Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: DAY9cXmle6+fmarr7RgSRr5GJYCPZqdCdL3oH8ln+M8=
Subject key identifier: AD:DF:80:37:47:F0:60:F9:95:B3:59:05:66:6D:68:F9:78:CB:01:3E
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 0197B8904B42D105CC38321F6496111669AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 12C2
Signing time: Sat 28 Jun 2025 22:02:33 +0000
Manifest this update: Sat 28 Jun 2025 22:02:33 +0000
Manifest next update: Sun 29 Jun 2025 22:02:33 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: iyRLgHwSmqwVebtivR4+Dar/yHDfZGdG6uOHotnS88o=)
2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:4b:42:d1:05:cc:38:32:1f:64:96:11:16:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Jun 28 22:02:33 2025 GMT
Not After : Jun 29 22:02:33 2025 GMT
Subject: CN=addf803747f060f995b35905666d68f978cb013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:51:92:80:d3:8e:c8:1d:0a:4e:7d:17:01:
ef:94:b0:94:48:37:07:95:ba:9b:78:e3:2b:04:4f:
aa:27:ea:3a:c1:65:e4:de:99:fd:d6:90:50:11:b7:
3b:d1:35:f5:f5:72:e0:cd:3f:f2:18:cd:dd:27:92:
f1:73:af:f5:ad:d6:73:5d:6e:95:2f:bb:ec:67:c7:
8a:ae:64:30:00:18:ab:fa:09:3c:2f:f9:df:1c:ba:
e7:aa:f8:3a:ff:c1:56:57:e4:f2:58:f8:ce:8b:56:
b1:29:06:d5:0c:9d:18:72:35:5f:31:fd:65:4c:21:
0e:c9:f8:58:3c:8f:a4:8b:3e:b4:ad:f5:36:64:4a:
65:77:6c:51:f5:a6:83:52:64:f3:f4:59:2c:be:22:
1a:c7:71:81:98:01:45:f1:83:6b:7e:30:bd:d3:39:
38:ee:fe:c0:b1:9a:19:33:ea:6d:3e:40:cf:c2:2f:
78:8a:34:06:db:d0:ea:c9:7a:d2:90:8d:a5:3a:8d:
fb:02:1b:58:db:98:0b:98:30:fe:36:61:d4:10:76:
4c:de:66:1d:ae:be:ce:75:15:1d:cf:ac:7e:a1:d6:
cc:58:9f:7a:c8:53:b3:5e:e9:b8:c8:89:8c:5e:66:
61:e3:1d:08:cf:f5:e8:81:25:c4:20:46:9b:cc:b8:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:80:37:47:F0:60:F9:95:B3:59:05:66:6D:68:F9:78:CB:01:3E
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:24:b8:33:54:49:c6:bd:90:93:45:5b:4d:fc:19:5a:6f:85:
31:b8:82:65:71:37:55:5b:85:43:e8:8f:61:ed:21:71:ab:1a:
1b:96:55:1c:3a:2e:35:a1:3d:b0:40:d1:c2:9e:07:b9:4b:4f:
50:13:77:f0:1d:e0:e9:16:ec:6a:e3:51:f2:20:e8:0f:ff:9d:
00:bc:30:02:a0:1c:01:41:7a:29:a2:d3:27:e3:52:05:43:e1:
93:44:1d:c7:fe:92:74:4e:18:c1:09:65:78:c6:c4:7e:3c:04:
89:ad:4d:eb:af:db:3d:eb:26:6d:a8:4a:4d:09:a8:7b:84:f6:
a9:21:3c:2d:fb:cb:c6:a3:c4:95:29:c7:d7:45:58:3c:b0:bd:
94:33:18:3b:cc:09:e3:5b:8d:c1:62:58:5b:8e:1e:b7:d5:87:
9c:13:5a:d8:37:6e:93:10:01:cd:b7:26:da:23:8c:11:13:fd:
91:a1:51:01:16:47:53:90:4e:7b:a1:8e:93:5d:b4:86:43:45:
25:be:ab:20:10:57:e5:68:6c:8a:6a:b8:a5:65:9a:36:74:a1:
69:ad:b6:e7:d3:70:43:00:22:9c:bb:20:f7:4c:1a:6e:24:90:
5c:0b:53:87:a2:e1:2b:92:e1:13:bf:1d:43:fc:5e:74:7d:2f:
dd:b4:9b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kEtC0QXMODIfZJYRFmmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi
Mzc3MGYwHhcNMjUwNjI4MjIwMjMzWhcNMjUwNjI5MjIwMjMzWjAzMTEwLwYDVQQD
EyhhZGRmODAzNzQ3ZjA2MGY5OTViMzU5MDU2NjZkNjhmOTc4Y2IwMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsNRkoDTjsgdCk59FwHvlLCUSDcH
lbqbeOMrBE+qJ+o6wWXk3pn91pBQEbc70TX19XLgzT/yGM3dJ5Lxc6/1rdZzXW6V
L7vsZ8eKrmQwABir+gk8L/nfHLrnqvg6/8FWV+TyWPjOi1axKQbVDJ0YcjVfMf1l
TCEOyfhYPI+kiz60rfU2ZEpld2xR9aaDUmTz9FksviIax3GBmAFF8YNrfjC90zk4
7v7AsZoZM+ptPkDPwi94ijQG29DqyXrSkI2lOo37AhtY25gLmDD+NmHUEHZM3mYd
rr7OdRUdz6x+odbMWJ96yFOzXum4yImMXmZh4x0Iz/XogSXEIEabzLi3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3fgDdH8GD5lbNZBWZtaPl4ywE+MB8GA1UdIwQY
MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct
N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm
LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyS4M1RJ
xr2Qk0VbTfwZWm+FMbiCZXE3VVuFQ+iPYe0hcasaG5ZVHDouNaE9sEDRwp4HuUtP
UBN38B3g6RbsauNR8iDoD/+dALwwAqAcAUF6KaLTJ+NSBUPhk0Qdx/6SdE4YwQll
eMbEfjwEia1N66/bPesmbahKTQmoe4T2qSE8LfvLxqPElSnH10VYPLC9lDMYO8wJ
41uNwWJYW44et9WHnBNa2DdukxABzbcm2iOMERP9kaFRARZHU5BOe6GOk120hkNF
Jb6rIBBX5Whsimq4pWWaNnShaa2259NwQwAinLsg90wabiSQXAtTh6LhK5LhE78d
Q/xedH0v3bSb7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:03 2025 by rpki-client