Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: wdgvS6fGIbZ0rdnSRNiIbORdRDN7qAIffCLrTDWE6LI=
Subject key identifier: 9F:59:ED:E4:79:48:AE:91:3A:53:06:C5:08:04:3D:04:2B:B9:18:70
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 019655A620A1480E8EEA3888FF7EB1B65298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 144E
Signing time: Mon 21 Apr 2025 00:01:12 +0000
Manifest this update: Mon 21 Apr 2025 00:01:12 +0000
Manifest next update: Tue 22 Apr 2025 00:01:12 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: rhhWja1xKajDjhAxenfvNPf7cXFmLvulgzbcw1u4FWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:20:a1:48:0e:8e:ea:38:88:ff:7e:b1:b6:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Apr 21 00:01:12 2025 GMT
Not After : Apr 22 00:01:12 2025 GMT
Subject: CN=9f59ede47948ae913a5306c508043d042bb91870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:8a:59:64:a0:75:a5:99:82:3e:34:75:c5:
3c:c7:20:c8:8e:15:b4:e2:bd:e9:3e:a9:c7:94:2d:
92:7b:9f:64:17:24:ab:79:b2:c4:4b:d8:c0:a8:34:
c1:3b:2a:c4:c7:5a:9e:77:34:10:ec:0e:e2:12:35:
54:5a:08:c6:e1:ea:17:2b:f3:67:a8:36:32:a3:8e:
e1:69:67:c3:3f:6b:70:54:cd:fe:5b:76:65:83:e1:
74:85:94:de:d1:fc:e9:0e:d0:e0:cc:59:c4:69:d2:
48:18:0e:09:8a:4a:3a:96:cb:9a:c3:d6:27:3f:d8:
50:73:b2:81:3a:66:a8:f3:3b:4d:6a:1e:4e:01:bf:
ff:e3:ee:27:cd:f0:23:f1:00:6e:9d:33:23:77:9b:
41:ec:16:7a:7e:44:41:05:69:26:23:fd:6a:a0:e0:
9b:f3:14:38:c5:8d:ab:1c:cb:0d:ed:c4:30:5f:da:
a3:7b:9c:f3:22:d9:b1:ba:10:6d:26:23:e2:ec:6b:
4d:dd:d5:45:b9:9b:8c:86:0c:55:d9:b5:1b:a2:f3:
a4:75:8d:c1:c2:7b:3a:5f:6b:52:68:af:d0:e0:2d:
37:50:85:94:1d:05:77:33:58:62:18:93:a1:e5:08:
b6:42:89:80:f0:8c:94:66:ea:d9:2f:1e:ce:80:51:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:ED:E4:79:48:AE:91:3A:53:06:C5:08:04:3D:04:2B:B9:18:70
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fd:07:94:6f:3f:bb:d5:74:e0:de:15:18:38:d9:01:ff:96:
b7:66:c7:10:7a:49:e5:9a:fe:af:8d:19:88:c9:9c:ab:c8:82:
2f:b2:f7:e2:79:e7:f8:e2:d1:94:e6:1f:65:9e:5f:37:de:94:
7c:aa:87:ba:3e:0c:ba:a3:c8:ff:81:0a:62:44:eb:1f:11:6e:
4a:c2:fd:63:b5:d8:0a:6b:3e:77:a9:b7:9a:5e:86:9c:f0:24:
30:f2:9f:95:6e:fe:1f:31:65:02:1b:7f:f9:d4:cf:22:8c:4c:
2c:62:e8:e8:55:86:fe:43:25:23:8d:af:dd:54:98:40:99:12:
a9:6a:d3:56:d0:4f:f1:cb:eb:73:8b:c8:c0:3c:06:cb:da:23:
cb:c4:b3:76:f6:9a:df:37:1c:6d:5e:df:d6:d8:83:b3:e8:ec:
ad:a8:a4:b3:83:bc:73:c4:f4:5b:a9:17:1c:8f:cf:ca:77:4a:
5e:c2:64:41:1c:fe:7c:26:d6:15:4a:8a:de:54:b3:8e:62:e8:
1b:22:74:b3:69:4c:3d:95:ef:44:1c:cd:4c:37:b9:bd:88:d0:
8f:f8:f1:c1:5d:e2:73:0e:5d:e0:d8:cb:d6:c3:c8:81:1c:d0:
44:94:d7:82:a3:4f:4d:e3:76:6f:5b:c1:82:98:9f:88:85:6a:
53:d2:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:45:52 2025 by rpki-client