Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: gofWsSoWNc6JMuyoSnb6FqiSxUoJejWmpOJzhE7HTgU=
Subject key identifier: 35:24:AD:A7:5B:D5:50:ED:EB:9A:DD:B8:A7:50:68:61:CE:85:0C:B2
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019930EC687E155D51BAEFD9E7A967E5657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 13BD
Signing time: Wed 10 Sep 2025 00:00:23 +0000
Manifest this update: Wed 10 Sep 2025 00:00:23 +0000
Manifest next update: Thu 11 Sep 2025 00:00:23 +0000
Files and hashes: 1: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
2: DYgC_wXxnEgJuH-cACU484oZ2pE.roa (hash: jFVNUxIOqtUEhIDn4xuUsDyMe5nXxi2iJIXpfO1w0VM=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: gsDvyYZd8MbKmMHqyGrrN9JcNloALd7OBi2GTIY+2hg=)
4: oU9vngXlBh9qS58cidJgmaut8mI.roa (hash: 81xEhNpA4axjgpY7GYYzc5dvarYHwCL8rkYCGoLgAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:ec:68:7e:15:5d:51:ba:ef:d9:e7:a9:67:e5:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Sep 10 00:00:23 2025 GMT
Not After : Sep 11 00:00:23 2025 GMT
Subject: CN=3524ada75bd550edeb9addb8a7506861ce850cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:e6:97:bb:ae:84:29:f7:d8:f4:d4:f8:eb:
ff:3a:31:55:8d:48:24:df:21:85:38:65:3d:68:04:
82:eb:96:7d:b5:f6:41:32:c9:a4:fc:cf:c3:e0:a7:
8a:75:9e:1e:9a:0b:4e:5f:75:6a:a4:5a:1f:5a:52:
43:60:cb:69:05:e7:cd:95:76:09:e8:b2:df:d9:00:
9f:7c:78:59:9b:2f:6b:52:75:6f:4f:32:60:59:c3:
5b:1c:4d:ad:c1:1b:04:d4:09:36:ad:f5:2a:1e:47:
34:2e:4f:58:df:1f:22:76:11:24:f8:ab:c9:eb:c9:
6d:e6:df:ae:9c:1f:48:4c:0c:25:89:03:b6:a4:f6:
fe:fa:be:73:e2:93:55:ea:7c:74:17:5d:b8:c4:3d:
37:0b:d5:13:04:3e:83:29:48:ef:13:0f:10:e2:44:
fd:7b:83:0a:97:1e:ea:62:e6:b3:67:88:00:0b:50:
fe:44:27:e2:bf:7a:cc:56:40:9b:a5:1a:cc:72:c7:
ca:f0:b0:08:1a:d2:04:89:b1:7b:9d:b7:be:c7:01:
e5:96:e5:f3:41:db:67:bf:ee:d4:02:71:97:0e:89:
31:e7:91:5d:6a:03:56:87:2a:cf:ed:e5:7f:2d:cf:
15:aa:2c:6a:1e:2d:5e:4c:16:31:56:32:c4:58:81:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:AD:A7:5B:D5:50:ED:EB:9A:DD:B8:A7:50:68:61:CE:85:0C:B2
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:66:93:04:b1:c1:d8:a9:31:a4:0b:51:26:81:73:df:e3:a0:
58:ee:f8:7e:f7:dc:10:99:d3:4e:50:fb:9c:20:c1:4d:3b:af:
c4:8e:13:b7:8a:3c:01:18:ef:67:fd:ef:c8:23:d9:df:4c:33:
9f:17:67:86:6a:79:75:db:08:e7:f2:1d:b2:d1:d8:c7:30:e9:
0d:26:30:61:30:0d:d1:bc:98:52:e5:11:45:dd:bd:7c:ec:59:
cb:1f:b5:e2:e1:77:4c:0c:3e:e8:35:af:87:92:39:31:7a:5e:
3b:ae:c4:05:18:55:17:59:7f:3a:54:a7:60:a2:17:f2:9b:cd:
db:c2:f4:bd:da:de:90:11:8a:39:9b:04:3d:fb:cf:a6:6e:b1:
0d:57:70:32:05:28:d9:69:a9:69:17:78:e2:fa:e0:df:0e:a5:
2e:bc:d2:df:7e:77:1e:e6:f9:26:e8:8b:b2:a3:69:50:f7:7e:
5e:22:8e:76:96:b8:73:81:0f:84:3e:e0:8c:4b:74:54:7d:fa:
ec:d2:64:2e:c9:02:f4:95:d0:de:c2:15:e0:26:6e:14:73:e1:
03:6d:f4:9d:4d:39:6c:e8:7d:37:73:11:10:f0:82:b6:da:14:
11:bf:33:ad:c9:58:ab:67:a8:75:fa:6f:a8:4d:7f:9c:0f:af:
98:1a:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:05:43 2025 by rpki-client