Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: v0N3fdkECn26qc4v+qYEttSH8p7dvTN21OeE0DHMwLQ=
Subject key identifier: 0A:07:4D:00:99:36:23:FB:7C:91:E0:4B:A3:74:99:05:DE:FE:F2:95
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019754FE9620490DE85421C07B2C99094C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0370
Signing time: Mon 09 Jun 2025 14:01:00 +0000
Manifest this update: Mon 09 Jun 2025 14:01:00 +0000
Manifest next update: Tue 10 Jun 2025 14:01:00 +0000
Files and hashes: 1: 0fTzrR0FgT99fPQppUr0MJauodA.roa (hash: vrJgtNANw3B/qMAsMw5g4uVNE+VfKXWhBzBneo91BaY=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: ERHBbBCMq6iGRLwKmh9DKs0ibqH2uzUIAWOLspRZLOk=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:96:20:49:0d:e8:54:21:c0:7b:2c:99:09:4c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jun 9 14:01:00 2025 GMT
Not After : Jun 10 14:01:00 2025 GMT
Subject: CN=0a074d00993623fb7c91e04ba3749905defef295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:3d:d3:9b:75:62:36:f0:bd:c9:18:81:51:
fe:32:ca:3c:15:21:0e:91:d8:5e:11:af:bb:a1:1c:
a8:5a:c1:ae:f0:ff:f2:ed:92:5f:2b:ff:de:71:43:
1b:07:99:3a:56:57:1f:42:8d:d1:3a:d7:96:68:5c:
e6:1e:2e:eb:22:dd:65:5b:de:41:cb:1c:99:97:df:
7f:78:7b:25:78:68:c0:56:9c:97:0c:96:34:43:c3:
73:4d:79:9d:e1:eb:69:3e:22:4b:c7:83:fd:79:b8:
b4:17:29:25:f9:11:a1:be:af:db:e0:b3:c3:bb:f9:
8d:c5:c9:07:6a:6a:2a:ba:35:57:a5:a9:2c:4d:3e:
5e:df:2a:db:08:a5:5f:6e:0b:31:6c:71:68:1e:e6:
3c:03:37:a2:59:be:f0:b5:61:9a:6b:44:b4:e2:64:
6f:40:e0:7b:96:01:03:70:58:d6:38:9e:52:29:c1:
2d:4a:c4:51:7a:63:80:6a:5f:43:78:a2:7c:ce:02:
a0:f3:62:b9:3f:0b:a5:70:f1:18:19:a6:78:24:ff:
30:7c:1f:5d:d5:c2:ba:23:80:6b:cd:c1:bb:47:99:
7d:07:b7:bc:45:2d:9c:2e:ff:50:c4:c0:2b:4f:e3:
e6:69:54:9a:a2:80:49:8d:ed:44:a0:c2:0f:ac:88:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:4D:00:99:36:23:FB:7C:91:E0:4B:A3:74:99:05:DE:FE:F2:95
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:5a:48:fc:87:ef:3e:c2:39:7b:b9:27:a0:18:c0:28:08:
a1:2a:61:d8:b6:e1:9e:a8:ec:31:43:c4:05:1a:86:ae:41:f4:
dd:94:06:4d:0c:06:43:26:64:2e:de:1f:cc:07:f1:48:08:94:
72:b9:54:64:2f:2c:53:c3:8f:b5:cf:a1:5a:cb:8e:13:a8:35:
e8:66:86:3e:cf:b8:52:d2:70:06:13:12:e7:da:d6:48:31:d1:
83:ec:27:43:1f:37:18:07:9c:20:d4:35:96:29:b3:0d:6a:f5:
5c:d7:7d:51:aa:7a:18:37:d8:d3:39:cc:40:75:25:85:ac:5d:
38:fe:3e:73:da:b8:da:5b:09:b3:fb:35:18:d8:a6:3b:67:5c:
87:51:10:27:e0:b9:07:49:42:64:47:f0:e6:82:10:48:53:ce:
0d:26:db:5f:84:ad:60:3c:1a:a5:e2:b1:49:e4:bc:f1:77:e8:
44:9e:71:c6:42:b3:ba:7a:a3:e3:b4:1f:7c:1a:21:db:f2:94:
a4:af:8a:59:62:3a:7c:bf:f8:61:22:77:38:69:cf:0e:80:7b:
dc:24:e3:16:53:85:d9:59:19:dc:b3:9f:03:aa:8a:79:6c:c4:
09:f2:74:46:8d:ea:28:3f:bc:f5:39:b2:a6:cb:c5:5e:9d:85:
b3:89:79:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/pYgSQ3oVCHAeyyZCUyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjUwNjA5MTQwMTAwWhcNMjUwNjEwMTQwMTAwWjAzMTEwLwYDVQQD
EygwYTA3NGQwMDk5MzYyM2ZiN2M5MWUwNGJhMzc0OTkwNWRlZmVmMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjo905t1YjbwvckYgVH+Mso8FSEO
kdheEa+7oRyoWsGu8P/y7ZJfK//ecUMbB5k6VlcfQo3ROteWaFzmHi7rIt1lW95B
yxyZl99/eHsleGjAVpyXDJY0Q8NzTXmd4etpPiJLx4P9ebi0Fykl+RGhvq/b4LPD
u/mNxckHamoqujVXpaksTT5e3yrbCKVfbgsxbHFoHuY8AzeiWb7wtWGaa0S04mRv
QOB7lgEDcFjWOJ5SKcEtSsRRemOAal9DeKJ8zgKg82K5PwulcPEYGaZ4JP8wfB9d
1cK6I4BrzcG7R5l9B7e8RS2cLv9QxMArT+PmaVSaooBJje1EoMIPrIiW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoHTQCZNiP7fJHgS6N0mQXe/vKVMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqRaSPyH
7z7COXu5J6AYwCgIoSph2LbhnqjsMUPEBRqGrkH03ZQGTQwGQyZkLt4fzAfxSAiU
crlUZC8sU8OPtc+hWsuOE6g16GaGPs+4UtJwBhMS59rWSDHRg+wnQx83GAecINQ1
limzDWr1XNd9Uap6GDfY0znMQHUlhaxdOP4+c9q42lsJs/s1GNimO2dch1EQJ+C5
B0lCZEfw5oIQSFPODSbbX4StYDwapeKxSeS88XfoRJ5xxkKzunqj47QffBoh2/KU
pK+KWWI6fL/4YSJ3OGnPDoB73CTjFlOF2VkZ3LOfA6qKeWzECfJ0Ro3qKD+89Tmy
psvFXp2Fs4l5kA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:08:03 2025 by rpki-client