Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: pfCfLSXj6jVLyUw2pR9UcwYZicRqdIGMyCD2qpGQaf4=
Subject key identifier: 67:37:6E:19:91:54:5C:DD:79:BF:C0:A7:44:CB:2D:6F:6C:72:DD:BC
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 019A706E897A50505B0AE4A0F81B294D71A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 026A
Signing time: Tue 11 Nov 2025 01:01:23 +0000
Manifest this update: Tue 11 Nov 2025 01:01:23 +0000
Manifest next update: Wed 12 Nov 2025 01:01:23 +0000
Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: vtOC5pDqC+WuQHIpqi1plfgrtyIanmTGUgdBuyuPZrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:89:7a:50:50:5b:0a:e4:a0:f8:1b:29:4d:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Nov 11 01:01:23 2025 GMT
Not After : Nov 12 01:01:23 2025 GMT
Subject: CN=67376e1991545cdd79bfc0a744cb2d6f6c72ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:2f:84:94:3c:98:8f:2a:38:96:82:bd:41:
fa:99:bd:0e:e0:d8:e0:5f:80:90:ee:14:f2:6d:e4:
60:9a:fb:63:21:ec:ec:74:20:d3:77:be:70:eb:b7:
8f:40:33:bf:3d:97:12:d6:44:71:7b:c1:26:22:48:
e9:b9:39:05:43:14:c3:9e:ec:36:75:87:8d:52:f9:
5e:91:e7:73:2b:eb:34:69:8a:8f:8a:a1:a9:98:a6:
f5:92:65:eb:af:84:6d:60:1f:99:f6:48:65:35:99:
52:9e:4f:6b:91:89:a7:d9:45:86:dd:f1:53:04:d5:
ae:7d:cb:04:f3:95:56:1a:47:ee:4f:ec:e2:a8:6a:
ba:25:d2:2a:f5:d8:24:1f:28:d7:72:08:b8:7b:15:
39:c8:c7:af:69:bf:f8:7b:91:69:8a:3a:f1:2a:f3:
44:b4:6b:34:85:76:a0:6c:56:58:1e:83:42:9c:3d:
dd:b8:09:23:f0:63:25:fa:a4:56:d6:cb:8c:9b:e2:
0c:db:dd:67:01:67:df:7c:8c:7b:5c:39:a8:6f:89:
b4:58:e6:b2:d9:3a:f5:1e:17:32:54:56:f6:20:3e:
95:e2:ec:fd:81:6c:7e:6b:ae:0d:6c:07:0f:bf:33:
4c:c2:ff:7a:2f:74:cd:39:c0:66:7a:72:22:78:86:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:6E:19:91:54:5C:DD:79:BF:C0:A7:44:CB:2D:6F:6C:72:DD:BC
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ca:47:a5:2a:79:fe:36:88:8a:ff:7c:1c:4e:73:53:f1:7e:
8e:95:a8:27:9d:81:b7:ad:58:cf:4f:7e:51:d9:25:68:00:ee:
4e:20:ca:9c:58:a6:50:78:e0:27:98:10:ee:0f:e4:be:48:73:
c7:6e:b2:2a:3a:62:79:c3:56:e4:11:a4:b4:db:65:4f:65:e0:
37:0e:15:23:4e:db:c3:58:8c:12:6e:86:f9:da:bc:15:9e:c4:
8e:8f:b0:84:84:9f:d1:db:4e:f6:e1:84:ee:0b:27:51:cc:ca:
2e:9f:e3:32:71:9f:ed:91:3a:f5:db:a7:5a:f5:2c:56:b8:b7:
86:1b:d4:c9:33:7c:32:44:87:12:93:58:2c:60:65:d1:e6:d4:
b5:ac:31:d5:ac:de:e7:87:e9:b9:f0:8b:98:ab:7a:65:ca:d9:
7c:72:d3:27:cc:19:dc:7b:a4:0d:7b:d2:67:ca:22:14:e7:07:
62:31:d1:17:bc:8c:68:98:99:18:76:7a:44:e1:3e:8e:01:e2:
d3:1e:e8:1d:1d:77:dc:70:cf:2b:14:d1:7d:d7:fe:77:cf:be:
e3:e4:ef:0a:23:00:91:a0:4f:75:b7:98:34:10:a7:04:d9:2d:
97:d0:01:d7:ee:2e:e7:d8:b2:a3:5c:64:d3:36:f2:78:f2:03:
a9:fd:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client