Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: sudG+xGm/0kiRbaQvTXwngTShQqrDgmUesglsW8A9gE=
Subject key identifier: E0:8D:0A:72:EE:6C:36:83:8E:8D:8D:97:64:87:32:67:6F:07:9E:20
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019749D603DE7AB8DE83421BAE8923B9893B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0C5A
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: tHD49I1xIqsmA2AQLMQKdAaorCiTo8xMbingMDE4gjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:03:de:7a:b8:de:83:42:1b:ae:89:23:b9:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=e08d0a72ee6c36838e8d8d97648732676f079e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:17:3c:49:5e:51:db:93:95:3e:e8:7f:6d:
8d:66:28:07:93:ee:7c:90:96:97:ec:f1:21:f4:7b:
7a:96:00:6a:69:95:ea:80:9b:12:e0:c9:8c:1c:15:
ad:29:c0:96:56:fd:11:61:60:42:40:f0:c1:c5:5f:
57:89:6c:cf:b5:85:f8:f1:7c:0a:f9:ed:e9:b4:7f:
f3:0c:d5:f2:73:38:29:44:f8:fd:e8:0d:d3:6e:23:
a2:d4:92:14:3e:6e:1c:34:9f:4b:d3:a4:d0:92:57:
fb:ee:06:d6:36:29:68:b4:45:e0:af:7b:cd:22:12:
ca:93:70:7d:d2:ca:c0:bd:11:dd:42:f0:0a:ec:ac:
63:af:24:68:d0:03:94:5d:22:b1:79:d1:83:cb:10:
e1:51:c4:c0:7a:56:20:39:f3:7c:7f:23:68:99:5a:
d3:60:6a:b0:2c:db:bb:90:2e:81:0c:6e:fb:25:2f:
03:73:d1:d4:4f:9f:40:ec:fb:68:ef:ad:91:19:36:
5c:62:59:36:96:08:0e:57:3d:b6:ea:d0:57:e7:05:
a7:5b:1d:df:ef:09:be:d6:77:72:9d:ff:5b:e8:5c:
bd:a3:a7:6f:7a:6f:e8:8c:fc:13:1f:7c:ac:4c:2f:
1a:e0:d2:8f:f9:95:9f:be:f3:44:c2:54:f2:f0:8f:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:0A:72:EE:6C:36:83:8E:8D:8D:97:64:87:32:67:6F:07:9E:20
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:cc:a9:e0:1b:07:4a:e1:e3:07:e7:99:62:74:1d:39:3a:
f8:53:ad:7a:d5:d1:48:3d:6f:6f:49:2c:05:ec:f0:23:0c:62:
23:35:20:05:2d:d9:57:3d:8d:29:6e:02:58:d6:50:a5:0b:6c:
d7:ed:cf:4a:00:0f:b4:c8:c1:b3:62:cd:be:dc:e5:06:d7:03:
87:d0:30:51:7e:f3:5e:ed:95:c2:3f:17:3d:51:d6:f9:19:b8:
10:6e:e7:9a:bd:3c:f6:5a:ee:e1:aa:0b:b6:51:cc:a4:4c:86:
7b:63:22:78:c1:ca:68:a3:2e:5e:1b:fa:03:70:55:0d:a3:7b:
c7:f3:67:5b:ae:99:61:2c:95:86:e5:34:92:e5:66:af:82:54:
5a:e8:d0:b3:a6:1d:1e:96:dc:72:fe:53:cd:08:a8:0a:7c:c2:
bb:6c:f9:52:0d:38:8f:df:2f:7a:a3:2a:22:c2:a1:70:92:f5:
4b:0d:40:67:a9:cc:7c:66:fe:6d:40:3e:a8:05:de:3f:ca:a2:
0a:fe:a4:ec:35:fb:b9:b3:ed:18:3d:4c:db:46:50:a7:02:8a:
c2:49:c8:f2:53:c9:49:a2:2f:f8:d9:e0:ae:8a:3c:d0:a5:85:
92:af:5b:48:ef:b3:69:48:1e:fe:a4:99:ee:6c:5d:4e:70:5d:
b2:9f:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:29:45 2025 by rpki-client