
9d:fd:fb:bd:44:f8:42:4d:09:25:4b:b2:46:82:b9:75:39:55:
2c:06:dd:fd:6c:85:ad:b3:21:aa:90:fc:3a:14:99:4d:21:31:
2b:6c:46:44:fc:9b:39:75:1e:bb:b8:7e:ab:9f:51:35:fe:c6:
33:79:d5:4c:6f:89:99:ce:8f:f6:b7:79:c1:cb:08:14:55:ec:
61:8f:01:09:96:65:79:e8:30:3d:f7:32:fb:ee:a7:22:31:cf:
b7:bc:72:02:b2:00:e3:9d:16:36:68:01:5a:47:53:cf:06:da:
f2:2d:3a:95:b4:8e:d2:72:e3:58:b5:c6:e2:33:17:06:cc:f4:
07:81:04:f5:03:a5:2b:bf:8b:c1:b1:54:7f:8a:32:d5:32:d2:
00:ed:7b:00:9b:1b:0e:43:2a:93:59:8f:cb:80:20:56:b1:c7:
99:8d:be:c2:28:bd:07:b7:2d:fc:88:5d:43:74:60:7c:d7:04:
cf:12:f9:0e:e0:3d:80:4b:ec:a8:2e:6f:26:e4:88:e3:35:a7:
ba:df:dc:d4:42:0e:e2:b1:b5:1a:0e:58:b4:5b:9c:b0:ef:85:
fa:9c:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:28 2025 by rpki-client