Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: vPNNraC0Bn9QjlF/Y6fKtNDmmPSfcufdmrqB6Xf/U6g=
Subject key identifier: D9:2F:56:1A:7C:19:72:53:1D:B3:32:A1:BF:28:0E:6E:7F:4B:22:50
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019848C041F0E0AF89D3040978C4F32CF23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0CDE
Signing time: Sat 26 Jul 2025 22:00:15 +0000
Manifest this update: Sat 26 Jul 2025 22:00:15 +0000
Manifest next update: Sun 27 Jul 2025 22:00:15 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: ABf4XrrdARDMIE0q/OmQjWi0/ICLkExTnj9ahumufmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:41:f0:e0:af:89:d3:04:09:78:c4:f3:2c:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Jul 26 22:00:15 2025 GMT
Not After : Jul 27 22:00:15 2025 GMT
Subject: CN=d92f561a7c1972531db332a1bf280e6e7f4b2250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b9:14:e1:da:57:dc:6d:6e:4c:50:7c:bd:
75:14:61:68:c8:e3:19:2f:cf:50:5f:41:11:ff:d2:
0e:ef:9a:3b:1a:38:53:92:57:72:0f:0c:f7:28:bf:
35:55:a2:fd:c6:3e:66:28:d4:d0:3a:d9:cc:63:fa:
63:14:9d:1a:16:6b:4c:72:b1:ac:b2:d5:dc:76:ec:
a8:59:b6:3b:28:66:bd:ea:96:57:5f:39:e4:fa:a0:
5c:e2:ef:26:20:aa:1b:80:6f:b6:ef:66:f5:48:34:
87:4e:49:dc:5f:ed:80:36:2d:c0:14:b1:70:32:78:
40:45:72:8a:ae:60:f8:4c:ab:ff:4f:85:67:e3:f1:
82:80:55:e0:8c:ce:e7:b0:3e:ba:17:43:84:98:c9:
f7:8f:f7:86:f3:59:a5:36:20:aa:e5:9e:4d:81:98:
11:72:e3:0a:77:fd:01:51:ca:63:01:6b:e8:a7:5d:
4a:e1:63:bb:bf:a8:e6:04:4e:d3:ac:a1:ec:cc:c2:
83:b7:41:eb:94:04:50:3e:b8:99:86:97:23:9c:f7:
50:84:e8:d7:e4:4c:13:de:7b:a2:a9:78:21:dd:68:
ee:cc:10:d6:02:45:78:e4:d7:6f:e1:9f:b2:49:a0:
ab:06:6c:d8:9b:e2:e0:c6:ae:c8:49:94:40:45:4c:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:56:1A:7C:19:72:53:1D:B3:32:A1:BF:28:0E:6E:7F:4B:22:50
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:63:62:c4:a4:61:ec:e4:2e:ad:32:03:59:c1:74:ca:7b:b4:
20:95:50:bb:e5:80:f3:25:eb:fe:93:86:a3:e1:f8:3f:28:c8:
6e:65:45:a2:e0:03:fe:f1:80:2d:7e:97:50:ec:c4:86:af:4c:
d8:fc:4a:48:eb:b4:2a:f2:c3:6b:72:8b:ca:03:49:27:52:f2:
69:65:31:f2:06:1b:63:fd:43:24:dc:53:39:59:59:d7:ad:8d:
7e:30:96:30:5b:36:d8:4c:5a:8a:22:14:eb:b3:65:b8:25:ec:
ca:bf:30:84:b2:c3:6c:ec:49:4f:e7:0f:e2:00:d4:53:ef:bf:
04:bf:04:e9:21:93:10:b5:45:de:43:f0:6e:d0:c9:5b:96:40:
1d:33:a6:7c:74:ce:4e:c5:c3:c9:b3:85:b8:9b:f6:d7:70:3d:
10:0d:d2:f0:2a:45:70:9e:bd:ab:41:c4:64:92:eb:9a:04:60:
5f:f3:f9:b6:8d:97:b0:99:d1:df:a9:d0:34:91:ee:14:10:5e:
29:bb:bc:7d:d5:30:a8:9b:67:7c:d9:4f:a5:2a:7b:2d:7b:3c:
22:ef:c6:99:50:47:74:65:05:29:e7:c6:f6:ea:22:9b:b3:21:
0c:c3:64:52:cc:47:bf:b0:47:36:5b:b7:25:ba:4b:37:73:7a:
5e:ad:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:45 2025 by rpki-client