Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: lTYhZ+fVJGpXqN4adn6WjpHVvF4kTJquvmndtzrTf8o=
Subject key identifier: ED:3D:93:EF:45:CC:91:F3:CF:21:15:77:6D:FD:7A:1B:B2:51:BB:0F
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019849D3B65BC5A6CB221E4A360EA766EF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:01:08 +0000
Manifest this update: Sun 27 Jul 2025 03:01:08 +0000
Manifest next update: Mon 28 Jul 2025 03:01:08 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: DA3KM5ULAG/LNyOyWvnXn42Evqm6qeAkof5dkSt6Uqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b6:5b:c5:a6:cb:22:1e:4a:36:0e:a7:66:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Jul 27 03:01:08 2025 GMT
Not After : Jul 28 03:01:08 2025 GMT
Subject: CN=ed3d93ef45cc91f3cf2115776dfd7a1bb251bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:d0:99:e8:dd:05:3c:84:6f:10:a8:52:af:
8c:fe:79:b9:e4:39:ed:2c:56:b7:1e:6b:6d:36:72:
58:82:f1:58:28:54:06:7d:69:5a:1a:e9:53:90:b7:
b5:bb:3a:93:ca:a1:36:9d:9b:de:02:69:a8:6d:57:
4c:1c:0d:f0:0f:8b:04:b0:a7:66:a5:e7:c4:27:9b:
87:cf:95:a2:68:e0:da:b0:64:1a:90:34:bf:8a:3a:
b5:f3:97:93:f4:88:3b:c7:cd:fb:cc:80:ad:e9:ea:
60:1e:80:af:13:11:63:36:c7:36:50:1e:64:a2:ec:
c7:60:82:66:18:59:85:3e:40:ca:4d:7b:fa:49:bf:
78:2a:36:c2:5c:99:1e:1d:85:74:e2:07:9c:0a:a7:
c5:f1:6d:3f:ef:d1:de:f3:c8:7c:da:a7:3c:61:3f:
c1:9c:f3:e3:08:82:d4:79:0a:c1:28:c9:e6:98:6e:
5c:6b:de:fe:cf:da:f3:4b:e3:63:bc:62:24:d1:eb:
6b:2f:a4:c3:22:f4:f4:44:c2:dd:f8:b9:90:06:b3:
6d:7d:87:d3:35:c7:71:dc:27:90:4e:e8:b9:32:68:
67:5b:40:c9:9e:d7:6f:ad:c0:5b:6d:43:b5:ed:26:
ae:88:a1:f2:40:a4:50:a7:cc:3d:b2:12:33:9b:0a:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:93:EF:45:CC:91:F3:CF:21:15:77:6D:FD:7A:1B:B2:51:BB:0F
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:91:2e:eb:17:5d:bb:fd:44:73:00:d9:1e:f6:a3:b1:85:
c0:34:92:2c:53:b9:e5:ee:04:a6:32:b3:e7:62:0b:25:bd:d6:
9b:04:eb:48:8f:94:d8:c3:db:23:8b:90:4a:1a:5a:ed:b7:29:
8a:fb:db:94:72:00:be:69:92:62:6d:a7:19:49:0a:44:69:d8:
ee:81:0f:32:57:fd:30:ae:b2:4d:9a:58:18:a1:da:5d:5c:e4:
52:32:e0:0a:14:e1:c8:62:af:a1:9f:94:7b:39:60:28:2e:34:
f0:74:38:dd:53:60:40:ac:b8:e6:5d:80:8d:c4:71:d4:cc:38:
d3:f9:45:72:5e:93:89:5b:7e:ab:7a:5f:01:f8:44:81:5b:cc:
03:55:32:9c:7a:36:79:71:b2:1f:a2:b0:55:6e:d4:d3:a9:e6:
f3:6c:89:b1:44:a8:56:0a:32:bb:81:65:c4:29:df:e9:08:47:
70:6c:25:0d:0c:d4:59:39:e1:89:eb:c0:e8:71:58:a6:8f:f0:
cb:39:63:5e:0d:1a:8f:80:2e:a1:ed:e3:2d:c9:c5:f4:2d:64:
28:3d:79:89:31:fb:14:f7:95:6c:65:50:5b:af:3b:c4:dd:ee:
f6:3f:12:99:71:56:67:7f:d3:11:89:cc:66:84:a4:52:5f:f1:
8d:68:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:11:19 2025 by rpki-client