Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: fsVCkeBp9gKosS/rCKDdpNiNp+tUz7iOoVWMfaecEA8=
Subject key identifier: 6A:76:05:0F:64:3E:73:64:8A:E5:7F:D2:83:81:F0:F8:D3:AB:E7:C4
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019922FA2F36D1F343DA25B876323FC3C6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: CgHoWyOqaC+VzBQFAtgtiAgux7ZEuTcCZ60cwoKTfVA=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2f:36:d1:f3:43:da:25:b8:76:32:3f:c3:c6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=6a76050f643e73648ae57fd28381f0f8d3abe7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ec:8d:a3:b8:25:86:af:1c:65:83:4e:9c:e1:
82:79:3e:cb:88:b4:2b:c0:0b:d5:3f:50:16:7b:9c:
6c:0e:c3:de:dd:01:b3:d9:a3:92:d5:ac:c5:f2:d8:
e8:28:8e:91:be:2b:0a:f2:4e:e8:d2:fa:62:a2:2a:
c7:dc:1d:eb:14:11:0b:80:aa:ab:9e:14:37:bf:74:
28:8b:6f:b1:76:ef:b9:f8:4a:00:c5:d6:6a:95:8a:
7b:cf:71:51:d4:48:52:51:fc:70:b7:d6:d6:41:ee:
5a:dc:bd:e9:e3:eb:53:ef:5f:55:47:ab:56:4e:f2:
94:5f:79:5d:8c:46:93:ca:00:ef:b0:27:36:40:7c:
e2:aa:bc:01:07:d8:a7:aa:18:ad:a0:01:64:8f:5c:
3e:13:73:af:b7:b8:c8:65:05:06:c8:34:8b:89:f5:
2a:20:cb:52:3f:01:ce:b4:31:0b:71:ec:37:9a:65:
78:ec:12:1c:dd:68:e5:b0:2f:64:1e:35:92:88:23:
71:8b:c2:cc:9c:2d:9f:9d:6a:db:8f:79:fb:58:b9:
3b:fa:8a:c0:b7:ac:1e:ef:d1:85:64:c8:ac:9c:46:
fd:12:8d:13:55:5f:60:7f:82:f6:12:95:34:d6:fa:
a4:1f:10:46:76:9d:5e:b0:47:a9:5d:30:c8:44:41:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:05:0F:64:3E:73:64:8A:E5:7F:D2:83:81:F0:F8:D3:AB:E7:C4
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:a2:95:66:46:ed:d7:70:ef:ff:c9:4d:64:bc:9b:86:af:
82:e8:bd:ba:cc:ee:f9:1e:f2:44:9e:06:50:ce:77:cb:79:45:
6b:87:a4:39:13:38:75:fc:ce:ec:1c:c9:f8:1b:8c:0a:07:d7:
3f:f7:4f:76:0e:89:a6:df:f7:7b:7c:82:17:c0:a1:54:9f:8d:
a4:7f:6e:48:88:f7:f6:dd:83:fd:b7:63:fc:0b:9e:20:04:d9:
09:ef:91:68:82:b1:5d:57:ba:13:51:58:d8:01:1c:e3:cc:81:
1d:6e:af:01:51:b3:0e:3d:ae:5c:88:53:1f:11:3b:ce:5b:a2:
fd:93:4e:74:39:89:77:3c:af:c4:48:20:0d:0e:1a:32:1a:cc:
4d:b3:96:cd:2d:79:d2:f9:97:c6:96:a9:75:aa:d7:18:c4:14:
20:f4:c0:79:c4:54:bb:08:52:96:09:5c:18:6b:70:f7:ce:1b:
ad:12:ba:1c:20:ea:de:8d:73:b7:12:e7:ca:ae:d1:db:94:62:
a2:e6:31:01:b1:61:b3:58:8a:9e:7f:47:12:d7:ce:06:6d:c7:
cd:5f:99:dd:82:63:f1:26:36:18:11:62:71:da:08:58:89:b6:
9b:bf:e9:34:fb:f3:5a:a0:4c:4b:a2:c0:9d:34:c6:2e:cc:12:
fb:c2:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client