Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: 9HQF8imlZq9m81RrA2xNbqYz0pzU/QJZM/p0LLlvwv4=
Subject key identifier: C4:FA:0A:1E:B7:92:4E:85:E6:CC:12:CF:D6:95:95:CD:2F:6D:EE:30
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 01974E202AB0C164157BCC74B77416FADF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 12C3
Signing time: Sun 08 Jun 2025 06:00:20 +0000
Manifest this update: Sun 08 Jun 2025 06:00:20 +0000
Manifest next update: Mon 09 Jun 2025 06:00:20 +0000
Files and hashes: 1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: G9Skz+XAGs6d7lr6Ix8O9xCeyfNwgJVl0sIXfwko5po=)
4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:2a:b0:c1:64:15:7b:cc:74:b7:74:16:fa:df:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Jun 8 06:00:20 2025 GMT
Not After : Jun 9 06:00:20 2025 GMT
Subject: CN=c4fa0a1eb7924e85e6cc12cfd69595cd2f6dee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:db:a8:8c:be:05:a0:fe:f7:7b:37:77:d0:
3a:83:d5:d5:d9:f5:44:84:28:24:fa:29:0e:34:d3:
45:ec:75:1d:41:d6:53:ad:50:02:a9:36:d4:c2:6e:
fd:26:3e:35:5f:0b:b7:02:d2:92:f8:b8:aa:34:cd:
00:d4:c8:12:28:18:40:9b:00:ed:73:06:4b:75:1f:
2c:0a:51:8f:ff:1d:1f:81:fe:9b:25:6c:e2:54:24:
b4:72:fa:6a:c9:81:bc:80:6d:f1:e7:2b:33:28:4e:
d6:7f:d1:9e:95:31:cb:1e:02:e9:b3:4b:83:fa:20:
a1:8f:41:09:67:21:13:70:21:0d:9f:cc:d8:28:42:
0b:62:3e:ee:d5:6d:ae:a6:85:1c:bf:92:87:f9:71:
19:fc:25:53:c6:fe:1f:35:94:96:15:8c:06:c7:5e:
48:ee:8c:d0:e3:b6:8f:20:df:9d:49:43:da:7e:41:
32:ac:05:cd:0a:31:f9:a6:78:97:7b:cf:f7:97:64:
12:27:11:f6:db:94:10:1a:50:47:a2:93:a2:e0:ca:
d4:e0:8f:de:5d:97:07:7a:9a:33:f7:c6:13:8b:fe:
bd:01:03:d6:33:e3:63:c8:97:fa:c6:fa:cb:85:9b:
8c:76:13:02:aa:79:2b:d1:4d:cf:fd:c6:5c:81:01:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:0A:1E:B7:92:4E:85:E6:CC:12:CF:D6:95:95:CD:2F:6D:EE:30
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:ff:06:d9:d8:a9:cf:f5:0f:a4:d7:7f:2a:5d:49:c9:50:
2b:93:cd:7f:98:4d:28:5b:dc:82:01:f4:0f:f6:42:a9:aa:42:
9b:2c:32:74:47:68:cb:74:eb:f1:17:f8:23:6f:81:7d:fd:c9:
ff:b7:72:1a:45:6c:f7:2e:c0:34:ed:c9:a4:da:b2:aa:b6:e3:
49:88:8f:2a:e6:51:13:ce:e8:38:b7:2b:48:7c:20:57:96:c5:
b2:1e:a1:65:df:6f:6f:0e:c9:a1:6e:98:bc:1a:3e:a7:f7:92:
74:47:e4:3a:b0:68:67:e0:bc:23:a1:cb:af:9b:90:e1:f4:58:
ae:0c:86:d8:60:d4:5d:76:0e:ad:69:4c:8a:4f:94:7d:60:9e:
7c:db:fd:e5:cd:a0:47:21:2b:53:ac:c0:96:eb:01:50:76:39:
0b:4d:57:38:7b:a0:9f:7a:76:6c:c2:2d:7c:04:e0:8f:eb:16:
99:73:81:a9:e5:33:0e:c3:09:a8:63:50:98:57:f0:65:4f:a2:
4d:08:f6:8f:bb:8c:b9:6a:98:d2:b6:bb:bb:aa:60:d7:56:cc:
66:4d:bb:9c:af:fe:77:e5:5f:04:e6:0f:77:e0:59:d0:16:96:
a4:79:44:96:c5:13:39:b9:27:60:53:d6:cf:e9:3f:f9:50:4d:
03:68:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:20 2025 by rpki-client