Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: dObf0OwV+OUyxpDxVgC8NUsgrcFTiVDnMJ5Jo/S4yeQ=
Subject key identifier: D8:8A:63:2B:9B:F2:80:4C:DC:1B:DC:2D:84:74:59:E0:7F:AB:82:C3
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 019A2A4383EFE6E6D88C914BB404B60160CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 1406
Signing time: Tue 28 Oct 2025 10:00:58 +0000
Manifest this update: Tue 28 Oct 2025 10:00:58 +0000
Manifest next update: Wed 29 Oct 2025 10:00:58 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: 4B43MEe16EmaeV0uDLdv5gOF2SvZrVI310NIqIkKjKw=)
2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:83:ef:e6:e6:d8:8c:91:4b:b4:04:b6:01:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Oct 28 10:00:58 2025 GMT
Not After : Oct 29 10:00:58 2025 GMT
Subject: CN=d88a632b9bf2804cdc1bdc2d847459e07fab82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:82:47:e5:1f:ee:9d:5c:7c:40:5e:dc:11:
29:1d:b2:86:83:49:d4:1b:07:21:66:0b:ce:50:f3:
81:db:d6:b5:45:f6:e9:24:81:17:51:4a:8a:30:bd:
07:c5:5d:9a:10:53:ae:b0:49:75:39:fe:e9:06:cc:
15:7c:b5:1d:84:45:15:b3:f1:99:b7:bb:ed:9a:28:
03:71:e9:33:06:1b:47:86:e4:35:33:0f:05:35:f6:
45:3f:a9:31:d4:db:55:ea:a2:ae:45:81:ca:94:ac:
ba:ec:62:55:e6:4f:90:1c:00:1f:64:64:83:76:65:
4f:f0:66:49:80:9b:b9:1e:92:95:3e:e8:3a:48:fd:
16:e6:b8:a1:df:be:a4:56:14:91:4a:ee:dc:34:ad:
90:43:21:2f:b9:c2:df:b3:8e:fe:97:8c:c4:48:20:
f2:98:d4:6e:bf:8c:91:2e:16:d1:22:d2:09:55:58:
ee:f4:7d:02:00:54:0a:a3:9d:ae:76:1b:0d:24:9d:
a5:b1:39:b4:fc:d7:ec:94:bb:f2:58:d8:fe:1a:ae:
f8:6b:d3:4b:84:af:3d:b9:57:d0:50:67:9d:43:ca:
17:a0:75:4a:40:24:35:d1:29:a3:4d:cc:92:a2:67:
cd:df:69:3f:0d:51:05:ce:0e:e3:9d:22:32:78:a6:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:63:2B:9B:F2:80:4C:DC:1B:DC:2D:84:74:59:E0:7F:AB:82:C3
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:50:11:9f:0a:d7:85:5c:82:78:65:d9:c6:da:ba:6b:fb:99:
f8:f4:b4:9f:57:5a:78:28:85:bf:be:1b:8b:78:a4:11:56:8a:
e8:8a:f6:bb:6a:96:00:3b:dc:c2:a0:b3:da:3e:38:d9:08:6d:
cc:f4:bd:55:db:44:9b:eb:e4:01:cd:40:79:12:93:02:d1:3b:
0b:45:6e:56:12:e0:77:92:24:20:46:67:41:86:fa:60:49:17:
87:68:dd:ad:75:5b:91:56:81:8a:6d:34:72:24:f4:4f:65:14:
9b:b4:62:85:fe:25:74:03:fc:b4:a5:ae:7f:9a:66:b1:a0:9a:
f2:a5:29:c4:9c:ce:c9:92:d1:1f:ef:6a:37:53:72:59:b4:2d:
d5:29:26:82:70:f3:fd:5e:36:a6:58:cb:32:0e:b3:2d:be:8c:
21:d9:3c:38:ca:54:7d:6d:68:c3:ca:c1:1c:b3:2c:1b:c5:af:
18:4e:d4:6c:d9:18:1f:f7:bf:91:e6:7b:23:9c:37:df:27:60:
75:d2:d6:e4:30:0a:29:a6:aa:79:8b:c8:ea:43:36:e0:a4:bd:
84:4c:e4:1f:88:14:aa:02:e7:40:e6:d4:0f:01:f0:ca:ba:17:
bb:88:94:49:e8:25:0e:a3:0d:a3:ce:3a:1c:71:bc:44:74:af:
76:c6:ad:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ4Pv5ubYjJFLtAS2AWDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi
Mzc3MGYwHhcNMjUxMDI4MTAwMDU4WhcNMjUxMDI5MTAwMDU4WjAzMTEwLwYDVQQD
EyhkODhhNjMyYjliZjI4MDRjZGMxYmRjMmQ4NDc0NTllMDdmYWI4MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20eCR+Uf7p1cfEBe3BEpHbKGg0nU
GwchZgvOUPOB29a1RfbpJIEXUUqKML0HxV2aEFOusEl1Of7pBswVfLUdhEUVs/GZ
t7vtmigDcekzBhtHhuQ1Mw8FNfZFP6kx1NtV6qKuRYHKlKy67GJV5k+QHAAfZGSD
dmVP8GZJgJu5HpKVPug6SP0W5rih376kVhSRSu7cNK2QQyEvucLfs47+l4zESCDy
mNRuv4yRLhbRItIJVVju9H0CAFQKo52udhsNJJ2lsTm0/NfslLvyWNj+Gq74a9NL
hK89uVfQUGedQ8oXoHVKQCQ10SmjTcySomfN32k/DVEFzg7jnSIyeKbrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiKYyub8oBM3BvcLYR0WeB/q4LDMB8GA1UdIwQY
MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct
N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm
LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVARnwrX
hVyCeGXZxtq6a/uZ+PS0n1daeCiFv74bi3ikEVaK6Ir2u2qWADvcwqCz2j442Qht
zPS9VdtEm+vkAc1AeRKTAtE7C0VuVhLgd5IkIEZnQYb6YEkXh2jdrXVbkVaBim00
ciT0T2UUm7Rihf4ldAP8tKWuf5pmsaCa8qUpxJzOyZLRH+9qN1NyWbQt1SkmgnDz
/V42pljLMg6zLb6MIdk8OMpUfW1ow8rBHLMsG8WvGE7UbNkYH/e/keZ7I5w33ydg
ddLW5DAKKaaqeYvI6kM24KS9hEzkH4gUqgLnQObUDwHwyroXu4iUSeglDqMNo846
HHG8RHSvdsattw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:18:32 2025 by rpki-client