Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: x5XiNv+2EzTex4LL/qdXLGFPdNqxMXci3Y8/LWc6UOw=
Subject key identifier: C7:3D:F8:AD:95:14:C2:1C:CC:33:E8:F3:E9:EF:98:ED:F5:7F:04:0B
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 01974DE96BBF739531D1029BB2D838F88D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 05:00:32 +0000
Manifest this update: Sun 08 Jun 2025 05:00:32 +0000
Manifest next update: Mon 09 Jun 2025 05:00:32 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: 9sXUeY82SK9Remi/7lFWm6Yd4UXnTyxrKXMD9WPfOUw=)
2: z3WUNqxKMDWur0KI4t-qxJ9N11o.roa (hash: 939Mn6aF9U81uAcv2w44QyTqf1evPpPjx2mvgDn5N/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:6b:bf:73:95:31:d1:02:9b:b2:d8:38:f8:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Jun 8 05:00:32 2025 GMT
Not After : Jun 9 05:00:32 2025 GMT
Subject: CN=c73df8ad9514c21ccc33e8f3e9ef98edf57f040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:f5:c0:13:84:a5:ec:60:9e:89:ec:3c:3a:
d4:90:8d:25:fa:9c:14:53:03:41:32:75:32:42:7a:
ef:5c:52:27:67:96:00:7d:a6:2d:18:dd:4c:0d:0b:
d5:25:37:50:94:94:79:c5:5f:ba:04:60:df:77:49:
3e:09:3d:ee:3b:b0:34:f8:e1:1e:5f:0a:93:ea:86:
d1:3c:6e:28:01:ff:a9:9f:c7:f3:7b:81:32:b2:c9:
47:38:f9:f6:78:c8:1e:a3:ee:cc:e5:8b:f8:e2:32:
b9:81:f1:8c:3d:ce:fe:a1:1b:3a:59:b7:60:f2:60:
5a:9f:f4:9b:08:7f:12:d9:86:3f:34:4d:73:95:3b:
03:31:4c:1c:1a:21:a0:4c:df:06:4c:ce:47:38:5d:
0f:e8:cd:2a:4b:b0:40:09:f8:d4:07:6a:85:a8:f1:
8a:ac:25:f0:77:c8:b2:92:b7:05:1d:4a:cb:14:d0:
0b:c9:c9:76:f1:7e:c0:d9:a7:d7:8a:02:a3:be:1b:
7d:2b:d9:8b:91:5f:c4:64:21:f9:4b:89:fc:b1:b7:
7a:2a:71:d6:22:fb:14:e0:70:c6:80:7f:0f:4e:be:
55:e8:09:2b:e4:1f:77:99:2f:b2:48:d5:0c:b8:22:
5e:10:30:e2:16:76:b1:fa:cd:ab:f1:1d:f6:98:d8:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:F8:AD:95:14:C2:1C:CC:33:E8:F3:E9:EF:98:ED:F5:7F:04:0B
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8f:e9:64:1e:7d:62:59:e6:98:94:94:5c:dc:3e:94:9e:54:
89:01:62:5f:40:ac:62:b0:98:be:f1:03:00:16:ed:62:ea:53:
b2:85:8e:50:21:ae:89:8a:70:64:7c:67:85:d4:8e:cc:50:9e:
ee:02:cf:b8:28:97:46:61:79:75:a2:10:41:b3:85:7f:37:c0:
71:3d:df:1e:96:f5:85:40:3f:1d:c3:c9:e9:88:d0:99:c8:97:
ac:ef:b0:cc:6e:a6:c1:b3:2f:93:27:81:ab:39:53:2c:f3:70:
c0:26:e1:9f:cf:66:26:01:14:ef:e2:10:9f:96:82:11:37:84:
f3:4c:eb:a9:4b:79:82:eb:18:2c:fe:92:7a:49:8f:08:4d:2d:
87:c0:97:5e:78:07:b0:a6:64:59:7a:ab:81:30:35:20:8d:03:
16:07:c3:49:a9:34:8b:0b:95:fd:67:16:4e:24:6e:9c:92:fe:
fd:50:2d:b1:90:c1:7a:dc:b8:ab:80:19:a0:24:48:36:56:0e:
02:6a:42:a6:64:66:47:9f:17:ef:1e:7e:19:1d:5e:03:2f:4d:
5b:4b:82:ba:20:7e:c3:d8:82:69:4a:6a:dd:d3:25:ec:3a:e9:
7e:1f:51:c8:40:b1:2c:cf:76:76:61:28:32:87:cb:4b:7c:af:
ff:1c:50:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:02:23 2025 by rpki-client