Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: 3JHSn3+qyrsEEkPfcU6YnAajXKL9zN4BhAE0qmA05oA=
Subject key identifier: FB:E0:6E:C0:52:28:10:CB:1A:FF:30:1B:56:4C:C8:07:52:DB:06:0D
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 0198537B170B320BE2E40274B34DB62A6BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 1556
Signing time: Tue 29 Jul 2025 00:00:32 +0000
Manifest this update: Tue 29 Jul 2025 00:00:32 +0000
Manifest next update: Wed 30 Jul 2025 00:00:32 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: hpmDtMBdU70vhIU3lWkmM2nrlC9fY8bwUECgctl/jeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:17:0b:32:0b:e2:e4:02:74:b3:4d:b6:2a:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Jul 29 00:00:32 2025 GMT
Not After : Jul 30 00:00:32 2025 GMT
Subject: CN=fbe06ec0522810cb1aff301b564cc80752db060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:b6:f2:eb:c0:05:91:3f:ce:59:ec:0b:ab:
cc:55:c7:c9:10:74:f8:2e:bd:1c:6d:ef:88:d1:5b:
c5:29:7d:37:1e:03:f6:a1:d8:87:c3:73:6e:25:dc:
3f:d1:e3:7b:9b:4c:11:b7:6b:36:db:99:b4:77:92:
0e:40:92:3d:29:47:d0:11:b3:39:39:6b:88:d0:1e:
88:ff:a6:34:50:66:5a:38:90:32:15:52:b0:74:52:
e8:2a:32:04:a6:45:de:ac:3f:41:30:7d:55:76:3b:
66:5f:ac:75:50:e8:e1:1c:aa:a5:94:4c:ed:f5:7b:
a6:56:6f:fd:14:ce:2d:9b:7c:6a:c2:1d:89:30:91:
dc:1b:97:20:31:dd:4d:4b:ce:bc:a6:93:85:6e:f3:
bd:c0:28:cc:e2:bb:6c:41:8f:fc:39:76:33:c5:97:
a7:8c:4d:d4:c0:ba:d3:ad:40:6a:8e:11:22:b5:a7:
2b:e8:71:4a:7d:af:25:d7:80:3d:33:f9:98:e0:70:
11:3d:62:e3:a6:22:56:ec:53:f9:6c:31:1f:97:eb:
4c:ec:54:56:d8:e9:47:d2:d7:f5:57:68:6d:1d:a4:
0e:8b:48:ea:f7:54:84:c2:94:55:fd:f4:2f:96:fc:
59:05:09:c1:01:4c:07:e4:78:23:f4:3f:5d:b3:84:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:6E:C0:52:28:10:CB:1A:FF:30:1B:56:4C:C8:07:52:DB:06:0D
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:46:6a:d6:ff:7b:b7:3e:df:cf:29:44:2f:11:8f:4b:ae:e9:
69:72:32:88:50:7d:d5:17:d3:8f:c9:0a:e7:75:44:35:94:85:
45:28:e9:65:ae:46:8e:43:31:56:a1:89:60:fd:ad:53:a1:b1:
35:49:ba:a0:a3:0d:96:d0:13:f6:8e:a7:e7:e5:08:15:37:54:
56:8d:1c:d1:71:7b:d6:0e:36:ea:4c:16:71:e5:4d:d6:9b:8d:
d6:7a:1c:d8:e1:c3:ed:c4:b1:ee:5b:0d:dd:eb:19:82:52:c4:
55:4c:c4:5f:f7:23:6d:06:dd:7a:73:bf:2b:ed:55:ec:73:cb:
9d:d6:ce:37:5b:9f:19:8a:da:52:70:c1:df:05:24:00:d4:03:
94:72:3b:06:cf:b1:39:b7:3f:1e:64:cc:3a:98:b3:f4:19:50:
ec:db:ea:fa:b3:56:d9:8e:b5:39:cc:e7:87:cd:6c:40:17:05:
8f:af:96:44:98:76:15:5e:78:d3:18:72:1b:47:e0:4d:39:e3:
38:93:c0:a4:70:1a:94:7e:ae:4c:44:b0:bc:b2:0a:4a:f2:6d:
4c:66:b8:1c:97:ea:7a:8e:da:18:5e:cb:eb:fc:b3:f3:75:ab:
c8:39:c6:3a:1d:d5:89:27:8c:6b:47:03:a3:9e:c0:f8:41:b0:
ea:ee:45:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTexcLMgvi5AJ0s022Kmv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjUwNzI5MDAwMDMyWhcNMjUwNzMwMDAwMDMyWjAzMTEwLwYDVQQD
EyhmYmUwNmVjMDUyMjgxMGNiMWFmZjMwMWI1NjRjYzgwNzUyZGIwNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h628uvABZE/zlnsC6vMVcfJEHT4
Lr0cbe+I0VvFKX03HgP2odiHw3NuJdw/0eN7m0wRt2s225m0d5IOQJI9KUfQEbM5
OWuI0B6I/6Y0UGZaOJAyFVKwdFLoKjIEpkXerD9BMH1VdjtmX6x1UOjhHKqllEzt
9XumVm/9FM4tm3xqwh2JMJHcG5cgMd1NS868ppOFbvO9wCjM4rtsQY/8OXYzxZen
jE3UwLrTrUBqjhEitacr6HFKfa8l14A9M/mY4HARPWLjpiJW7FP5bDEfl+tM7FRW
2OlH0tf1V2htHaQOi0jq91SEwpRV/fQvlvxZBQnBAUwH5Hgj9D9ds4SdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvgbsBSKBDLGv8wG1ZMyAdS2wYNMB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkZq1v97
tz7fzylELxGPS67paXIyiFB91RfTj8kK53VENZSFRSjpZa5GjkMxVqGJYP2tU6Gx
NUm6oKMNltAT9o6n5+UIFTdUVo0c0XF71g426kwWceVN1puN1noc2OHD7cSx7lsN
3esZglLEVUzEX/cjbQbdenO/K+1V7HPLndbON1ufGYraUnDB3wUkANQDlHI7Bs+x
Obc/HmTMOpiz9BlQ7Nvq+rNW2Y61Ocznh81sQBcFj6+WRJh2FV540xhyG0fgTTnj
OJPApHAalH6uTESwvLIKSvJtTGa4HJfqeo7aGF7L6/yz83WryDnGOh3ViSeMa0cD
o57A+EGw6u5FEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:06 2025 by rpki-client