Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: HQfEHNevXnbltiia5tXaD7WT8KnZ1VDb1Hsm21U7Has=
Subject key identifier: 7B:8F:ED:70:F4:F8:99:4A:8F:73:68:F9:FB:FB:48:95:57:73:EF:A6
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019A28C2BD1B4F3C7BCF2C188252464EA7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 03:00:42 +0000
Manifest this update: Tue 28 Oct 2025 03:00:42 +0000
Manifest next update: Wed 29 Oct 2025 03:00:42 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: xPKMSiTElKpoCJQ3yWuEkV4hdPqZEiHvCA1L6THI/8c=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:bd:1b:4f:3c:7b:cf:2c:18:82:52:46:4e:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Oct 28 03:00:42 2025 GMT
Not After : Oct 29 03:00:42 2025 GMT
Subject: CN=7b8fed70f4f8994a8f7368f9fbfb48955773efa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:47:99:f3:78:62:a7:76:ae:bc:2a:cc:1f:
a6:ea:3a:1f:e9:df:3a:44:7f:bf:a9:34:76:51:26:
81:96:de:f7:a2:23:c7:04:2e:8e:cf:78:ac:99:fc:
fd:23:21:74:16:88:4f:4f:7c:8f:03:23:3a:41:e0:
bf:17:32:b4:4d:b1:a7:f3:59:52:9c:a4:64:81:1d:
b3:72:85:16:5c:80:25:88:86:92:fd:a1:8b:87:4f:
35:93:e5:9b:7f:fd:46:0c:1a:dd:15:ca:52:51:07:
e2:52:cc:5f:0c:a9:17:5c:2a:de:a5:58:da:17:ec:
0d:20:52:ff:eb:70:48:f8:2f:fe:02:c3:28:10:0f:
f9:1a:53:b0:af:f6:ef:26:ec:0a:27:69:21:f7:39:
77:c0:b2:c3:ca:44:d3:b5:e2:48:71:9d:17:a9:f3:
58:d1:78:44:84:5c:06:c0:53:13:88:19:bb:ae:02:
b6:56:9d:00:93:83:e5:74:98:bd:3f:82:75:08:28:
27:cb:df:0e:b9:43:c2:e3:de:0d:86:b0:b6:0e:67:
2f:fe:f0:19:79:da:6a:a1:2f:c5:f8:79:31:86:28:
1e:7b:c5:59:59:ce:65:12:4c:a9:44:7d:dc:46:8f:
1e:f1:54:a8:cf:e0:04:23:a1:69:0b:e3:30:0b:e3:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:ED:70:F4:F8:99:4A:8F:73:68:F9:FB:FB:48:95:57:73:EF:A6
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:cb:84:72:bd:cb:83:18:f9:6d:89:8d:4b:55:c1:c7:bc:
5c:25:2f:67:95:46:8b:c6:10:9e:3a:15:8e:0b:3c:9e:df:81:
1a:c0:ad:bb:a3:f1:1f:a7:03:b3:0c:69:d9:de:93:b2:4c:a4:
2b:38:9c:69:a2:fb:83:2d:32:1b:a0:c4:59:ad:00:5d:50:a9:
a1:75:99:73:1a:70:39:a6:20:50:74:0a:6e:fc:06:75:43:10:
21:36:1a:9a:70:c5:36:e9:66:d0:37:4f:30:0f:44:0d:38:5e:
58:f6:69:c8:96:c3:9c:f9:ac:23:f3:f1:e8:d6:1b:1a:28:2c:
3d:6d:9f:c6:58:e8:26:71:28:f3:9f:ee:ef:80:68:16:78:28:
2d:0c:fc:8e:0d:27:d3:5b:ba:f4:cc:77:e0:cc:62:ea:6b:06:
65:8c:18:3b:87:e3:88:1e:1f:5a:18:66:f5:7d:5d:b8:9a:f6:
3e:ab:db:ec:2b:af:2a:54:81:da:4b:7f:0f:6b:14:5c:72:14:
b1:77:7e:b9:39:d5:d5:d5:01:5e:44:9e:55:d3:65:18:f8:92:
08:72:9e:a1:b2:9f:df:c8:8a:74:9a:a2:77:1d:0e:de:b9:9e:
b4:23:56:21:02:24:64:c3:ba:76:25:76:5c:7d:d7:de:10:f5:
4c:2b:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:48:27 2025 by rpki-client