Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: GzFlFsQENOM9bfHjnBELy2i1Xah3ooYtYFCnTEn94xg=
Subject key identifier: 9F:E8:A2:BD:B2:D6:A7:29:FD:4A:E5:2F:B9:D4:F5:06:48:E7:E0:2F
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01991E0AB2B47A40307898E77F6C224C5812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 045D
Signing time: Sat 06 Sep 2025 08:00:41 +0000
Manifest this update: Sat 06 Sep 2025 08:00:41 +0000
Manifest next update: Sun 07 Sep 2025 08:00:41 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: HWgk2WDb4etqjxmNrVxEKiXtXFzB202q3OnHDLG+KpA=)
2: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
3: dX64oYdO84sYoaZssnfnNSnjjZ8.roa (hash: gsXE0J7PM3QNxgRheiXzLzqDJ2lY8wkV0/36i7HSBdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:0a:b2:b4:7a:40:30:78:98:e7:7f:6c:22:4c:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Sep 6 08:00:41 2025 GMT
Not After : Sep 7 08:00:41 2025 GMT
Subject: CN=9fe8a2bdb2d6a729fd4ae52fb9d4f50648e7e02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:8e:8a:44:3b:92:b7:bc:d3:ed:ba:26:72:
41:2b:71:e9:78:0c:7d:07:5e:26:5d:bf:27:b5:d1:
7f:fa:64:68:c1:f1:7a:c8:22:3d:26:46:0c:2b:38:
fc:dc:00:73:33:dc:c7:42:f0:3f:c9:4e:15:c8:73:
a0:32:aa:fc:3a:ba:29:10:12:ff:d7:83:8d:b1:35:
b5:a5:cd:0d:93:c5:80:5b:e6:87:ca:da:f5:c3:3f:
92:91:e1:fd:fb:26:73:19:43:60:19:ac:b5:b2:32:
41:7e:ba:27:f0:0e:44:00:8e:a9:33:85:36:0b:f6:
b1:49:ed:99:4d:ec:9d:ec:4a:9c:a7:a3:3e:30:35:
2f:28:18:e4:de:56:b4:c1:ee:5c:11:a2:5c:31:15:
fa:61:90:5e:77:d2:1c:ae:7a:6d:a7:cb:87:b7:8b:
d5:40:6b:5c:50:d3:51:71:29:13:e0:88:10:a1:d7:
2c:a3:9c:bf:be:47:23:aa:e0:35:0c:81:c3:1d:a3:
45:b4:c0:79:3b:55:c2:f7:41:a0:1e:5a:08:a8:27:
5d:fb:8f:03:3d:cc:fc:d7:bd:20:80:d7:44:3d:e9:
84:02:39:39:af:45:79:32:33:be:b9:52:2e:45:ee:
d7:71:73:22:8d:56:81:73:b5:19:0e:dd:5a:b1:2e:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:A2:BD:B2:D6:A7:29:FD:4A:E5:2F:B9:D4:F5:06:48:E7:E0:2F
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:77:1b:8f:8c:50:88:aa:a4:a2:e1:73:7a:25:bf:60:9f:80:
b2:1e:e0:7d:ff:55:89:e3:59:b1:e5:40:15:0b:a5:f4:b1:86:
27:d9:42:4b:31:25:b6:c1:fc:1c:d5:58:5a:63:97:41:10:fe:
4a:6b:5f:d8:e4:f9:0c:e4:7d:5f:0c:0c:4b:ba:a7:cf:9d:fd:
46:97:6a:f2:4f:d0:65:43:f4:ac:0f:8d:2e:1b:f7:1e:14:42:
99:13:52:41:ea:7d:44:8b:03:d9:b9:13:cb:3f:b8:02:da:11:
a4:89:2c:46:21:e1:b6:5f:4c:fd:a6:5e:a9:89:c9:78:9d:3a:
76:f8:34:04:62:8c:21:d2:77:a5:93:30:f9:30:e3:b6:f2:a6:
3c:ce:db:70:9a:06:4d:fb:57:e8:2c:76:0b:93:f5:5f:bf:79:
8d:91:2e:83:d8:15:be:c8:4e:5a:cf:6d:25:b4:2d:77:3d:6c:
13:07:62:40:ea:f0:3b:01:fe:18:2f:ca:06:3d:b0:ab:e8:35:
d0:55:8c:39:74:37:d3:48:67:2d:6b:35:67:2e:73:11:82:59:
31:00:d1:41:2c:1a:da:db:ff:be:20:08:7d:a9:e1:d8:2c:40:
50:a5:5d:4b:05:43:ac:3b:71:2d:0a:3d:d2:f1:30:97:4e:97:
7b:22:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:45 2025 by rpki-client