Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: EOTKNsTJJPpLR6jhboOjg+58+/h81daHy6H9z1R5bGE=
Subject key identifier: C3:2B:7B:62:CF:BA:CE:1A:EC:93:A1:37:14:0C:76:85:2D:85:B1:59
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0198CACB00EAF84642DE753973A8C2783E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 12DA
Signing time: Thu 21 Aug 2025 04:02:38 +0000
Manifest this update: Thu 21 Aug 2025 04:02:38 +0000
Manifest next update: Fri 22 Aug 2025 04:02:38 +0000
Files and hashes: 1: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
2: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
3: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: //m7zTZVLhFUDxC2jUICqQu6unxkacxxUn2R5Q3Za6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:cb:00:ea:f8:46:42:de:75:39:73:a8:c2:78:3e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Aug 21 04:02:38 2025 GMT
Not After : Aug 22 04:02:38 2025 GMT
Subject: CN=c32b7b62cfbace1aec93a137140c76852d85b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:ca:87:66:d7:60:fb:c5:3a:15:e9:5f:61:
cd:65:d5:2b:ff:6b:26:ed:9b:30:9a:d4:33:ac:18:
e6:90:44:7e:28:7f:8e:b4:29:f1:8a:ae:9d:a6:70:
16:77:33:33:1e:b0:04:fa:9a:4f:67:2c:be:18:be:
5a:8a:a8:bf:a3:a0:67:6a:85:74:9c:b0:e5:bc:53:
bb:3a:4b:14:40:82:33:76:c4:49:58:f4:28:6a:be:
ea:be:5e:74:94:f7:91:09:bc:94:42:85:d1:78:78:
1a:d0:e1:0f:dc:7e:1f:60:fd:45:87:64:26:ed:e7:
99:71:dc:7f:f9:0d:8a:b2:85:37:6f:4f:f6:ab:2a:
cc:d4:e7:3e:ea:29:5d:d4:3d:b8:77:78:fc:2a:e3:
2b:db:40:37:d5:03:27:38:21:0c:d9:4d:e2:8c:da:
aa:ae:0c:81:bc:f9:5e:65:17:84:58:9e:89:3f:ef:
e8:ca:f5:8b:f9:5d:ff:4b:ef:1e:69:a3:2d:90:fc:
3c:09:34:ce:ee:e2:46:e7:d3:1b:1f:c7:96:ac:87:
80:91:a9:c1:f3:b5:0b:6c:23:8b:60:68:08:3c:e3:
a1:62:e6:5e:b5:0e:12:33:3c:89:ca:75:fb:32:3c:
8c:de:57:17:8d:61:41:b3:c6:79:31:13:4d:3e:37:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:7B:62:CF:BA:CE:1A:EC:93:A1:37:14:0C:76:85:2D:85:B1:59
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:14:32:1d:b3:1d:69:c0:ea:92:2a:5a:93:7b:6b:1e:11:
28:42:33:48:fc:f2:d0:51:d4:e9:f2:44:df:fc:f9:9f:32:c1:
78:e4:88:dc:5a:95:fe:9f:de:35:7d:52:01:63:aa:d7:d1:b5:
05:40:29:19:40:e3:b7:61:f6:64:69:56:8f:47:f1:4c:53:8b:
27:e8:42:ca:cc:08:bc:09:3c:e0:2e:c5:c0:be:85:f0:16:8c:
21:8a:64:e5:d4:b7:7f:10:68:1f:be:6d:9b:63:a9:e2:2b:8e:
2f:47:15:fd:2e:f9:80:28:a3:0f:24:a7:f1:5f:1b:9b:5c:c9:
83:65:2c:b0:67:f3:09:16:b9:bb:81:b1:e3:cc:1e:1d:47:a9:
3e:47:51:79:c5:b7:55:5e:eb:75:ba:f3:3f:4e:29:ef:2f:b7:
81:b2:3b:c6:5f:9d:4b:bc:9c:d9:bc:be:73:33:f6:be:2e:8e:
ba:46:3d:18:cf:d5:dd:9c:ff:cf:d8:be:23:a3:7b:61:aa:86:
95:b2:c4:75:b4:6d:7b:c3:eb:b3:e0:05:b8:ec:59:2d:3d:7b:
d3:06:4a:93:98:d7:43:f3:e4:31:77:b6:1c:1d:c7:21:b4:ea:
b3:f4:1e:e6:ec:6d:7d:05:81:de:2c:6d:dd:69:42:7e:9d:03:
eb:34:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:29:31 2025 by rpki-client