Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: mV87jqPBpRLSHHV1s6LgU70ARQ1LPFYVrEs9r7wytQo=
Subject key identifier: 5F:9F:0F:C7:B8:E6:02:9F:50:AA:E7:4B:14:BF:B2:95:35:A6:C1:69
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 019A2B8C63CB914E251C7AAFAD9B7A5CF695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 168D
Signing time: Tue 28 Oct 2025 16:00:12 +0000
Manifest this update: Tue 28 Oct 2025 16:00:12 +0000
Manifest next update: Wed 29 Oct 2025 16:00:12 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: dNP09MNNYCQIWTmpGqa6y9qSbDg2n3cjRRKX5x9AytU=)
2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:63:cb:91:4e:25:1c:7a:af:ad:9b:7a:5c:f6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Oct 28 16:00:12 2025 GMT
Not After : Oct 29 16:00:12 2025 GMT
Subject: CN=5f9f0fc7b8e6029f50aae74b14bfb29535a6c169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:1c:84:2d:95:62:35:3f:7c:0e:d9:3f:e7:
94:f2:9d:53:a4:00:96:93:d2:f5:fa:61:31:26:92:
20:de:cc:b3:97:e1:d6:fd:65:02:02:31:c5:d8:5b:
cc:96:ac:cb:f6:98:35:4b:5d:8e:09:81:a0:d9:02:
bd:db:3a:60:30:34:86:81:dd:b8:a9:64:3c:ea:18:
0f:b6:f5:f4:1a:b9:bb:11:e2:64:1a:dc:cf:80:20:
61:7a:21:8f:d0:29:df:8a:ae:fd:05:fa:29:22:6f:
02:ff:54:04:6f:cf:3f:74:92:55:32:72:df:3a:be:
da:14:68:11:bb:a5:86:7c:1b:e4:b7:fd:c6:94:73:
f9:c3:de:30:96:88:f8:2c:9e:23:71:18:b8:4d:fd:
15:c5:be:c9:f1:10:91:42:a8:8c:b6:29:f3:b9:29:
8b:db:12:d2:ba:20:79:ad:63:83:30:bc:c6:59:e0:
d7:82:2b:ee:a7:22:c6:3a:f6:d0:6b:59:c3:03:4c:
0e:46:48:1b:e5:3e:82:a2:b1:ea:a7:58:de:a8:31:
35:72:9d:fd:a4:b3:a4:0f:aa:e0:28:ba:be:bb:59:
6f:e1:2b:7d:c0:5b:6a:1a:6a:40:24:95:bc:b1:6d:
06:af:37:0a:cb:54:c4:c9:22:e0:0c:12:93:0a:df:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:0F:C7:B8:E6:02:9F:50:AA:E7:4B:14:BF:B2:95:35:A6:C1:69
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:37:5a:36:70:0b:a4:ac:e9:6a:81:bf:d0:87:1e:d9:fd:21:
d8:3e:f6:3e:01:a5:09:22:cf:08:15:57:65:d3:3d:51:c1:54:
a8:c3:ba:ca:25:c6:23:0a:33:25:5c:52:e7:99:95:db:94:66:
1c:28:c3:2a:26:87:5f:d8:35:6a:7a:df:78:87:6e:60:29:15:
15:d9:9c:db:3c:82:dd:35:db:a9:6d:52:07:c5:05:dd:a4:69:
81:bd:8d:aa:2a:0b:96:01:7f:3b:c4:8c:3c:59:9a:7c:65:3a:
d3:a9:1c:7d:c3:1f:e0:f3:1d:bc:dd:22:a6:3d:f8:c9:a2:fc:
f6:9c:87:97:99:a7:96:e0:f2:84:40:f5:23:e3:b7:6f:1e:bc:
97:51:5d:77:10:0a:82:e5:01:7d:95:64:4c:d7:55:aa:1f:6d:
39:7f:22:73:fd:17:0d:d8:5d:71:96:d1:cf:dc:57:2f:28:82:
c7:ed:60:a7:4a:65:00:80:f6:20:10:c5:86:33:2f:ad:ad:41:
00:44:fe:85:85:d4:df:f2:a3:8a:e9:1f:db:18:bc:a1:3b:5e:
ae:3c:97:a7:0e:1c:68:36:99:4c:8b:46:6a:e2:87:83:09:8b:
5d:4d:81:ae:40:7d:01:16:1b:ca:17:70:81:fa:90:1f:2e:8c:
d0:fc:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:20:58 2025 by rpki-client