Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: p2ehfQdcgA9hy178g3xhoG8XCI/lAo3isOfCOzuf0W0=
Subject key identifier: 3B:C5:80:41:43:51:0D:4D:BD:7A:95:93:31:31:A1:30:BA:88:0A:FB
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019827EC0A2749F9BBC8FCC66023525CDC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 15F2
Signing time: Sun 20 Jul 2025 13:00:37 +0000
Manifest this update: Sun 20 Jul 2025 13:00:37 +0000
Manifest next update: Mon 21 Jul 2025 13:00:37 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: Fag+10wU2lIivydkFHOSdgPpD2PeUX40QXhIUkPO72w=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:0a:27:49:f9:bb:c8:fc:c6:60:23:52:5c:dc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jul 20 13:00:37 2025 GMT
Not After : Jul 21 13:00:37 2025 GMT
Subject: CN=3bc5804143510d4dbd7a95933131a130ba880afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:7c:10:3f:dc:41:6c:ac:50:c3:5b:09:0e:
63:36:a2:d8:0e:cd:ed:8d:32:7f:d8:dd:e6:04:ea:
5e:7a:46:21:79:9a:bb:87:7c:1a:48:19:74:6f:09:
0b:e3:6e:e7:64:39:24:6d:ef:c8:12:34:aa:15:23:
ae:3d:8e:41:aa:36:dc:77:a9:eb:1f:55:eb:fb:eb:
5a:f4:d1:b5:37:29:9d:39:a0:3a:4e:68:99:28:7f:
62:cd:2a:40:f2:b9:9d:7e:19:c8:28:ce:40:33:13:
f5:ee:8a:a3:6b:c6:19:62:4d:5a:79:93:94:c4:12:
0e:67:09:06:9c:ba:5c:64:8f:c7:5c:8c:42:af:bc:
2b:c0:49:d2:a6:ce:52:50:b7:e0:35:fd:a5:1f:17:
53:c9:0e:8b:14:7d:91:a3:8f:e3:20:71:fd:34:24:
c2:bd:10:d7:dc:4b:88:9e:f5:ce:06:92:c8:75:99:
2a:8b:32:d1:54:87:98:c8:70:8a:ab:9b:92:b9:85:
ad:e8:aa:35:3d:e8:a6:4c:dd:97:29:67:ff:92:73:
58:ba:ff:1f:73:50:76:d5:3e:f8:b1:51:3e:d9:07:
c7:05:52:01:be:20:32:b3:f0:d9:ef:e0:7a:0b:af:
fb:4e:57:61:da:5e:78:72:51:97:3d:22:5d:4a:7a:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:80:41:43:51:0D:4D:BD:7A:95:93:31:31:A1:30:BA:88:0A:FB
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bf:92:84:e8:fa:cd:66:6e:ce:a3:47:d9:eb:cc:79:a8:ca:
a1:a6:03:be:23:e6:9c:21:a2:2e:99:25:55:2a:19:5b:f0:e9:
c4:63:a5:90:23:9d:b6:ae:dc:d5:5f:8c:0a:c2:cd:f7:0a:ef:
4a:da:eb:cc:ce:c4:d4:ec:c8:33:5f:f9:8e:eb:20:45:e8:91:
32:43:57:19:ac:c1:f7:7f:73:92:d7:fb:e2:2f:13:c4:8a:8c:
9c:fa:6f:ea:d8:99:f5:58:f1:9e:72:1f:3d:6d:48:46:b0:8b:
b6:7d:ab:32:74:52:d2:aa:44:c5:1e:23:91:6c:96:b4:44:d5:
e4:5b:76:85:24:71:e8:a0:c6:f5:41:25:75:3a:93:6d:8d:00:
1e:2c:5c:24:56:2f:95:b1:43:3f:1c:eb:ff:56:12:56:1b:9c:
4b:1c:b1:63:65:c9:6d:b7:54:e5:69:17:67:9e:29:c4:4b:ed:
9c:1c:db:bd:34:79:d6:88:5b:d7:99:fe:72:e1:8b:13:17:65:
c7:b5:ef:20:70:90:ec:b9:42:3b:f9:ac:74:cf:6a:fb:ba:93:
0e:70:2a:4e:11:03:a7:98:e4:57:9a:0a:c6:d1:e5:48:3d:5c:
02:41:8a:6a:0c:f0:4f:f6:1c:0c:c3:d9:fb:48:a9:c9:c4:86:
24:15:37:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7AonSfm7yPzGYCNSXNyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh
YzY2NTQwHhcNMjUwNzIwMTMwMDM3WhcNMjUwNzIxMTMwMDM3WjAzMTEwLwYDVQQD
EygzYmM1ODA0MTQzNTEwZDRkYmQ3YTk1OTMzMTMxYTEzMGJhODgwYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8d8ED/cQWysUMNbCQ5jNqLYDs3t
jTJ/2N3mBOpeekYheZq7h3waSBl0bwkL427nZDkkbe/IEjSqFSOuPY5Bqjbcd6nr
H1Xr++ta9NG1NymdOaA6TmiZKH9izSpA8rmdfhnIKM5AMxP17oqja8YZYk1aeZOU
xBIOZwkGnLpcZI/HXIxCr7wrwEnSps5SULfgNf2lHxdTyQ6LFH2Ro4/jIHH9NCTC
vRDX3EuInvXOBpLIdZkqizLRVIeYyHCKq5uSuYWt6Ko1PeimTN2XKWf/knNYuv8f
c1B21T74sVE+2QfHBVIBviAys/DZ7+B6C6/7Tldh2l54clGXPSJdSnqyawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvFgEFDUQ1NvXqVkzExoTC6iAr7MB8GA1UdIwQY
MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt
OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0
LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAab+ShOj6
zWZuzqNH2evMeajKoaYDviPmnCGiLpklVSoZW/DpxGOlkCOdtq7c1V+MCsLN9wrv
StrrzM7E1OzIM1/5jusgReiRMkNXGazB939zktf74i8TxIqMnPpv6tiZ9VjxnnIf
PW1IRrCLtn2rMnRS0qpExR4jkWyWtETV5Ft2hSRx6KDG9UEldTqTbY0AHixcJFYv
lbFDPxzr/1YSVhucSxyxY2XJbbdU5WkXZ54pxEvtnBzbvTR51ohb15n+cuGLExdl
x7XvIHCQ7LlCO/msdM9q+7qTDnAqThEDp5jkV5oKxtHlSD1cAkGKagzwT/YcDMPZ
+0ipycSGJBU3pg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:33 2025 by rpki-client