Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: 4206subb5EXlaBcpFuWyQ7GJuzVJBvcZ4DzYMUW4boo=
Subject key identifier: D8:93:78:45:A4:BF:F6:9C:95:A2:C9:B7:75:B1:0A:47:7D:1F:B7:75
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0197591207670F3B5EC7CF288AD4EFDF814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0333
Signing time: Tue 10 Jun 2025 09:00:42 +0000
Manifest this update: Tue 10 Jun 2025 09:00:42 +0000
Manifest next update: Wed 11 Jun 2025 09:00:42 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: crlgN3Mo8gCbPEvuOBIK5ATMEJdGy5nViAsBg0cGD6w=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:07:67:0f:3b:5e:c7:cf:28:8a:d4:ef:df:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Jun 10 09:00:42 2025 GMT
Not After : Jun 11 09:00:42 2025 GMT
Subject: CN=d8937845a4bff69c95a2c9b775b10a477d1fb775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:b5:36:cf:1a:0f:39:3c:67:da:f0:43:82:
a3:07:1d:0c:2f:85:34:fe:42:25:90:d1:0a:41:b4:
8b:49:ba:41:38:56:b0:1e:f2:70:11:bb:55:3c:32:
d3:b9:86:0e:23:4f:9b:6e:52:60:df:48:03:e4:e5:
2c:ec:25:dd:9e:02:b3:ab:e4:14:b7:23:12:41:ac:
10:12:4d:e3:46:df:cc:86:28:c2:69:29:b2:b1:6d:
4c:d5:b3:cc:e6:aa:8f:76:08:ec:45:e3:f8:7f:f0:
25:bb:d3:40:15:b6:4c:e7:a4:a2:c8:de:fe:b1:31:
64:c2:ce:bd:a0:45:5b:1f:cd:5b:80:72:39:ac:23:
5b:14:6e:0e:39:df:32:0b:04:4e:79:e1:bc:6d:ca:
46:a7:c2:fd:b5:f2:41:99:e4:9e:d0:5a:d3:7b:08:
28:34:7e:b3:02:e2:22:c8:d8:da:46:75:a3:a3:43:
40:6e:bc:bd:5b:be:b1:cf:cc:49:71:28:4c:64:2d:
48:00:2b:f8:24:04:74:9a:97:1c:d6:e4:2a:6d:e7:
a8:ca:41:19:de:69:1d:7b:43:30:55:11:7f:99:61:
d8:df:84:ad:3e:b7:ee:07:f8:e1:5a:18:cc:6f:1b:
aa:8e:a8:40:e9:76:b8:f8:70:35:61:0e:77:ed:0d:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:78:45:A4:BF:F6:9C:95:A2:C9:B7:75:B1:0A:47:7D:1F:B7:75
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:a6:9f:bd:0b:3d:13:7f:ca:5b:c5:89:c3:f7:68:d5:d8:
0f:ed:2c:81:18:f8:7a:8b:32:a9:dc:e5:b7:3c:f6:38:87:70:
ac:77:55:24:d8:32:1d:8c:45:2d:d6:25:dd:f9:92:f5:0f:57:
1c:9e:93:7c:c1:73:c0:23:d6:f6:1f:c3:5c:a4:d7:fb:7c:16:
52:3f:ec:3f:4a:3e:43:fe:35:dc:21:28:54:e8:0b:07:c2:c1:
96:da:c1:47:d5:93:14:b8:ef:dd:43:a5:3c:44:5e:1e:87:ad:
a4:e1:c7:00:58:ed:d8:dc:4d:c1:02:9a:68:17:08:49:41:ea:
2d:5f:07:0c:bd:48:8c:19:99:c4:1d:de:00:75:d5:c3:70:9b:
2e:2d:c5:71:fa:f6:ee:4d:ad:0f:a5:46:df:15:1f:fe:57:55:
29:9b:f2:ee:4e:bc:f0:11:c1:70:e0:b3:ee:75:de:65:93:e1:
c8:b6:91:3f:14:fa:5c:57:30:1e:d8:13:ec:9f:e6:8e:a9:01:
ab:77:d1:b6:27:2a:81:c8:67:31:44:ec:fd:05:dc:6c:61:21:
c3:82:3e:fe:88:60:65:53:5f:03:d6:da:c8:17:68:9e:d8:50:
7a:08:e8:f7:d3:f6:2b:5a:94:30:58:fe:9a:10:e4:5c:38:10:
5a:d4:e9:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEgdnDztex88oitTv34FMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4
MDE5NDkwHhcNMjUwNjEwMDkwMDQyWhcNMjUwNjExMDkwMDQyWjAzMTEwLwYDVQQD
EyhkODkzNzg0NWE0YmZmNjljOTVhMmM5Yjc3NWIxMGE0NzdkMWZiNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZe1Ns8aDzk8Z9rwQ4KjBx0ML4U0
/kIlkNEKQbSLSbpBOFawHvJwEbtVPDLTuYYOI0+bblJg30gD5OUs7CXdngKzq+QU
tyMSQawQEk3jRt/MhijCaSmysW1M1bPM5qqPdgjsReP4f/Alu9NAFbZM56SiyN7+
sTFkws69oEVbH81bgHI5rCNbFG4OOd8yCwROeeG8bcpGp8L9tfJBmeSe0FrTewgo
NH6zAuIiyNjaRnWjo0NAbry9W76xz8xJcShMZC1IACv4JAR0mpcc1uQqbeeoykEZ
3mkde0MwVRF/mWHY34StPrfuB/jhWhjMbxuqjqhA6Xa4+HA1YQ537Q38VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiTeEWkv/aclaLJt3WxCkd9H7d1MB8GA1UdIwQY
MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt
M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw
LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbemn70L
PRN/ylvFicP3aNXYD+0sgRj4eosyqdzltzz2OIdwrHdVJNgyHYxFLdYl3fmS9Q9X
HJ6TfMFzwCPW9h/DXKTX+3wWUj/sP0o+Q/413CEoVOgLB8LBltrBR9WTFLjv3UOl
PEReHoetpOHHAFjt2NxNwQKaaBcISUHqLV8HDL1IjBmZxB3eAHXVw3CbLi3Fcfr2
7k2tD6VG3xUf/ldVKZvy7k688BHBcOCz7nXeZZPhyLaRPxT6XFcwHtgT7J/mjqkB
q3fRticqgchnMUTs/QXcbGEhw4I+/ohgZVNfA9bayBdonthQegjo99P2K1qUMFj+
mhDkXDgQWtTpQg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:50:28 2025 by rpki-client