Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: WoGpH2zjInr39is80inconN3zBG01SeUJxCvCkFmMn4=
Subject key identifier: 2F:F0:3E:28:D1:A0:11:79:34:54:53:CF:FF:CF:3E:D3:D8:02:96:EA
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019A1FF6999A6616118835DCBEDE571687F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 10:00:46 +0000
Manifest this update: Sun 26 Oct 2025 10:00:46 +0000
Manifest next update: Mon 27 Oct 2025 10:00:46 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: coXRIH/3/7/XNkhGvFT6slvKMg+6mOSutGh00yaIXEo=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:99:9a:66:16:11:88:35:dc:be:de:57:16:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Oct 26 10:00:46 2025 GMT
Not After : Oct 27 10:00:46 2025 GMT
Subject: CN=2ff03e28d1a01179345453cfffcf3ed3d80296ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:a4:f9:b4:3f:d3:69:68:9c:4b:3a:cb:46:
f6:7a:08:c8:93:ab:c4:eb:dd:ee:d9:bb:fa:25:2d:
00:15:9d:ec:3f:cc:19:45:10:ac:e0:54:52:92:14:
1d:a0:1b:31:c8:fb:13:86:86:b1:14:e5:4c:5e:b1:
30:02:27:f4:8f:b8:fd:e5:c1:3e:52:10:4d:d6:7a:
1d:01:27:eb:ad:05:43:63:6c:50:40:b2:5d:24:e6:
2a:6e:42:8c:a5:58:2b:9e:4b:49:2c:91:b0:3f:24:
92:63:66:e5:10:92:23:f3:60:db:c9:a3:ba:e2:3d:
c0:d7:32:37:93:cb:74:d8:79:5e:61:41:06:3f:c2:
1a:2e:e2:49:3d:f1:bf:cc:b2:fa:1d:67:4c:ec:22:
91:5e:3a:f2:dd:4a:45:f4:5f:68:0d:c6:27:f4:8f:
1d:d8:2c:86:b4:67:ed:f1:e1:5e:fe:7d:11:de:52:
84:16:50:7c:df:86:18:c6:64:f4:39:19:03:4d:66:
75:20:94:42:c8:28:75:5f:03:84:c9:eb:78:a7:bd:
38:da:45:17:c7:79:bc:d5:07:c7:27:5e:92:1f:df:
7e:87:a4:31:44:50:29:9d:f0:20:6f:3b:26:c4:f7:
ba:0d:a7:37:cb:3d:0d:06:ec:42:c0:8f:5a:48:cd:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:3E:28:D1:A0:11:79:34:54:53:CF:FF:CF:3E:D3:D8:02:96:EA
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:14:c2:51:be:e5:6b:10:59:7a:8b:91:c4:a6:b7:83:95:
a4:06:a3:62:11:e0:43:5d:0c:4f:d4:e7:2c:b4:98:e8:7d:0d:
16:00:e8:ed:dc:42:18:1e:48:c0:e1:1d:09:41:6a:64:c4:e9:
e9:04:3a:f6:fa:f6:f5:43:8b:e7:06:d3:a3:88:e3:92:7f:47:
19:84:72:4d:10:a3:e1:65:ea:84:47:83:64:fc:53:c6:30:1b:
9a:43:10:84:19:ac:e6:66:5f:67:4c:10:f4:77:fb:20:ef:57:
3c:ae:43:43:2c:21:2c:6d:c5:35:15:d9:6b:17:c6:ac:e2:d1:
8f:78:d7:cd:fc:bb:40:51:93:02:18:f2:27:e2:cb:e3:28:8d:
58:b6:d6:2e:82:17:7c:93:4d:d2:07:66:58:79:a2:ad:87:d7:
b3:ed:19:1a:c3:26:d6:5b:7f:c2:43:b0:4b:08:c2:e9:33:2e:
79:a5:c8:df:b6:1d:14:da:cb:65:b5:c4:4f:68:6b:f6:47:57:
59:fb:51:f5:78:9f:10:31:0d:6f:c5:9b:7e:59:7e:2d:72:27:
40:cd:17:0b:05:bc:69:86:ba:c2:70:64:ac:ac:3f:ce:29:4e:
73:4c:cb:27:6f:34:d4:25:9c:21:34:c9:9b:25:79:21:e5:77:
ab:cd:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:41:46 2025 by rpki-client