Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: 9EB1npWsx0ycGW9IZWstA5IBmHzEpL2zbi47dK5pmSg=
Subject key identifier: 75:02:AD:95:EF:EA:3D:80:3C:D6:2D:7C:01:60:2D:68:80:6F:36:35
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019922FA44783442C3D8C421B9098553AF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 1100
Signing time: Sun 07 Sep 2025 07:00:50 +0000
Manifest this update: Sun 07 Sep 2025 07:00:50 +0000
Manifest next update: Mon 08 Sep 2025 07:00:50 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: xDvZhXGoYEA1kpzrFyLKrMB50HvjFG0NaI3EuXEthqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:44:78:34:42:c3:d8:c4:21:b9:09:85:53:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Sep 7 07:00:50 2025 GMT
Not After : Sep 8 07:00:50 2025 GMT
Subject: CN=7502ad95efea3d803cd62d7c01602d68806f3635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:4f:cb:e4:23:c7:2a:c8:dc:0e:16:f0:e9:
d3:74:fd:ce:91:03:5c:e3:ac:f0:41:5f:49:81:32:
67:8e:ea:41:27:17:83:a6:63:5e:48:f9:ff:83:ae:
7f:24:4e:9b:96:68:0f:99:02:0e:34:a4:dc:bb:a0:
71:87:c0:fe:66:5b:31:0f:91:53:b2:b1:35:d9:c3:
20:7b:eb:69:93:4d:4e:7c:48:aa:5b:3d:9c:9b:e3:
c9:e9:8c:8a:61:81:ee:92:f8:10:f0:7b:26:7f:a6:
ba:d1:c3:7c:32:b1:12:ed:a5:d4:58:e2:4e:72:c6:
ed:6b:7b:40:04:bc:ee:c4:05:0a:7f:8e:67:77:ab:
c8:3a:3a:6d:e0:2b:1c:93:5d:80:08:f5:c6:a0:72:
7b:6b:7f:0d:0a:01:27:5e:d8:38:ae:f0:0d:6b:ab:
d3:64:0c:67:0f:fb:6a:50:df:af:81:36:71:63:5f:
fc:67:c5:5b:05:14:29:04:d9:96:d1:c7:49:69:74:
a8:e1:17:04:43:44:fb:b1:0c:20:61:ec:b6:64:40:
15:ee:4f:cd:cf:15:ff:f3:09:77:4d:51:5a:3a:64:
0e:e4:a4:bd:65:ac:e8:3b:d9:13:b1:ba:9f:02:c9:
cb:9d:47:fe:ea:78:3e:00:44:95:62:8e:ee:d6:9f:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:AD:95:EF:EA:3D:80:3C:D6:2D:7C:01:60:2D:68:80:6F:36:35
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b8:6d:54:e6:62:99:86:e7:40:ac:0b:dc:21:81:b0:63:75:
b5:6f:2e:04:2c:94:11:e1:35:c1:b5:a4:1d:7e:8a:79:2d:4c:
16:c3:48:ea:a5:2e:d0:a9:8b:b1:24:4e:9b:62:08:0b:0f:79:
82:31:f6:75:d0:2a:13:97:ad:d5:48:57:95:8a:f5:b1:72:e0:
a6:cc:27:97:d4:33:07:9d:c4:c1:7f:51:e5:2d:bf:ff:f2:d6:
fa:0a:1a:0f:65:61:f9:71:bd:5c:a9:97:a8:29:c2:a9:8b:09:
d5:1c:18:0a:a5:82:48:31:4f:cc:cd:c3:a3:47:72:7c:1e:49:
c9:d4:7f:56:29:21:9d:cd:ba:14:ee:b7:31:98:93:c1:48:56:
12:a1:2f:07:32:43:4c:e1:bd:e6:8b:ff:7d:b4:14:76:37:8c:
66:3a:db:aa:68:19:3a:e5:e2:6c:b4:2f:fb:10:35:2f:18:0f:
45:c1:e3:9a:91:54:01:3c:2e:16:c6:af:0f:e5:2b:ab:e5:c3:
21:dc:95:49:45:40:6b:25:ac:c6:d3:c0:d5:d0:eb:d3:05:db:
d0:bd:f2:2e:67:ae:6f:43:ae:0d:aa:17:c0:ca:46:e4:f6:d3:
73:1f:7b:25:6c:8a:02:fb:99:9d:26:ee:fa:83:b2:ea:30:cf:
ea:67:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:29 2025 by rpki-client