Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
File: Hzspn37Z9UTXv5ALWcz4iadk30g.mft (raw, json)
Hash identifier: ieuaTgylGDh5taTq73SwP6LK7O61Uqm28KcVVLLIZuU=
Subject key identifier: FD:78:CB:C7:6C:1C:80:85:71:BD:E4:8A:79:EB:A0:A1:60:4D:B5:8D
Authority key identifier: 1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
Certificate issuer: /CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Certificate serial: 019759493069C2094DD7F1616FCE1B0B3B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 10:00:58 +0000
Manifest this update: Tue 10 Jun 2025 10:00:58 +0000
Manifest next update: Wed 11 Jun 2025 10:00:58 +0000
Files and hashes: 1: Hzspn37Z9UTXv5ALWcz4iadk30g.crl (hash: ruQ4vHFluFFcH4DyEJ8Vg7pUWyW+s4tu8r+twbrxSes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:30:69:c2:09:4d:d7:f1:61:6f:ce:1b:0b:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Validity
Not Before: Jun 10 10:00:58 2025 GMT
Not After : Jun 11 10:00:58 2025 GMT
Subject: CN=fd78cbc76c1c808571bde48a79eba0a1604db58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:08:b0:70:cd:1a:5e:b6:29:dc:0e:59:c0:
ea:45:37:3b:2a:da:5d:57:4b:16:2d:78:07:11:8f:
73:0e:a7:1a:7a:65:67:9d:7c:ba:ba:a1:93:94:7d:
9d:d1:6a:72:6c:6c:ec:c6:01:e1:94:da:6d:f3:c6:
78:ea:4c:84:e3:1b:a6:42:6e:01:6e:63:68:94:db:
e0:e6:3f:64:b1:d3:6e:14:48:68:c0:9e:a5:e6:e4:
62:20:a8:1d:7e:71:46:01:c7:6a:e4:ea:2a:3e:cb:
b0:c0:15:e3:0c:6c:7d:05:d6:93:03:ce:b7:3e:b2:
95:65:d9:21:0f:3f:b4:75:f8:33:85:eb:65:fa:df:
f5:0f:0b:07:d1:a7:ce:7e:07:9f:60:5c:04:6d:c5:
14:30:98:72:a4:8e:11:44:e6:cc:17:ee:b9:44:68:
11:31:83:8d:4f:a3:94:37:6e:b1:74:f9:48:32:60:
7a:66:6e:55:7b:d0:0a:42:e8:e1:3c:ab:7f:1b:15:
bf:da:a8:df:6a:38:69:fb:bc:d0:3e:18:93:e4:38:
41:a2:32:4d:13:49:46:8f:9e:80:ab:06:94:99:9e:
69:28:c3:7f:ff:de:bd:18:de:00:85:7c:4e:73:f2:
5a:e9:62:7e:62:29:b5:4b:89:55:98:4f:86:dd:59:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:CB:C7:6C:1C:80:85:71:BD:E4:8A:79:EB:A0:A1:60:4D:B5:8D
X509v3 Authority Key Identifier:
keyid:1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e2:65:5d:b6:9d:32:c0:d3:b5:1e:b7:34:84:2c:06:e0:87:
ad:c1:8a:07:15:c3:4f:40:b4:ee:6f:2a:6b:c5:29:0a:37:f2:
ef:aa:b1:01:0b:02:25:b6:9d:af:b7:8f:57:eb:70:21:75:23:
a6:b5:ee:4a:a0:91:89:f1:11:b3:6e:10:e4:e4:78:d9:95:08:
ca:cf:25:60:71:16:90:39:cf:bf:1e:67:d1:a5:cd:bf:ad:86:
d1:5c:78:41:a6:15:34:ea:57:6a:54:3b:d0:86:57:10:b3:89:
17:2b:6f:43:03:9c:dd:0b:a3:52:0e:f6:e3:aa:58:5d:51:b2:
ab:63:56:b9:28:88:35:47:5d:c7:d5:b7:a9:c1:5c:33:57:3d:
f3:9c:cf:ca:f2:0b:3d:de:4d:e3:fd:84:49:26:c0:fe:9c:d4:
f4:90:1f:cf:f5:22:74:cb:58:70:5d:22:1d:07:2f:d1:ee:05:
64:b6:73:f2:c8:8a:a3:8d:5b:7a:44:77:99:c6:ca:57:e0:e0:
f3:74:5c:36:d6:47:69:0f:ac:5e:7b:4d:7f:23:b4:e1:01:a2:
0e:ca:7c:f5:76:eb:a3:87:ac:17:2b:fd:50:2e:f3:17:5a:a8:
12:01:d0:14:e2:2f:6e:aa:24:59:b9:5f:53:90:df:b2:b5:a9:
ee:8b:27:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSTBpwglN1/Fhb84bCzuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2IyOTlmN2VkOWY1NDRkN2JmOTAwYjU5Y2NmODg5YTc2
NGRmNDgwHhcNMjUwNjEwMTAwMDU4WhcNMjUwNjExMTAwMDU4WjAzMTEwLwYDVQQD
EyhmZDc4Y2JjNzZjMWM4MDg1NzFiZGU0OGE3OWViYTBhMTYwNGRiNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8MIsHDNGl62KdwOWcDqRTc7Ktpd
V0sWLXgHEY9zDqcaemVnnXy6uqGTlH2d0WpybGzsxgHhlNpt88Z46kyE4xumQm4B
bmNolNvg5j9ksdNuFEhowJ6l5uRiIKgdfnFGAcdq5OoqPsuwwBXjDGx9BdaTA863
PrKVZdkhDz+0dfgzhetl+t/1DwsH0afOfgefYFwEbcUUMJhypI4RRObMF+65RGgR
MYONT6OUN26xdPlIMmB6Zm5Ve9AKQujhPKt/GxW/2qjfajhp+7zQPhiT5DhBojJN
E0lGj56AqwaUmZ5pKMN//969GN4AhXxOc/Ja6WJ+Yim1S4lVmE+G3VmPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP14y8dsHICFcb3kinnroKFgTbWNMB8GA1UdIwQY
MBaAFB87KZ9+2fVE17+QC1nM+ImnZN9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpzcG4zN1o5VVRYdjVBTFdjejRpYWRrMzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82MTQ2MzEtNjMxNC00OTMzLWE3NmQt
NzVjZGMyZDU3MjYyLzEvSHpzcG4zN1o5VVRYdjVBTFdjejRpYWRrMzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82MTQ2MzEtNjMxNC00OTMzLWE3NmQtNzVjZGMyZDU3MjYy
LzEvSHpzcG4zN1o5VVRYdjVBTFdjejRpYWRrMzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+JlXbad
MsDTtR63NIQsBuCHrcGKBxXDT0C07m8qa8UpCjfy76qxAQsCJbadr7ePV+twIXUj
prXuSqCRifERs24Q5OR42ZUIys8lYHEWkDnPvx5n0aXNv62G0Vx4QaYVNOpXalQ7
0IZXELOJFytvQwOc3QujUg7246pYXVGyq2NWuSiINUddx9W3qcFcM1c985zPyvIL
Pd5N4/2ESSbA/pzU9JAfz/UidMtYcF0iHQcv0e4FZLZz8siKo41bekR3mcbKV+Dg
83RcNtZHaQ+sXntNfyO04QGiDsp89Xbro4esFyv9UC7zF1qoEgHQFOIvbqokWblf
U5DfsrWp7osnfw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:34:48 2025 by rpki-client