Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: KAJf1G9sZU9ZVnIX9tEuxqr8ifpB6VTi0nb7Kje9g2o=
Subject key identifier: DA:22:C6:D9:7F:EC:79:26:0E:76:67:7C:45:3A:C0:35:B0:4E:A1:89
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 0196120F50B85BF5BD11A86E653E0F67D46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 21:01:55 +0000
Manifest this update: Mon 07 Apr 2025 21:01:55 +0000
Manifest next update: Tue 08 Apr 2025 21:01:55 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: TqQ+MhLcbgNvb4SwSfJRFdaE7Nn5dwIC/+zUP39O9l4=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:50:b8:5b:f5:bd:11:a8:6e:65:3e:0f:67:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Apr 7 21:01:55 2025 GMT
Not After : Apr 8 21:01:55 2025 GMT
Subject: CN=da22c6d97fec79260e76677c453ac035b04ea189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:ca:3a:fb:e9:33:7d:b0:89:f2:65:a9:ba:
20:4d:2a:fa:99:b1:5b:41:72:c2:4a:9b:09:28:9d:
f8:d7:24:c9:34:b8:cd:4e:b5:fc:0c:b1:e0:09:9b:
b7:29:07:46:f1:48:ee:61:97:fb:a6:fa:cd:ac:57:
a2:9e:ab:f2:08:45:b9:6b:88:ef:a8:5b:35:51:88:
1f:c8:39:1c:f0:25:64:df:2e:79:23:d1:14:65:5f:
1d:e4:b8:c5:c3:7d:1d:18:6f:34:d0:06:bc:8c:35:
81:cf:86:9b:1d:a3:5f:ff:11:be:42:d3:ee:fb:18:
c5:e8:4e:d7:54:46:e1:64:8b:bd:76:66:66:09:f1:
41:99:42:e5:94:19:c1:f8:da:35:60:5d:a8:06:d6:
e7:e8:36:f9:ec:8e:17:f6:d6:bf:c9:c0:9e:1a:f5:
2e:87:78:1d:55:fa:8c:ea:dc:fc:65:f9:72:0d:ce:
be:b0:a7:e3:3d:26:79:44:a5:90:73:68:2e:ad:94:
fa:36:5c:a9:c7:95:84:70:96:c3:bf:18:69:4c:f2:
7e:52:23:3a:19:66:71:fd:bc:2c:5c:0c:6e:06:20:
a4:e3:06:0d:13:b5:ad:6d:86:74:10:80:0b:37:c9:
9a:ac:f3:40:84:36:45:fb:a0:4c:75:4c:b4:6f:b7:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:C6:D9:7F:EC:79:26:0E:76:67:7C:45:3A:C0:35:B0:4E:A1:89
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:85:25:8e:ca:fd:97:89:a1:73:88:21:f1:20:03:6d:bb:
c8:57:47:66:07:aa:7f:cf:5e:fb:24:0d:4d:a2:8b:14:88:68:
c5:57:39:0b:1f:e0:08:8c:96:5f:f4:46:25:67:c6:96:85:f6:
d9:ac:2b:96:75:e4:7e:5b:93:50:0b:5e:0b:ba:b1:c5:85:9f:
11:1e:5b:5d:37:ff:9f:5a:3c:19:e0:89:27:78:94:06:c2:ab:
9f:cc:20:49:39:43:78:a5:ba:33:7f:89:0e:9a:ff:00:ad:75:
47:02:8a:d2:b2:7e:78:ed:6f:2d:57:fc:cc:43:c6:09:2f:4f:
95:f8:54:c2:5a:b6:2f:75:92:dd:81:4b:8e:04:80:7d:c8:d2:
95:8e:2a:91:43:98:be:0c:df:80:b8:aa:e4:a6:e3:c8:14:9f:
89:7b:3e:da:df:36:1a:6d:c3:49:2d:b8:21:50:cd:b1:d7:5e:
6b:70:7f:f8:bf:06:9c:e8:2e:e5:26:0f:f0:07:57:a9:88:a0:
ef:86:4b:46:a6:a1:d3:72:5b:12:95:59:47:fb:44:09:ad:6d:
9d:a1:d5:8c:61:3b:eb:9a:ac:80:9e:65:e3:23:95:e2:f2:e1:
51:b2:df:5e:20:1e:f5:01:f3:e9:75:7f:86:17:c2:91:65:20:
96:73:fe:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSD1C4W/W9EahuZT4PZ9RuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjUwNDA3MjEwMTU1WhcNMjUwNDA4MjEwMTU1WjAzMTEwLwYDVQQD
EyhkYTIyYzZkOTdmZWM3OTI2MGU3NjY3N2M0NTNhYzAzNWIwNGVhMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8vKOvvpM32wifJlqbogTSr6mbFb
QXLCSpsJKJ341yTJNLjNTrX8DLHgCZu3KQdG8UjuYZf7pvrNrFeinqvyCEW5a4jv
qFs1UYgfyDkc8CVk3y55I9EUZV8d5LjFw30dGG800Aa8jDWBz4abHaNf/xG+QtPu
+xjF6E7XVEbhZIu9dmZmCfFBmULllBnB+No1YF2oBtbn6Db57I4X9ta/ycCeGvUu
h3gdVfqM6tz8ZflyDc6+sKfjPSZ5RKWQc2gurZT6Nlypx5WEcJbDvxhpTPJ+UiM6
GWZx/bwsXAxuBiCk4wYNE7WtbYZ0EIALN8marPNAhDZF+6BMdUy0b7f4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoixtl/7HkmDnZnfEU6wDWwTqGJMB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxWFJY7K
/ZeJoXOIIfEgA227yFdHZgeqf89e+yQNTaKLFIhoxVc5Cx/gCIyWX/RGJWfGloX2
2awrlnXkfluTUAteC7qxxYWfER5bXTf/n1o8GeCJJ3iUBsKrn8wgSTlDeKW6M3+J
Dpr/AK11RwKK0rJ+eO1vLVf8zEPGCS9PlfhUwlq2L3WS3YFLjgSAfcjSlY4qkUOY
vgzfgLiq5KbjyBSfiXs+2t82Gm3DSS24IVDNsddea3B/+L8GnOgu5SYP8AdXqYig
74ZLRqah03JbEpVZR/tECa1tnaHVjGE765qsgJ5l4yOV4vLhUbLfXiAe9QHz6XV/
hhfCkWUglnP+nA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:05 2025 by rpki-client