Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: pQjcqnkczIry3G89yioJsK9u3wwy/Xc718Ov1L2hKmQ=
Subject key identifier: 73:46:41:30:D5:EE:3C:BC:9A:7B:51:D4:13:B1:36:81:D5:CF:51:6B
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0199C4FC049762E0AB639423295C8D3FE6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 135C
Signing time: Wed 08 Oct 2025 18:01:14 +0000
Manifest this update: Wed 08 Oct 2025 18:01:14 +0000
Manifest next update: Thu 09 Oct 2025 18:01:14 +0000
Files and hashes: 1: 35i0W-439ceXCAfaqLUm_3h3G24.roa (hash: xuOhVj3IlTLiG4QrKiExJxP+JLiXYysTKsGNlxVTku4=)
2: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
3: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: gCIBnvO/7Tu0i2jeVttA0kqH8JRmwfRVAb31vGtBZ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:04:97:62:e0:ab:63:94:23:29:5c:8d:3f:e6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Oct 8 18:01:14 2025 GMT
Not After : Oct 9 18:01:14 2025 GMT
Subject: CN=73464130d5ee3cbc9a7b51d413b13681d5cf516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:f3:89:a4:ce:20:1d:0c:28:bc:e6:84:58:
0b:65:37:a8:a9:cf:93:c1:2b:ab:79:f4:e0:70:eb:
dd:bf:0f:63:80:44:d9:83:1c:54:89:63:f8:4f:89:
60:86:25:21:26:83:9a:20:d0:2f:21:a6:9c:04:53:
75:f3:fb:ef:7d:de:b8:3f:81:fe:90:82:77:50:79:
35:d4:0d:8a:6e:43:f5:48:94:80:4e:15:d8:95:4f:
de:1f:83:f4:ff:17:cf:cd:96:3c:f0:a4:ef:20:56:
08:34:63:66:d7:1d:4a:37:69:ca:0a:05:58:c3:5c:
4a:66:0d:42:be:96:b4:22:b6:3d:50:4c:4f:8b:6a:
e7:11:29:42:ab:1d:71:03:2f:97:5a:ef:31:19:ea:
3e:9d:07:89:fd:1d:df:45:4a:7e:c2:a5:b1:a6:a9:
e9:47:dd:e1:b7:c6:77:5f:e2:fd:01:f8:99:18:71:
c1:61:24:0d:b5:d9:5e:e1:39:3a:d5:54:c8:04:27:
81:78:04:09:c5:cb:e9:7e:2e:e0:30:75:2c:da:1b:
af:a7:38:81:ac:ee:34:6c:e7:c9:0d:22:c7:06:a9:
7d:bd:d9:1f:75:a8:3d:e5:7e:80:51:10:dc:13:6f:
b2:87:bd:1f:52:04:14:1b:12:de:a5:a3:cc:70:e9:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:41:30:D5:EE:3C:BC:9A:7B:51:D4:13:B1:36:81:D5:CF:51:6B
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:31:ab:94:f1:e4:c4:8a:e1:32:f1:47:8a:a1:d1:a7:b7:
a9:86:af:8d:40:3d:fb:2a:3a:c8:8d:93:6c:00:6a:a1:8b:02:
66:e3:80:66:8f:76:cb:77:4d:f0:5b:0c:48:34:74:4c:49:d9:
9b:e2:41:f7:77:55:a4:a2:ca:f2:a8:62:40:b9:f2:81:79:36:
8c:9a:38:cf:35:13:b2:c7:ad:ec:cc:4d:95:54:99:40:b6:da:
5d:e6:8a:c5:52:87:99:48:3e:16:b1:bd:75:41:d7:e0:04:c2:
b3:78:32:d8:88:0f:fa:d4:e0:fd:96:aa:e8:8d:3c:97:9c:4b:
cf:1e:98:99:36:f2:36:f5:ce:8c:ac:e1:02:b8:e9:e6:36:34:
6d:1a:ad:ff:d8:22:99:ed:2e:fd:b3:a1:b9:b2:51:e4:ff:2a:
95:61:91:0f:d5:26:f7:74:68:b6:82:30:db:9b:a7:f2:f3:da:
5e:00:40:53:f2:45:ec:23:a0:c5:ed:71:a3:7a:2c:7c:6a:55:
ea:e3:9c:a7:a4:ac:a5:da:ba:e9:40:9b:45:f2:20:20:ea:a9:
94:da:48:6c:12:ac:d0:03:d8:33:e5:76:58:5f:0a:f3:81:6d:
98:a9:8e:fb:ba:44:b5:ab:94:6b:ed:8b:36:0a:48:47:c1:37:
cf:f4:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:53:40 2025 by rpki-client