Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: v0wBlM507i9ZlWDhG4scVh/zQTTBjAAt9AtIvkMCOVE=
Subject key identifier: 1F:E1:34:D3:3D:8C:38:82:6E:73:7D:2C:8B:84:27:D2:66:31:62:72
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 01992D0FBB398A42C4D17915BAD489C4DF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 06:00:29 +0000
Manifest this update: Tue 09 Sep 2025 06:00:29 +0000
Manifest next update: Wed 10 Sep 2025 06:00:29 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: eD08Sc3Ew01ukfdr6y2+UMQdvif7o5UZGyhikwTo1gw=)
2: USWcvgNcEilORVKmACRuhwkRBOc.roa (hash: ddQ+Ypi58Q8pIAp3pcektRPTSu+2sdx4cjmGyvh7AqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:0f:bb:39:8a:42:c4:d1:79:15:ba:d4:89:c4:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Sep 9 06:00:29 2025 GMT
Not After : Sep 10 06:00:29 2025 GMT
Subject: CN=1fe134d33d8c38826e737d2c8b8427d266316272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:88:38:ef:44:a4:f5:73:57:d5:4e:3d:0b:
61:c4:3d:56:17:07:c2:6b:82:2c:58:65:20:66:88:
74:84:c7:37:ee:e2:17:9d:b9:3d:47:a0:83:17:d9:
8d:4b:9e:98:c7:10:a6:44:4a:28:bb:24:7c:a7:b0:
97:d8:24:3d:91:9e:50:e5:c5:1a:14:1b:16:36:d3:
44:82:36:76:2c:ae:d8:c4:e5:9b:50:b6:93:db:03:
f0:8a:12:ac:8e:48:f9:1d:bf:b3:ca:fd:bc:81:7d:
58:fd:c4:df:5a:d2:22:48:a7:5f:7f:8f:93:7d:1e:
65:30:28:a1:e7:ab:df:1f:58:40:42:5a:61:c6:85:
4b:5c:1c:cf:c6:77:34:88:7b:73:93:a0:8f:81:d7:
11:10:ac:88:8c:1b:39:5a:e4:8a:d3:24:1d:16:ea:
40:95:93:fe:3b:6a:1f:68:fa:90:cb:f0:7c:34:e5:
23:d9:cf:ee:01:d2:10:2d:ac:ba:20:e9:8a:e5:0b:
72:ce:3b:4f:71:70:14:e4:3b:72:c1:da:ba:85:c2:
7e:b7:b1:12:9f:7b:cd:bf:45:85:07:de:6c:bf:bd:
86:96:bb:e6:63:fe:e9:a3:58:ff:a8:83:c2:f0:15:
51:44:c7:d9:bf:cd:1e:55:ac:5b:0d:41:43:27:7b:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E1:34:D3:3D:8C:38:82:6E:73:7D:2C:8B:84:27:D2:66:31:62:72
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:37:ce:54:b6:3b:3d:82:1b:14:0e:af:23:36:0c:cd:3f:
92:b6:cb:6b:7d:29:3c:56:68:43:cc:31:36:ce:b2:8a:22:22:
fd:ec:5f:b6:92:6f:8a:e2:a1:c4:a8:8e:f7:59:86:88:1a:03:
b0:19:d5:7d:35:cc:16:90:71:4f:a4:89:35:2b:b5:d0:25:2d:
5e:11:bc:65:5e:2d:57:30:48:f7:5a:24:f0:5a:99:cc:e2:9a:
55:5b:ae:a6:89:f4:11:dc:62:f5:3b:c1:72:6b:50:29:b5:bd:
0d:b8:c5:c2:16:3e:6b:6e:e8:df:01:8f:09:36:21:91:7a:9f:
34:8b:51:3b:a3:ba:e0:11:63:78:dd:ec:d4:bb:3f:d4:5a:1e:
f6:b3:f0:e3:1b:8f:db:09:69:16:f1:03:a7:df:1f:3c:fc:b6:
e5:4b:1c:91:17:f9:9b:c8:f2:fd:6b:c3:77:9e:79:d5:d9:59:
cc:20:9e:8a:d1:53:fc:3d:78:53:a0:a4:6e:05:2e:48:a4:b0:
0b:b7:78:8a:cb:76:2b:b2:bc:da:41:ac:1e:28:af:c8:75:86:
ae:ce:a6:72:20:8a:67:8a:5e:46:93:47:b7:4b:66:ba:ca:29:
8a:dd:e6:c0:28:fe:5d:07:82:fa:45:2d:5e:b3:ec:70:dc:0e:
cb:0f:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:49:43 2025 by rpki-client