Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: moOXvcjvywJp8Yzs7L0GXo8zeh/Pk6dZJ+i9+Sck4mM=
Subject key identifier: F3:8D:85:18:E8:AC:17:A2:D4:41:35:BD:E0:E6:53:E5:DF:BB:2A:25
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01960C7A63CA7E3C8D8923D65E6FED10C444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 24
Signing time: Sun 06 Apr 2025 19:01:09 +0000
Manifest this update: Sun 06 Apr 2025 19:01:09 +0000
Manifest next update: Mon 07 Apr 2025 19:01:09 +0000
Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: 9EW9LPMhQDNrMs5C4I9Df6jeKSKs/arY7NcjoZn2WQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:7a:63:ca:7e:3c:8d:89:23:d6:5e:6f:ed:10:c4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Apr 6 19:01:09 2025 GMT
Not After : Apr 7 19:01:09 2025 GMT
Subject: CN=f38d8518e8ac17a2d44135bde0e653e5dfbb2a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cc:74:75:0e:5a:c4:f2:76:bb:c4:3d:ec:a9:
40:8b:6c:ea:e2:99:a8:2f:ef:1a:8b:a1:c6:d6:fa:
63:97:7b:d9:4d:39:48:e9:a2:41:35:91:66:08:7c:
69:a8:f2:a2:62:70:ac:a5:02:6a:d4:27:3e:48:1e:
ba:48:f9:86:29:80:a9:32:17:23:8b:53:5e:e5:e6:
70:09:31:ba:2a:6c:7e:66:4d:f4:c5:80:ce:60:81:
1b:c9:3b:f4:af:02:8f:61:55:d6:a6:d1:30:74:67:
2e:b9:fb:32:28:10:8d:0f:62:86:2d:72:6d:77:f3:
9e:e8:92:d9:f5:17:fd:b1:44:37:3e:0b:a0:ef:89:
9e:dd:a7:0a:20:49:01:b9:a1:59:65:d4:fe:de:a8:
30:9f:bf:3d:95:fd:c3:a5:a0:d4:46:4c:f9:29:20:
f8:12:5b:dc:d0:65:dd:bd:f0:eb:0b:4c:62:96:91:
c4:7e:b7:52:e6:c5:77:6f:76:3b:67:d3:92:d0:f5:
32:4f:29:41:07:e0:53:f2:04:26:35:b9:8a:11:3b:
93:7b:df:53:3c:15:c3:47:0f:d9:53:d8:d7:6e:4f:
00:5a:12:67:73:8a:d7:48:90:a7:dc:fc:ea:8f:dc:
fe:21:1b:b5:50:2c:55:c1:bb:23:1b:b1:28:5a:b7:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:85:18:E8:AC:17:A2:D4:41:35:BD:E0:E6:53:E5:DF:BB:2A:25
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:b5:34:72:30:e6:04:e5:9d:cb:47:15:f5:15:b3:4f:e9:
a6:4f:a4:67:18:55:ab:a9:22:3d:88:36:8a:6e:4b:fb:6d:72:
72:54:ac:16:89:9a:94:d9:48:b5:6b:b3:9e:4c:cd:5f:93:cc:
b2:e3:b2:f9:ec:b6:67:68:63:6c:24:55:66:f9:93:f3:b9:7a:
55:da:04:42:24:9e:b2:86:e1:b7:3e:5c:8b:53:77:f5:e6:cd:
d2:65:7b:da:0b:f7:01:c7:f3:0d:1b:b7:dc:b1:17:da:cf:f7:
7b:56:c1:cb:e6:ce:58:22:f0:37:65:28:4b:91:c8:84:22:d4:
4a:f2:a0:2a:71:32:30:18:fc:bc:41:73:df:43:e2:c2:4f:7b:
24:e5:c8:a0:44:62:3a:ab:08:57:dd:72:19:7a:b6:4a:29:b0:
d9:ef:97:ec:ab:ee:e7:c3:9e:a7:98:17:96:65:69:0d:56:36:
c8:8a:97:15:49:d7:b5:98:8b:a7:b6:d5:11:7d:80:be:f1:1c:
11:6a:15:e8:5f:97:d2:0f:0c:4f:49:9a:c5:85:99:e5:62:70:
e5:fb:45:d4:ee:cd:36:4c:29:90:8b:24:72:d5:2a:eb:1c:19:
cf:bb:d0:4c:19:38:63:8a:d1:57:41:45:cd:27:b2:22:72:9f:
32:41:7f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYMemPKfjyNiSPWXm/tEMREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzhiZjFjYzEzODE2NzgwMzhlZjVkYTY3NjQyMzk4ZTNk
OTgxOWYwHhcNMjUwNDA2MTkwMTA5WhcNMjUwNDA3MTkwMTA5WjAzMTEwLwYDVQQD
EyhmMzhkODUxOGU4YWMxN2EyZDQ0MTM1YmRlMGU2NTNlNWRmYmIyYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68x0dQ5axPJ2u8Q97KlAi2zq4pmo
L+8ai6HG1vpjl3vZTTlI6aJBNZFmCHxpqPKiYnCspQJq1Cc+SB66SPmGKYCpMhcj
i1Ne5eZwCTG6Kmx+Zk30xYDOYIEbyTv0rwKPYVXWptEwdGcuufsyKBCND2KGLXJt
d/Oe6JLZ9Rf9sUQ3Pgug74me3acKIEkBuaFZZdT+3qgwn789lf3DpaDURkz5KSD4
Elvc0GXdvfDrC0xilpHEfrdS5sV3b3Y7Z9OS0PUyTylBB+BT8gQmNbmKETuTe99T
PBXDRw/ZU9jXbk8AWhJnc4rXSJCn3Pzqj9z+IRu1UCxVwbsjG7EoWrc9LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPONhRjorBei1EE1veDmU+XfuyolMB8GA1UdIwQY
MBaAFIc4vxzBOBZ4A4712mdkI5jj2YGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmIt
NTFmNzNjZDEyNWJmLzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmItNTFmNzNjZDEyNWJm
LzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3y1NHIw
5gTlnctHFfUVs0/ppk+kZxhVq6kiPYg2im5L+21yclSsFomalNlItWuznkzNX5PM
suOy+ey2Z2hjbCRVZvmT87l6VdoEQiSesobhtz5ci1N39ebN0mV72gv3AcfzDRu3
3LEX2s/3e1bBy+bOWCLwN2UoS5HIhCLUSvKgKnEyMBj8vEFz30Piwk97JOXIoERi
OqsIV91yGXq2Simw2e+X7Kvu58Oep5gXlmVpDVY2yIqXFUnXtZiLp7bVEX2AvvEc
EWoV6F+X0g8MT0maxYWZ5WJw5ftF1O7NNkwpkIskctUq6xwZz7vQTBk4Y4rRV0FF
zSeyInKfMkF/Aw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:04 2025 by rpki-client