Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: a3LOPpTZSVG/tSd5jWPAFX6JRKoV/P9XJ00OtSkkGyw=
Subject key identifier: 8F:41:85:38:9C:30:E8:70:02:2D:5E:0D:1F:B2:1A:F3:04:7D:29:58
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01961056E0E7CFCA5F9A834C26DE528A4ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 02C6
Signing time: Mon 07 Apr 2025 13:00:51 +0000
Manifest this update: Mon 07 Apr 2025 13:00:51 +0000
Manifest next update: Tue 08 Apr 2025 13:00:51 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: jyxWHOavtvW7PBd+gKZvVcX4k0w+T8jMD/BJeqKG0sM=)
2: UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa (hash: 2A2ajEPDxijC/XTi8wtmJY4/n4ZoZiwiXE/zRByiGqY=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:56:e0:e7:cf:ca:5f:9a:83:4c:26:de:52:8a:4a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Apr 7 13:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=8f4185389c30e870022d5e0d1fb21af3047d2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:80:58:c9:62:a5:6d:f0:6b:b4:1f:a8:f9:
40:45:81:17:bd:2c:3d:8e:ca:1a:eb:68:23:4f:9b:
e2:f1:8c:4b:7b:e5:63:7d:97:2a:93:b0:d6:85:7a:
e9:ba:8d:61:6d:41:40:17:a8:17:08:b1:55:bb:98:
0c:68:a4:b5:e2:d7:f6:2c:dd:0a:8d:3a:74:67:07:
6c:54:d9:1e:51:de:b8:90:5c:98:af:d1:1e:1f:9a:
f9:f2:40:15:2e:60:15:61:50:af:c2:95:7e:c4:20:
a8:8d:e4:71:c4:cb:8d:d5:85:0d:c3:1f:0a:6d:74:
a8:d7:d7:d3:d8:ef:dd:f5:00:b3:5d:fe:6a:45:1d:
59:4e:fb:d3:7c:11:73:7c:86:af:6c:95:eb:ee:09:
dc:e8:5e:ca:5d:4a:d2:8f:1b:00:d0:ad:2c:5b:7d:
ca:36:61:b4:e3:cf:b5:75:06:a0:bb:52:87:42:73:
89:a0:22:eb:16:3f:0d:09:2a:6b:80:d8:ab:51:ff:
e9:69:82:d9:79:b7:45:73:0e:1a:6d:0d:f1:af:0c:
36:ac:ac:29:37:b8:db:76:e9:e8:8b:0e:d7:5b:d2:
90:b7:04:37:8f:de:90:72:b6:4d:72:e0:42:86:c6:
3a:d0:e5:10:67:0e:db:31:6a:35:df:f1:8a:8a:d6:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:85:38:9C:30:E8:70:02:2D:5E:0D:1F:B2:1A:F3:04:7D:29:58
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4b:6b:e6:5f:f8:b4:a3:d4:0e:77:35:da:2a:8d:38:9a:71:
3e:1a:66:08:9a:eb:5d:ec:18:ca:67:19:34:07:ff:35:af:4c:
5c:ce:74:cb:21:6d:15:74:af:9a:f4:dc:b5:87:e6:da:9f:b9:
4a:0c:94:54:61:7f:10:ad:9e:90:1f:47:98:8c:24:44:3b:fc:
47:c0:bb:51:9d:bd:69:a0:d9:a6:3d:91:5c:8a:48:0e:f5:48:
04:66:0e:db:fe:f1:42:d1:08:78:3a:70:ec:dd:09:fa:94:ea:
38:b6:30:c4:f4:89:21:59:bc:7b:50:ee:58:1e:5b:14:fb:08:
17:0a:85:c4:f2:b6:4c:f4:72:8e:c0:1d:db:42:b5:4d:70:86:
9f:6a:b7:c7:92:82:79:bb:5e:69:81:e6:c2:43:42:d6:77:8f:
86:81:30:cb:35:22:87:a3:bf:11:4b:14:30:74:8b:45:a1:0e:
23:23:91:6d:a0:6c:17:80:90:37:21:0b:03:d4:2b:d4:db:a4:
86:d5:de:35:e7:bc:1a:68:c6:8b:fa:41:4c:3c:4c:79:c5:0b:
2c:3a:c3:60:3c:c4:83:fb:4a:f7:03:82:06:51:be:40:c9:08:
2d:92:0b:ad:e5:a8:eb:36:84:1e:1e:d2:64:0e:ea:4d:51:26:
38:21:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:10 2025 by rpki-client