Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: B+05f/8dV/10OlL9qUJfMSQGysmqBmTF7VDkbXqlDBE=
Subject key identifier: 4B:19:ED:F3:B2:E9:15:5B:33:58:C9:B8:0F:BF:F0:B8:7B:E0:D5:F1
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 019750EAB420B3A80E98A965E0AE772827B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: CC
Signing time: Sun 08 Jun 2025 19:00:48 +0000
Manifest this update: Sun 08 Jun 2025 19:00:48 +0000
Manifest next update: Mon 09 Jun 2025 19:00:48 +0000
Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: nfHQs4iQJga6bAtENApk4cLZDZGRI7lMODiQ9Zxul0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:b4:20:b3:a8:0e:98:a9:65:e0:ae:77:28:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Jun 8 19:00:48 2025 GMT
Not After : Jun 9 19:00:48 2025 GMT
Subject: CN=4b19edf3b2e9155b3358c9b80fbff0b87be0d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:71:61:29:b1:40:ee:de:bb:72:8c:28:42:
d7:6d:f6:9e:ea:a4:df:b6:e3:81:61:4a:6b:75:ec:
47:23:2b:00:92:d2:35:7e:f8:fc:af:3e:87:6c:06:
6b:4a:00:00:d4:12:66:44:54:20:37:fe:ba:c3:10:
25:6e:2e:7e:7c:e4:e9:8f:97:17:a1:c9:14:30:cb:
66:fe:c3:9e:cb:fa:70:6e:70:c6:40:42:c5:34:06:
c9:f0:42:1f:bb:a4:dd:ed:19:6c:4a:23:14:30:de:
9e:50:12:04:a7:0f:cf:de:bd:f3:75:4b:cb:b2:f3:
8b:80:10:0a:a5:6f:36:3c:70:62:9a:73:fa:85:0f:
3d:b8:4d:8b:4d:4f:63:5b:2b:f9:63:51:49:77:5d:
21:cb:0b:f4:4a:ad:07:f8:af:9b:db:1d:63:1f:4b:
c9:c7:ae:96:55:f1:aa:1b:3f:a4:e1:02:d9:23:e3:
4a:dc:5c:d9:9f:45:93:51:3c:3c:54:c6:11:20:7f:
56:72:0c:c3:23:5f:71:a8:42:b0:64:47:31:78:47:
87:cd:9b:d1:26:af:fc:7c:cf:c9:81:4d:c3:10:9a:
17:e1:7e:77:ae:5a:cf:3a:20:ae:6a:5b:59:bf:91:
43:30:33:85:83:f1:00:95:46:13:b5:5f:c4:e0:16:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:ED:F3:B2:E9:15:5B:33:58:C9:B8:0F:BF:F0:B8:7B:E0:D5:F1
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:35:0a:f4:f1:15:18:6c:da:c2:af:9c:14:23:d0:ee:5b:83:
cf:36:dd:91:78:2e:11:69:58:a8:f5:7b:05:e2:59:80:da:74:
b6:49:f2:b5:8c:7c:16:9a:07:e8:c0:e9:d4:d9:21:01:b0:c5:
da:8f:d8:16:dc:36:35:6d:e6:e8:74:c1:6d:bb:28:63:8b:6d:
dc:7a:b8:bd:7f:be:c5:5d:6b:07:8f:00:00:c1:46:23:2c:94:
a7:d0:5b:41:03:92:f1:3a:95:10:76:9d:7a:84:38:0d:10:d7:
8d:45:f8:ae:b3:ca:12:cc:7b:17:ce:40:82:38:3a:9b:5d:61:
49:87:34:48:ae:d9:27:7d:90:3c:73:00:1d:6a:95:6c:1e:9b:
12:3a:cf:71:bd:58:cf:79:59:87:16:ce:72:3d:8e:70:1a:9d:
0f:bd:58:f8:fd:1c:db:51:b3:cd:6d:d1:e2:29:c7:c1:cc:64:
e6:7f:1e:3b:db:8a:5a:ec:25:6e:4a:86:f3:5f:d2:87:aa:49:
9c:9b:22:31:2f:80:d6:aa:ab:06:bd:be:3b:d4:27:6c:83:ed:
e0:fa:34:da:fb:5b:fb:ed:90:cb:57:9a:99:58:c5:78:4b:50:
b1:c3:0e:78:b4:79:f6:dc:e8:15:7b:e9:6f:a6:21:5e:9e:24:
39:f7:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:06 2025 by rpki-client