Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: qqP7C3hFHfyPKOmAFhcDDNxbwp54rZQMGbBy+SPqAiQ=
Subject key identifier: 96:61:1A:32:77:E8:88:EA:01:B3:48:21:0E:DA:82:E1:32:6D:1B:E0
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0197684E05441CD46B74D77EB728DC8101DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 037A
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: 0fTzrR0FgT99fPQppUr0MJauodA.roa (hash: vrJgtNANw3B/qMAsMw5g4uVNE+VfKXWhBzBneo91BaY=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: 1D0UhvuOv1uKSK9xEdF7VggNh4n1KZgCjAprgZ/JPN4=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:05:44:1c:d4:6b:74:d7:7e:b7:28:dc:81:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=96611a3277e888ea01b348210eda82e1326d1be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:41:c3:cb:9e:ff:e4:c3:92:db:a0:84:80:
dc:76:fe:c4:71:03:0d:55:2e:8c:e4:2f:e6:20:ac:
37:4c:ac:20:68:2b:99:b0:c6:80:38:0b:fb:92:26:
23:82:4f:b3:d2:e1:21:5d:f0:9e:7d:c1:8b:69:d9:
cf:4e:77:41:32:82:b4:f8:65:ed:1d:be:6a:f9:fb:
87:de:df:9b:80:15:3f:f6:5e:c6:f7:7b:ba:5e:41:
ad:b1:13:0e:cd:51:82:83:20:dc:47:54:17:ad:86:
38:cd:b0:b2:20:a4:b1:96:88:bb:6e:b3:d6:fa:47:
f5:08:c3:84:04:13:6d:4d:36:15:73:69:67:3f:e4:
ed:b6:31:33:fe:54:e5:9a:d3:4b:05:83:43:e8:7c:
b1:03:35:97:bc:e9:80:9d:9b:b6:9d:11:16:71:3a:
8a:62:2b:0a:7b:40:fd:12:b2:4a:67:2f:3e:f1:e4:
45:b4:d0:cc:d3:28:76:8a:1e:db:2c:a2:a0:e8:40:
f6:74:f3:ae:fb:44:ce:26:65:9a:8b:7f:fe:88:d8:
7b:e4:8a:c0:0c:1b:72:a4:eb:f0:99:51:8b:07:68:
e8:f9:38:24:b1:65:46:07:35:34:d2:43:7b:c2:58:
e8:12:de:8d:76:2b:5b:f9:63:e5:25:6f:a0:94:23:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:1A:32:77:E8:88:EA:01:B3:48:21:0E:DA:82:E1:32:6D:1B:E0
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:ad:0b:f9:67:32:21:cb:b2:59:23:38:30:a5:e5:1e:4c:
c7:14:de:67:e6:a6:3f:86:f5:33:f5:e5:bb:a1:97:cd:72:46:
4e:36:08:cb:42:97:d8:82:0d:0d:0f:34:83:2a:03:e0:fb:34:
ce:5a:b8:94:c0:51:c2:69:1b:32:f0:0b:ad:fd:e1:36:ca:3d:
ee:ac:37:86:01:99:79:65:08:d6:1d:9b:fc:d4:a0:d4:94:81:
2d:e0:22:5e:21:58:71:3d:2d:06:5c:48:8f:74:49:8d:1a:4a:
3e:03:c3:73:1e:8a:bd:91:4a:9d:c0:74:f2:04:28:9b:42:6e:
af:e5:ee:46:94:06:2d:81:bd:e7:b0:bc:de:cf:e1:3c:09:7f:
a3:32:49:02:46:f2:00:7c:71:6e:ba:86:dc:1c:94:04:0a:6f:
f5:3b:05:6b:09:c3:43:4e:90:be:d4:1e:80:32:24:88:c8:d8:
86:26:21:7c:93:40:17:31:05:5b:33:a0:85:98:bb:36:d2:cb:
da:3d:42:d1:89:d5:a0:4d:8a:0a:ca:b8:ff:e1:2f:98:76:66:
ff:f6:f2:6d:4c:da:a0:22:49:84:cf:20:af:f0:0d:74:26:ac:
d2:09:45:15:5f:42:39:41:36:18:4e:1a:08:c0:6f:4e:69:f1:
28:d7:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:00:20 2025 by rpki-client