Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: EJCs77Jz5hmBVpZSSg5IDqwny2BxQDobeiGZtk3o9cs=
Subject key identifier: 54:83:8C:4D:7D:64:07:42:92:D6:EE:5F:41:0A:D3:85:64:A6:15:0A
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019A71131E77FE9CDE616E44D462649F15B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0DFC
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: 10omWdw1dq8RP/KM7yMVPPxcd8Hvf1oAVEUl+lF9DD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1e:77:fe:9c:de:61:6e:44:d4:62:64:9f:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=54838c4d7d64074292d6ee5f410ad38564a6150a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:4e:49:9e:a6:75:5e:d7:46:2c:40:f8:b1:
b5:84:9d:6c:0c:df:a1:6a:01:00:42:c5:5f:0a:4a:
16:dc:1e:0f:17:48:6b:5f:8a:2e:2b:ce:7c:f5:4c:
b1:70:e1:5b:4a:1a:72:11:06:ed:1c:c4:bc:3f:61:
82:ca:6c:dd:50:22:e7:4c:34:dd:ba:08:f0:83:89:
0d:c5:33:bb:c7:6d:0e:90:d4:85:2c:a0:1c:ae:33:
8d:50:48:ca:bc:f2:67:3d:3e:88:32:5b:2c:36:41:
0b:8e:52:cb:50:e3:7e:ab:ce:61:fa:25:37:de:16:
90:67:c3:c7:3d:53:a9:ed:5c:6c:3e:16:d6:9d:65:
c7:55:2e:8a:41:62:ed:e2:6b:74:e8:29:31:37:18:
a1:a8:36:4c:70:05:26:f1:94:80:bf:59:71:31:a1:
28:3a:36:fe:4c:97:23:81:03:eb:09:20:cc:88:49:
82:2e:02:70:28:66:08:21:11:3a:ea:bb:e4:bd:d0:
68:28:bc:18:94:ad:ed:16:f6:01:a9:cd:9d:2b:a1:
2b:79:e4:19:4c:c1:16:29:c8:88:18:f9:41:cb:29:
37:fa:a6:45:00:92:ad:24:68:28:c8:e5:d8:db:40:
aa:98:79:48:ab:18:ec:c6:c6:90:e7:4d:df:37:4a:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:8C:4D:7D:64:07:42:92:D6:EE:5F:41:0A:D3:85:64:A6:15:0A
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b8:e2:8f:57:db:fd:3b:99:f9:6e:0a:d7:35:31:99:6d:d5:
8a:dd:cc:37:7f:47:0e:c6:2e:32:cd:91:24:d1:df:75:29:48:
4a:74:5d:28:1e:45:9f:78:26:19:57:2a:5b:6c:63:50:22:eb:
78:4c:16:ab:ef:a7:24:f6:5d:05:e2:9b:a7:25:b7:65:58:a9:
3d:0a:3b:fa:de:10:19:cd:3d:81:c7:02:e5:66:9e:68:37:e3:
74:44:9a:ff:e1:03:84:ec:d9:6e:c4:fc:52:b4:6f:de:01:69:
5d:8b:9e:7a:39:ca:6f:70:1d:d6:ef:35:bd:b2:d4:81:54:8e:
cd:a5:a9:62:b2:2e:80:cc:9b:54:b1:5b:e5:5b:49:66:76:33:
d8:35:95:64:5f:e8:0c:d6:06:17:08:22:5d:27:72:ea:ab:03:
a7:e1:2c:c2:8f:52:3d:14:ef:e8:0a:da:ca:69:cf:6e:72:47:
01:07:8f:02:2b:26:26:fb:1e:8f:9c:a5:00:4d:5f:cf:7f:28:
07:14:d7:d0:d7:04:18:00:b3:d0:54:c1:7f:68:8a:26:03:72:
0b:d7:5e:fb:18:64:4b:29:1a:25:8d:67:29:4e:cf:96:0a:66:
d3:7d:06:a2:7e:6b:40:3f:ca:7c:f0:75:cf:83:fd:23:db:31:
8d:76:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:19 2025 by rpki-client