Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: RYHSeCI4+rhcFXhs3Ui7XbiLa9KfVlwuIgkRXmAl78U=
Subject key identifier: FD:53:B4:E7:E2:A0:65:28:16:55:F0:53:1C:E4:4E:9D:57:55:60:88
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019748FA5AFA878020252F72A63EB7A021E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:56 +0000
Manifest this update: Sat 07 Jun 2025 06:00:56 +0000
Manifest next update: Sun 08 Jun 2025 06:00:56 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: BUZRHgRnRT9R8xPdL81GXAOkAJT52dPYQe15xgfFVHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5a:fa:87:80:20:25:2f:72:a6:3e:b7:a0:21:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Jun 7 06:00:56 2025 GMT
Not After : Jun 8 06:00:56 2025 GMT
Subject: CN=fd53b4e7e2a065281655f0531ce44e9d57556088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:69:b0:f3:64:f7:31:89:08:75:bd:6f:37:
93:6f:86:d6:86:f7:bd:4d:cc:66:6d:1b:41:d8:24:
d4:70:93:bb:86:ba:a4:21:ff:08:c6:af:8d:0c:c7:
44:c3:36:1d:88:df:43:ea:27:2d:dd:5b:a7:36:fa:
cf:f5:5c:3d:57:52:a9:f7:ae:79:de:c5:1e:c6:28:
53:7d:6c:e8:c1:e4:f8:1b:57:66:53:43:58:bb:fd:
c1:a2:0f:aa:3f:b5:40:b0:6f:83:3d:00:1e:d2:65:
22:dc:27:87:99:97:60:d3:5a:e0:42:3f:80:1f:c0:
aa:f4:e6:47:92:4b:7a:c9:15:a6:61:ff:43:13:af:
ae:97:6e:25:7a:ef:a5:b6:16:0f:97:04:88:3a:1c:
1d:89:13:36:c9:f6:1e:d2:52:f4:e8:28:08:35:4b:
dd:15:37:53:34:c7:65:13:81:1c:7f:0b:13:b2:8e:
fb:69:af:ec:d8:88:cc:9f:7c:57:87:3a:75:fc:04:
ed:e3:c9:26:2b:97:b3:7f:50:1b:07:58:d6:11:a1:
28:23:0e:48:4c:f1:12:55:5d:93:33:9e:0e:b6:79:
45:c4:21:56:64:43:a4:51:89:97:fd:be:ec:aa:59:
81:b2:38:15:89:93:15:04:fe:32:d9:ae:c0:9a:1d:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:B4:E7:E2:A0:65:28:16:55:F0:53:1C:E4:4E:9D:57:55:60:88
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:11:6f:e0:18:29:ee:a7:99:d7:a2:2d:a0:36:1e:fc:4c:
28:2b:a3:3b:88:6e:eb:cb:4c:9c:93:60:a0:12:b8:a9:7e:87:
03:82:6e:a0:a4:2a:b7:c5:54:2f:4d:1d:44:58:42:e2:d2:50:
f2:e3:77:fc:ee:d9:1e:81:bd:ab:02:b4:c7:d9:da:b2:63:7c:
a3:f0:17:56:88:94:be:86:a0:75:ba:ad:76:42:2e:b5:eb:f1:
97:df:3b:f9:64:d0:19:6b:73:17:f6:b3:9c:9b:d2:85:24:ad:
d3:15:0e:46:c1:0a:65:09:f9:6d:65:6e:ca:64:58:bd:0b:f1:
8f:d8:fd:f8:f7:78:7e:7e:53:fd:88:21:9b:20:a7:73:66:d4:
c1:f7:77:d1:65:99:af:9d:23:28:d2:5e:9e:c2:08:dd:c2:d8:
80:6a:06:55:9b:69:3e:65:c4:ce:35:b9:39:b8:01:d1:2b:38:
9a:e9:b8:2f:57:41:7a:ac:0c:4f:1e:6a:e7:f6:54:c4:79:85:
26:17:26:2a:4f:40:88:6c:08:87:60:9d:18:6d:41:06:f7:85:
72:35:4e:05:9a:19:da:0d:93:d1:ab:20:fa:82:61:74:40:8c:
1f:4f:d6:54:aa:8b:67:5f:fe:4a:9c:8c:4c:08:95:66:13:13:
74:71:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:20 2025 by rpki-client