Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: 0sR+VZ+ptcGafZdArIZky+1UXxdxtbV6P8z7yBfdALs=
Subject key identifier: 0B:01:0F:72:72:EE:4C:65:E2:CE:E1:37:24:2A:2B:49:68:ED:E2:5D
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019826A3D92E13B1E3229870FAF1EDF001DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 0FA2
Signing time: Sun 20 Jul 2025 07:02:08 +0000
Manifest this update: Sun 20 Jul 2025 07:02:08 +0000
Manifest next update: Mon 21 Jul 2025 07:02:08 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: hPv+jH6BhAi4YSZ9icfDeOfnJXxcQykxp19aC+Kc1UY=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:d9:2e:13:b1:e3:22:98:70:fa:f1:ed:f0:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jul 20 07:02:08 2025 GMT
Not After : Jul 21 07:02:08 2025 GMT
Subject: CN=0b010f7272ee4c65e2cee137242a2b4968ede25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:50:78:12:cf:5d:d7:ea:45:b4:2d:8e:91:
22:f4:4e:cd:07:e6:58:78:29:10:33:f4:de:00:58:
f5:1d:03:ae:37:97:d8:64:ed:19:77:c2:6b:17:d1:
94:e6:82:0d:3b:b1:94:48:2c:92:7e:5d:4b:3d:b2:
42:e5:da:ae:39:b7:ec:cf:08:e5:bd:0c:70:f1:3b:
47:94:c5:4f:64:28:d4:2d:16:dd:43:74:45:fa:d6:
6a:f1:e5:91:f5:e1:e1:7e:7f:c8:b1:6e:2b:fc:40:
02:dc:b7:b9:9c:6f:4d:96:06:82:42:02:1f:d4:53:
49:50:e9:ec:58:c0:d9:21:b0:d2:c0:cf:5d:1c:17:
23:90:82:0a:ec:09:14:03:b3:ca:f2:7a:6d:8f:72:
e7:bd:be:0f:7a:eb:02:2d:c8:78:f4:9d:76:47:40:
39:17:68:f8:e9:30:c0:28:bf:ad:95:a8:cc:e8:67:
53:8a:4f:22:62:6a:bd:ae:66:cf:ab:c6:5f:d1:db:
0b:14:cc:d1:18:07:2b:91:be:ae:10:06:1f:70:11:
e0:60:69:e0:e5:f7:36:13:3d:a0:80:e2:27:e3:32:
00:ef:af:f7:61:fb:3a:46:4a:68:ba:96:52:7f:e0:
37:8f:b1:71:32:47:5d:b8:d2:5a:9a:b6:01:e0:48:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:0F:72:72:EE:4C:65:E2:CE:E1:37:24:2A:2B:49:68:ED:E2:5D
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:2e:dd:c6:1e:bc:22:d0:e9:43:d1:47:39:cc:2c:b9:0b:
b6:66:e2:99:85:ff:f0:53:74:5a:8f:25:79:a1:a1:0d:e4:aa:
90:00:df:26:c3:bf:b8:bc:88:d3:53:ef:a6:1f:15:af:55:a6:
f6:f3:a2:1b:0d:a2:88:bc:53:26:93:bd:33:42:5c:74:a2:ac:
c0:05:63:d7:40:35:6a:00:e3:91:56:12:5a:50:89:d4:6d:0c:
1f:31:1b:5c:41:49:59:04:0b:8b:59:07:38:f6:58:04:d5:f4:
8a:e5:b8:03:28:6e:49:30:35:c0:d4:b4:8a:e4:e3:d6:f6:2d:
db:28:c1:ff:6c:47:bd:ca:10:4b:55:5b:be:2c:34:c3:ce:b0:
c7:c2:cf:c0:71:90:c2:e1:f6:4c:50:e1:45:1d:a5:28:18:20:
2e:3c:1f:5d:c8:ac:9c:da:99:ab:32:ce:1d:26:98:ca:28:82:
43:5f:a6:8e:bf:19:fd:2b:b5:ee:36:69:6f:77:8b:50:ed:ff:
7f:66:49:76:f7:26:09:11:c5:93:10:3a:00:83:dd:b6:e1:a9:
8a:86:6a:f4:b7:0c:11:6e:ed:0a:26:14:03:ad:be:94:4b:12:
77:26:3f:18:ed:67:8a:d3:5b:01:c3:34:30:ae:2c:41:ad:c1:
18:20:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:33 2025 by rpki-client