Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: s23vcOIuQJT93jBi7gZx8hTfxmp+Ks9kK3SewAYA3lM=
Subject key identifier: 45:BD:31:45:D3:AC:42:0D:F7:68:26:12:63:64:15:AF:65:05:E4:E8
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01973685C901C1A8F2A950749699E32A25C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1575
Signing time: Tue 03 Jun 2025 16:00:26 +0000
Manifest this update: Tue 03 Jun 2025 16:00:26 +0000
Manifest next update: Wed 04 Jun 2025 16:00:26 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: r9Ux2vikZm9fv8Fv/vkCfJ0QlTlK5LKIiNkAJtMDhJ8=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:85:c9:01:c1:a8:f2:a9:50:74:96:99:e3:2a:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jun 3 16:00:26 2025 GMT
Not After : Jun 4 16:00:26 2025 GMT
Subject: CN=45bd3145d3ac420df7682612636415af6505e4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:0b:d7:6a:be:be:21:48:b4:15:56:5b:e4:
d4:17:ac:30:61:b1:73:67:3f:3a:65:e8:af:86:42:
95:bb:24:60:e5:fe:96:47:ed:c6:51:5b:ba:58:e5:
7c:c7:08:9a:66:72:ca:c3:19:fc:11:5e:a9:1f:6f:
42:0a:05:67:2f:a5:1b:97:4f:ef:51:d3:78:ab:6c:
06:bd:9f:dd:b2:83:86:0a:57:8e:e4:16:f6:9b:ef:
7f:49:5b:87:54:c2:d2:79:24:74:16:62:06:61:54:
b6:7e:79:30:96:9c:07:ee:94:12:8f:7b:4b:b7:b9:
40:98:cd:63:a2:dd:21:63:c8:4c:6e:16:16:4b:d2:
18:a6:64:dc:06:57:a6:a8:44:93:7f:27:46:9f:ed:
f6:b3:27:c4:0f:c3:4b:5f:a4:d2:52:cd:db:b7:68:
48:5c:79:e7:61:38:79:ad:10:91:01:ae:22:bd:d7:
05:a5:51:4e:c4:58:5d:8d:31:ac:41:94:24:99:6e:
00:e5:0a:02:79:bd:45:f1:b6:56:86:fc:08:57:99:
5d:c0:1c:e7:29:95:08:b1:fa:88:47:53:fd:aa:3f:
39:46:c0:28:11:f6:a0:0f:2d:48:49:66:bf:af:b0:
c9:50:7c:2e:3c:5b:b6:30:46:db:e8:9e:e7:93:59:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BD:31:45:D3:AC:42:0D:F7:68:26:12:63:64:15:AF:65:05:E4:E8
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:a2:c0:54:b9:58:27:6a:9a:2b:d0:c0:e9:5a:87:39:0a:
98:e7:5d:46:87:99:37:c2:e7:f2:55:6c:89:0c:59:a4:b3:7a:
85:00:2f:ac:61:b3:c0:13:e9:41:8b:a6:cf:0e:ad:8e:79:ac:
fa:06:6b:fa:92:dd:0c:89:ca:ed:55:6f:45:c4:27:7a:f4:6b:
60:b4:c4:32:14:2e:ee:af:72:4a:ed:58:2d:15:8f:8a:85:01:
69:a0:6c:31:f9:a4:86:9b:75:ae:37:fd:33:41:46:04:b8:cc:
8a:a0:a9:c4:38:a5:fd:97:dd:7f:ed:60:46:2e:e8:61:18:54:
b0:23:d5:17:02:f5:10:b1:36:48:bd:c7:a3:93:13:c2:1b:c8:
13:cc:0f:ac:da:cb:f2:d8:e2:62:4e:58:76:44:fa:d9:96:a9:
f5:ef:5a:7e:ca:ac:76:54:e0:26:ce:48:60:0c:4d:01:45:65:
a1:61:90:f9:95:1f:dc:b2:8f:a5:75:b1:00:63:2f:32:7c:97:
1b:b4:5e:ed:34:43:69:9c:c6:48:d1:59:58:aa:45:e3:b2:86:
9e:f2:5f:d1:98:c0:0e:17:e7:4b:62:dc:53:e5:fa:db:1f:e5:
3f:8b:24:50:ce:95:d8:c3:a2:ec:6c:59:a4:dc:c5:6d:36:90:
0b:46:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:58:27 2025 by rpki-client