Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: hCTxmSKnsQ484j4Vg2yE2RRxaU8A2+gV7m8RK3O6QU0=
Subject key identifier: 98:B4:E2:DC:0C:BA:FA:16:1A:7A:41:68:E0:BA:36:EE:43:AC:1E:F8
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019A7225EA27D5EA45CBFC6EDCBA483AA219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: HRfAg3ARgDrBKa9xA/GiTTeMW3kL8/0nFqiAFwXfpuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:27:d5:ea:45:cb:fc:6e:dc:ba:48:3a:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=98b4e2dc0cbafa161a7a4168e0ba36ee43ac1ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:ea:df:6a:57:2a:cb:88:42:38:55:a9:d9:
74:36:a6:e2:bc:df:b8:cd:f6:46:9a:97:3b:a2:e9:
61:6c:53:a0:0f:a2:c7:c6:10:93:70:0e:9a:fe:25:
0c:d6:d6:3e:52:6c:cf:c6:02:e7:92:46:ea:83:88:
bd:a6:c3:d8:6c:94:9e:ff:e2:6a:f5:a6:a9:a4:73:
98:2a:91:92:98:48:ea:4d:a6:63:dd:cc:62:18:3b:
d0:ad:e1:5f:73:f6:c9:ef:bd:60:ff:7e:d1:8b:9b:
9e:dc:76:cb:ab:25:d1:12:ad:4f:e0:2f:9d:76:ef:
44:18:ec:3c:2e:c6:37:a6:95:11:bf:de:27:7c:32:
c5:ec:cc:7c:a2:5d:be:e5:7b:f3:31:a6:25:dc:13:
19:6c:d8:a4:fc:f2:0e:3b:d5:92:bf:ea:ce:a6:3d:
94:aa:5c:ef:d0:ee:fe:02:12:5e:fd:fd:03:20:fa:
b8:2e:1e:f5:08:9e:06:83:40:f3:cd:9b:2e:46:8c:
06:0f:50:26:aa:79:5f:9e:da:0d:b1:9b:e2:7a:ae:
70:fc:61:d6:d5:a0:58:c8:02:53:f8:70:aa:98:00:
2d:5b:8b:ec:09:2f:28:a6:ae:b0:35:c5:c4:fd:09:
ed:34:4b:c7:8c:2c:56:ba:22:b4:1a:51:d3:69:a8:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:E2:DC:0C:BA:FA:16:1A:7A:41:68:E0:BA:36:EE:43:AC:1E:F8
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0c:4e:c9:9b:d2:59:96:09:9a:09:68:f0:f4:4c:2f:0f:97:
4c:62:d5:62:19:82:53:cc:31:b1:2e:bf:ea:22:50:9f:8f:5a:
8c:8e:ff:78:53:2b:94:9b:00:d9:13:a5:aa:5c:ab:c1:2e:eb:
9e:61:fc:07:40:ae:14:a8:24:fb:bd:36:0d:56:71:04:8e:5d:
ef:40:f1:c6:0c:c1:4f:3b:20:31:1d:41:94:d8:39:43:e3:b5:
76:fe:fd:32:7b:84:b3:e5:8d:69:12:f1:19:4f:36:4e:05:e3:
b7:45:35:d6:c4:55:c2:ea:38:77:f9:26:ed:4d:4c:38:51:69:
79:59:56:ad:e8:e6:8f:7b:27:c0:0f:9f:5a:fa:83:49:f3:13:
0e:dc:ab:5a:b0:85:ca:23:de:0e:e1:15:a4:dc:29:fb:9b:15:
fd:b0:77:0b:cc:51:1a:0c:0d:8c:36:0f:a0:25:29:02:58:88:
97:96:86:66:bb:fb:4a:f5:ab:a1:63:18:24:8a:ac:3a:06:54:
0e:cc:7f:36:c9:5c:10:cc:f9:95:83:08:ec:23:4a:8f:3a:84:
a2:40:a6:09:14:2c:6d:19:7e:67:55:4a:1f:33:80:d8:53:09:
e7:11:d9:42:47:a5:c5:aa:22:79:40:62:db:c3:76:ee:2e:70:
5a:da:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client