Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: 1+dBWkRBMXf4+siXUyQuMV68uBNGkVyQjMZ0sxXmUEw=
Subject key identifier: BE:39:26:FC:C7:67:01:8D:E8:88:B6:4B:16:41:95:50:DD:94:D9:4D
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 0199307E8B660774DAE7F97265BDCCBF1729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 160B
Signing time: Tue 09 Sep 2025 22:00:23 +0000
Manifest this update: Tue 09 Sep 2025 22:00:23 +0000
Manifest next update: Wed 10 Sep 2025 22:00:23 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: OPSRmNDqeOmdPbuVB3xbqI/7BO/b3KPgJTcc1OjJM5w=)
2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:8b:66:07:74:da:e7:f9:72:65:bd:cc:bf:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Sep 9 22:00:23 2025 GMT
Not After : Sep 10 22:00:23 2025 GMT
Subject: CN=be3926fcc767018de888b64b16419550dd94d94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:87:5c:76:7e:ed:5f:c5:50:33:71:6d:26:
de:8a:1c:fb:2c:97:9a:87:bb:2f:28:82:7d:fb:e4:
bd:be:90:35:cf:d2:4a:c0:5d:91:f2:9c:f0:74:19:
34:b7:d7:3c:71:a7:87:9f:a8:45:fa:cb:3d:49:2e:
b4:8b:28:a6:0f:18:95:2d:90:75:f3:6c:90:0e:98:
7a:d3:49:f7:7a:e2:ad:61:a5:81:7d:c3:f2:89:bb:
fa:4f:86:4b:c9:b3:8f:41:70:8f:4a:8a:29:8c:c4:
85:47:f0:5d:55:1b:e6:44:3d:36:8b:f6:84:ef:48:
5a:80:12:5e:8f:df:e3:8f:63:84:da:02:b0:aa:9a:
e4:7e:61:34:2f:c0:e2:16:b0:53:e2:88:77:e9:3c:
54:a3:f6:cf:05:ef:c2:f7:62:b5:a7:60:c7:17:dd:
02:b3:1a:34:b4:8d:3b:51:a5:ee:30:a1:dc:41:a2:
c1:e5:e8:bf:0c:1c:ec:61:d4:24:10:f0:aa:f3:f7:
1f:ac:ac:6f:05:e5:5e:d9:bc:d5:d6:6b:5c:7a:85:
23:e5:55:98:33:ff:6a:e6:00:14:82:4c:0a:00:cc:
4c:67:bb:a4:78:ff:cf:01:dd:c3:7d:5c:69:a8:0c:
88:c1:cc:32:61:1b:20:27:14:b0:14:a6:70:35:0a:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:26:FC:C7:67:01:8D:E8:88:B6:4B:16:41:95:50:DD:94:D9:4D
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:e7:58:a2:99:07:0b:8f:ac:ff:61:a8:20:eb:7b:84:c9:
a9:ae:b4:99:b5:72:f5:cd:78:37:5c:32:ad:78:3a:d5:be:d3:
e5:b1:de:25:fd:5f:5c:26:f1:57:37:0c:6c:81:9c:09:cd:e2:
09:33:f7:b2:2e:fa:6e:d8:c9:8b:a9:f6:f4:08:9d:f5:ac:46:
bb:6f:a6:be:fa:b3:8f:34:18:dd:aa:87:44:c4:76:2e:10:bf:
2a:73:19:01:48:0f:23:ce:f6:e9:c0:56:91:12:50:19:13:71:
9e:2a:00:68:e8:07:41:a9:b3:a6:10:dd:a4:d3:c4:9f:aa:5c:
d2:f9:4c:5d:95:74:65:e8:40:47:7a:ce:76:10:52:81:93:29:
b8:b4:4c:e2:3b:63:f3:8d:1b:57:d4:1a:6e:57:d8:ae:87:3b:
69:e0:25:74:0e:b2:61:94:e6:fa:b2:1b:29:74:d7:14:cb:3c:
23:7d:af:d9:c4:53:b6:94:ab:d2:97:3c:b7:47:1a:98:c1:b0:
03:5f:38:0f:c5:1c:5e:e6:0d:53:f2:91:28:32:31:b2:14:61:
47:47:fd:0f:83:76:d4:67:60:aa:78:27:90:7f:45:41:37:4f:
04:32:03:08:07:9a:25:7a:89:8c:d7:ff:6c:2e:6b:47:b6:f3:
aa:55:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:25:05 2025 by rpki-client