Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: Xb2qCTJrEAMqo7qdocBqLplpR0pYwWakgREBcf5VGwg=
Subject key identifier: 7C:C0:73:3B:81:EB:E6:03:2C:2F:E7:D8:3C:97:62:8B:DA:DB:48:C5
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 0199239ED8353A57620B5A8833842981183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 1025
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: iApqWwYKVOBDv+yoXvpJ9BPBk6OEHnLrulGJR1Whtgc=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d8:35:3a:57:62:0b:5a:88:33:84:29:81:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=7cc0733b81ebe6032c2fe7d83c97628bdadb48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:37:23:40:5d:98:3b:a0:19:90:58:3a:08:
1f:73:4f:80:4d:e6:85:75:d7:e0:10:ab:3b:2c:71:
23:cd:bc:cd:c3:22:95:3e:f5:ff:9d:01:2c:e7:0a:
a7:4d:b5:3f:ce:ba:30:d3:7e:0a:76:f5:2b:81:f7:
7b:53:62:b6:a0:2f:b4:44:50:0a:42:04:30:be:a4:
49:8b:ec:fa:0c:7c:c7:2f:22:91:de:00:0d:04:0a:
91:8c:e8:97:1c:41:b8:9d:f0:84:59:d7:e8:14:a3:
03:53:b7:e0:24:5f:95:1d:0a:57:c5:84:ea:4f:5e:
58:e8:11:20:b2:11:24:4e:3d:be:12:55:fd:fb:78:
3b:81:ac:6c:fc:5b:06:6c:fa:ef:19:23:9e:f8:b4:
c9:49:ac:83:59:34:5d:d3:27:4f:2d:d0:94:d7:8e:
97:0f:d8:79:81:12:74:46:e9:b3:e0:cf:3d:9b:68:
f5:fb:5e:61:0c:3b:e0:23:92:f9:48:38:be:7a:bc:
3f:17:c1:b4:99:e7:2e:58:5d:fa:87:4b:73:97:9f:
1e:41:c9:99:94:43:e1:89:1b:0d:f9:84:60:3b:88:
a8:3e:ff:ff:9a:69:88:91:cf:ba:97:db:c6:a8:17:
30:af:41:21:81:2c:20:f6:32:2e:cc:3d:78:0c:ea:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C0:73:3B:81:EB:E6:03:2C:2F:E7:D8:3C:97:62:8B:DA:DB:48:C5
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:4d:a6:7f:a3:98:4d:24:c3:9d:f3:39:7d:c3:fe:0c:d3:
fc:ce:c1:7f:30:38:0c:2a:e6:f7:7a:54:70:79:c8:6d:8b:aa:
82:be:c4:e2:20:ee:e0:ed:12:87:b0:b1:f9:3f:ee:b1:e6:b8:
a0:c0:e5:42:07:44:4f:01:d2:68:60:a5:9b:d3:33:c6:85:73:
30:81:cb:d6:7c:bd:94:32:18:97:0b:16:eb:07:33:8e:1c:e1:
78:1e:59:8c:7f:72:2c:5e:3f:27:bb:1b:f9:58:fa:c0:4c:fd:
f9:50:f3:d1:9c:a9:ab:41:6f:90:66:a8:19:c4:ce:f3:fa:34:
c7:ad:7f:82:4f:b6:d7:0f:77:ce:71:c7:39:76:6a:61:4d:49:
fd:9f:f9:62:2a:cd:93:14:3a:aa:c7:e2:28:e9:fa:ac:3f:01:
5b:5a:ff:aa:4b:a7:fb:fd:70:d9:99:71:a5:64:52:09:9a:3e:
d4:7d:cf:14:94:d7:53:a9:e5:17:45:99:20:aa:c7:f9:e4:f7:
1c:02:68:84:80:4a:00:66:e7:0d:a1:3b:72:58:f8:22:73:8b:
60:0e:4b:03:a2:a2:dc:67:9d:00:eb:88:3b:6d:40:98:5b:40:
d2:9e:fa:1d:e2:c2:67:1c:df:e1:c0:b2:15:41:89:39:e1:c5:
58:75:c7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjntg1OldiC1qIM4QpgRg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjUwOTA3MTAwMDM2WhcNMjUwOTA4MTAwMDM2WjAzMTEwLwYDVQQD
Eyg3Y2MwNzMzYjgxZWJlNjAzMmMyZmU3ZDgzYzk3NjI4YmRhZGI0OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgA3I0BdmDugGZBYOggfc0+ATeaF
ddfgEKs7LHEjzbzNwyKVPvX/nQEs5wqnTbU/zrow034KdvUrgfd7U2K2oC+0RFAK
QgQwvqRJi+z6DHzHLyKR3gANBAqRjOiXHEG4nfCEWdfoFKMDU7fgJF+VHQpXxYTq
T15Y6BEgshEkTj2+ElX9+3g7gaxs/FsGbPrvGSOe+LTJSayDWTRd0ydPLdCU146X
D9h5gRJ0Rumz4M89m2j1+15hDDvgI5L5SDi+erw/F8G0mecuWF36h0tzl58eQcmZ
lEPhiRsN+YRgO4ioPv//mmmIkc+6l9vGqBcwr0EhgSwg9jIuzD14DOolYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzAczuB6+YDLC/n2DyXYova20jFMB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANM1Npn+j
mE0kw53zOX3D/gzT/M7BfzA4DCrm93pUcHnIbYuqgr7E4iDu4O0Sh7Cx+T/usea4
oMDlQgdETwHSaGClm9MzxoVzMIHL1ny9lDIYlwsW6wczjhzheB5ZjH9yLF4/J7sb
+Vj6wEz9+VDz0Zypq0FvkGaoGcTO8/o0x61/gk+21w93znHHOXZqYU1J/Z/5YirN
kxQ6qsfiKOn6rD8BW1r/qkun+/1w2ZlxpWRSCZo+1H3PFJTXU6nlF0WZIKrH+eT3
HAJohIBKAGbnDaE7clj4InOLYA5LA6Ki3GedAOuIO21AmFtA0p76HeLCZxzf4cCy
FUGJOeHFWHXHwA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:25 2025 by rpki-client